Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa
File:                     323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa (raw, json)
Hash identifier:          +NAHrz3J/2WoRZxPUL8OO1JtOywnLdTHy2AK1EbK9Xg=
Subject key identifier:   2F:57:20:63:4E:AB:F8:41:39:DB:83:2A:CF:3D:95:C7:E4:5F:DA:CF
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       3E10ECF27EDD81BDF3111760A6FDBE8CC0044C10
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa
Signing time:             Tue 04 Feb 2025 23:09:00 +0000
ROA not before:           Tue 04 Feb 2025 23:04:00 +0000
ROA not after:            Tue 03 Feb 2026 23:09:00 +0000
asID:                     272978
IP address blocks:        2803:b0e0:801a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:ec:f2:7e:dd:81:bd:f3:11:17:60:a6:fd:be:8c:c0:04:4c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 23:04:00 2025 GMT
            Not After : Feb  3 23:09:00 2026 GMT
        Subject: CN=2F5720634EABF84139DB832ACF3D95C7E45FDACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:9f:36:6d:b4:c7:49:bc:50:e9:1b:44:c3:
                    20:e0:d7:b7:f8:f5:ff:82:a0:00:76:a9:05:8d:f0:
                    2d:a5:66:f6:09:4e:80:a2:13:8d:39:de:c7:d5:14:
                    03:52:0b:21:78:cb:75:72:19:38:bb:3b:ba:9b:16:
                    cf:c8:1b:26:65:28:9f:08:c6:df:a0:b9:56:9f:77:
                    10:ce:f4:4c:95:49:75:4b:1d:8b:f1:d1:7c:52:e7:
                    c1:0f:db:a5:3b:98:fa:1e:a3:a1:33:6a:f9:79:35:
                    5b:51:83:61:a0:9c:be:d8:03:0d:b2:46:6d:ba:b3:
                    3c:e8:28:53:50:10:71:71:58:e3:3f:64:27:09:0c:
                    39:10:1c:6b:69:90:4c:ba:d2:48:38:7e:f4:bb:98:
                    91:a3:e6:e5:28:2e:62:8f:ad:8a:66:6d:c1:47:14:
                    fd:a8:21:f2:3a:c6:07:5d:70:77:67:fd:b6:1e:4f:
                    45:6e:60:7d:d3:59:17:41:2c:d2:57:b2:6e:89:45:
                    fb:b4:5b:b4:09:55:b3:e5:07:13:2e:63:6a:ae:b2:
                    70:54:aa:c2:01:2a:4a:14:8b:68:c1:d5:6f:ef:03:
                    5b:aa:a3:ec:15:68:cb:16:be:f0:b0:dd:00:d1:4d:
                    27:72:72:7a:6c:d2:f2:6a:72:aa:28:7a:e5:ac:75:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:57:20:63:4E:AB:F8:41:39:DB:83:2A:CF:3D:95:C7:E4:5F:DA:CF
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031613a3a2f34382d3438203d3e20323732393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:801a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:12:cb:d1:6f:db:50:82:42:1c:ea:d9:66:33:f1:27:f3:
         94:05:96:a8:20:87:8f:0b:af:14:7a:b0:22:ae:c8:e6:9d:24:
         f6:3c:2a:96:cc:dd:d3:d3:29:3d:44:6a:48:4b:5c:0e:66:ba:
         31:d4:87:ed:0b:87:19:56:ec:be:b9:21:6a:78:67:43:10:01:
         57:9f:a1:e4:f7:d7:57:d7:0e:13:8b:e2:03:b6:8e:ef:74:c7:
         0a:2b:93:18:d3:83:7e:9f:89:cc:c8:4b:2a:83:11:2b:89:ff:
         c7:92:df:f1:f1:d3:1d:60:e8:83:01:aa:e5:b3:68:12:fd:04:
         d9:f5:78:6b:d8:0b:a0:1e:db:9f:b6:20:13:d9:ef:9b:37:04:
         eb:61:46:f5:48:de:0c:fb:d6:47:31:c7:2c:be:e0:cd:1b:43:
         93:a6:f7:a0:81:75:4b:e4:65:64:3c:60:5f:7c:54:0e:5f:db:
         9e:57:4c:2d:8b:a6:26:8c:b7:16:c1:eb:99:46:73:b6:94:d4:
         ea:b8:ca:71:d4:70:90:f0:98:89:00:82:90:c9:13:96:ce:7e:
         e8:03:28:06:b6:54:7b:8c:02:06:17:24:6f:8d:cc:97:6d:35:
         7e:53:c1:b6:5b:7a:c0:7d:e0:99:6f:69:92:13:9d:7d:da:e1:
         6e:0d:39:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----