Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938333a3a2f34382d3438203d3e20323639383632.roa
File:                     323830333a623065303a393938333a3a2f34382d3438203d3e20323639383632.roa (raw, json)
Hash identifier:          r6/iO+36o1vdm2CtWkdB9w5ardZTkblHHdeeJUCqs3g=
Subject key identifier:   9E:46:1B:21:B2:91:53:35:69:F4:E3:61:B0:30:62:1C:53:A4:3B:BD
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       37B542F8FBF43C0245C2831EDE2ABDD10AB29E36
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938333a3a2f34382d3438203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:13:19 +0000
ROA not before:           Tue 04 Feb 2025 18:08:19 +0000
ROA not after:            Tue 03 Feb 2026 18:13:19 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9983::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b5:42:f8:fb:f4:3c:02:45:c2:83:1e:de:2a:bd:d1:0a:b2:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:19 2025 GMT
            Not After : Feb  3 18:13:19 2026 GMT
        Subject: CN=9E461B21B291533569F4E361B030621C53A43BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:a3:f6:51:a6:39:e2:50:e6:e8:98:b1:66:
                    f4:ba:a7:87:81:96:d9:af:c6:d0:8a:cc:d6:79:bd:
                    02:06:9c:8d:b9:25:bb:74:e2:47:e3:60:32:67:aa:
                    2b:31:c8:3f:54:f5:ad:55:38:56:9a:f2:b2:12:9a:
                    ea:b6:d3:f1:fc:9e:1b:86:40:ad:6f:0d:ec:c4:c5:
                    da:31:89:94:a9:91:76:52:87:62:42:85:d5:5d:06:
                    85:83:48:05:84:03:a5:87:07:96:a8:33:ca:f2:86:
                    91:0d:79:2b:b1:9e:d5:0c:57:44:98:29:d8:42:b9:
                    6d:e7:08:b3:e5:93:81:ca:36:07:67:b2:86:73:c6:
                    b4:76:f2:e9:c7:e7:f8:71:38:a2:d9:13:a4:2f:ff:
                    3a:85:ee:1d:db:bc:c6:39:cb:d9:91:03:d4:86:ff:
                    c5:aa:64:39:76:c1:f8:18:60:1a:a3:08:fd:0e:38:
                    64:c8:ef:27:6b:49:d8:c6:15:9f:18:e9:b4:c5:9e:
                    1d:68:ad:9c:03:47:18:e1:30:19:95:41:57:98:9d:
                    1d:be:6c:8c:17:f6:2e:bc:fd:87:7e:0a:a1:6c:62:
                    5b:46:39:8d:c4:28:70:cf:20:40:00:07:1a:9a:36:
                    d5:36:17:85:ca:dc:97:15:6f:2a:48:5e:62:00:a6:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:46:1B:21:B2:91:53:35:69:F4:E3:61:B0:30:62:1C:53:A4:3B:BD
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938333a3a2f34382d3438203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9983::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:34:73:1d:8a:b8:41:1e:98:0a:85:f6:be:46:30:22:09:ce:
         4b:fc:61:6a:fd:02:97:0f:3c:a4:e6:12:d7:aa:f5:21:d9:cb:
         01:bb:7b:5c:18:e2:2b:48:6f:81:a6:01:ff:e9:87:e8:b8:43:
         39:28:d5:80:27:e5:31:08:c1:6c:33:26:9b:39:51:21:f5:b7:
         68:59:8c:99:65:ea:c2:05:13:0a:c9:71:c5:59:ff:a7:b7:ca:
         28:39:d0:0d:a9:74:29:ec:49:55:e0:25:6f:21:d6:4e:e3:57:
         d6:54:da:84:41:05:7d:e0:be:c6:b4:f7:d6:4c:93:3b:89:e5:
         f8:6c:c6:04:89:19:b1:08:59:26:df:c9:b9:44:df:4e:94:e8:
         7f:06:4c:86:3d:45:95:62:0e:13:66:1f:eb:d9:e3:71:11:af:
         17:3d:b4:fc:44:b2:72:81:36:be:a2:a0:95:5b:c0:18:cd:d7:
         5f:19:fb:67:b4:47:85:18:39:cc:8f:2b:fa:93:e0:7b:dc:f0:
         cc:e4:39:f1:b2:42:46:a5:e1:df:de:a6:62:45:a5:4e:68:2a:
         73:80:48:7d:e0:4a:71:67:17:c5:9a:a6:74:ac:7f:a3:cf:f0:
         11:1c:f5:09:21:3c:62:67:a3:e9:23:f2:fd:e3:31:89:a1:c2:
         99:d6:db:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----