Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa
File:                     323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa (raw, json)
Hash identifier:          WOOvcegenPO0pWbssDIyhsT22COK0i51bSacfgj7BeM=
Subject key identifier:   5C:C0:B5:EB:C1:D7:E8:25:8D:C0:8A:09:C4:81:ED:7A:85:B7:C5:A7
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       7F678791597F94B44EE608891EA25E16707F2691
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:13:17 +0000
ROA not before:           Tue 04 Feb 2025 18:08:17 +0000
ROA not after:            Tue 03 Feb 2026 18:13:17 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9984::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:87:91:59:7f:94:b4:4e:e6:08:89:1e:a2:5e:16:70:7f:26:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:17 2025 GMT
            Not After : Feb  3 18:13:17 2026 GMT
        Subject: CN=5CC0B5EBC1D7E8258DC08A09C481ED7A85B7C5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:f9:71:fd:10:6d:68:eb:34:be:63:c6:20:
                    7d:fa:f9:47:20:27:01:1e:da:6b:e2:dc:05:93:e7:
                    6b:f9:3a:59:4c:e8:90:a0:23:d4:b4:e5:83:cf:77:
                    1d:8c:3a:75:f0:65:3d:fd:b2:3e:ed:fb:9d:39:95:
                    91:ce:c3:3a:a1:16:be:39:8b:ba:bd:eb:30:5f:4f:
                    86:cd:48:df:36:21:37:b6:f4:89:d7:68:58:cb:f7:
                    0b:a8:31:5d:b2:bb:e5:f2:ea:48:7a:a3:45:99:6e:
                    1c:72:4e:0c:e6:2b:80:cc:0c:f6:8d:b1:20:28:49:
                    62:45:ec:34:ba:5a:40:b8:33:73:6b:04:c8:66:65:
                    1c:9d:e2:a5:a8:84:a5:38:8c:b1:73:76:18:3f:39:
                    bf:1c:01:ef:0c:a0:f0:45:ea:20:e4:8f:d2:c2:e7:
                    66:4a:37:87:28:b1:d6:d6:5d:38:82:b2:cb:d9:99:
                    bc:ca:dc:34:2f:95:ff:d4:6b:9c:36:48:80:23:e8:
                    7c:e7:19:03:b4:00:48:5e:7e:bf:4d:92:13:0f:52:
                    6b:01:ed:0b:32:bf:dd:0b:0a:07:7c:65:65:2e:a8:
                    f8:70:c0:37:f0:12:57:42:cf:3f:93:1f:d4:28:a5:
                    ea:33:08:38:cb:4a:5c:8c:29:6e:be:39:a9:32:26:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:B5:EB:C1:D7:E8:25:8D:C0:8A:09:C4:81:ED:7A:85:B7:C5:A7
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9984::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:f4:a9:b5:a7:b6:f8:29:f2:cc:46:b1:d9:a0:e0:00:04:
         38:eb:cb:5c:6d:93:44:27:0c:89:9f:6b:44:d7:9b:21:a2:da:
         42:e0:bc:75:ef:2e:ca:c6:b1:62:8e:67:74:32:a3:23:8a:24:
         ae:47:58:5a:93:14:73:7c:63:14:4c:db:f8:49:33:75:f6:28:
         4d:dd:fa:89:58:99:3e:ed:ff:58:65:ac:25:01:f3:9d:9e:5b:
         55:fd:bb:87:49:14:11:78:be:9b:7f:4c:ca:76:1d:9b:08:fa:
         66:82:79:3f:d2:59:ad:f4:b1:90:ef:af:1c:f6:37:f1:40:ef:
         bc:4c:f8:dd:cc:01:92:8a:2c:75:86:d1:d2:2c:2d:ae:c8:fe:
         bf:40:8a:27:13:41:64:39:41:7d:d0:ff:30:8c:e8:a2:59:99:
         5f:1f:67:41:56:4f:2c:33:8b:a5:5f:34:f2:39:42:c0:8a:3d:
         14:f8:f9:c5:51:53:f8:cf:43:01:06:ec:8f:87:de:41:cf:bc:
         75:b6:d3:ed:fc:c7:47:0a:30:a3:b6:7d:46:c9:8b:3a:a0:02:
         09:1e:8f:37:60:9f:93:81:34:4e:a7:9c:ad:f2:dc:9a:f2:95:
         7a:f4:b5:a4:d4:01:d2:40:bd:e3:68:d9:8d:ca:29:85:d9:88:
         d3:13:3a:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----