Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa
File:                     323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa (raw, json)
Hash identifier:          HRDiq+CPWzj9Clv43tqHOL0AJ9tvhKxzQQm2BMuPrnA=
Subject key identifier:   46:F3:30:2A:88:20:6E:74:5C:89:59:F0:D2:F8:DB:5E:D2:6E:7E:FD
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       52407A5287F0F94117A7712DED6960A74139D1B3
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:13:17 +0000
ROA not before:           Tue 04 Feb 2025 18:08:17 +0000
ROA not after:            Tue 03 Feb 2026 18:13:17 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9989::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:40:7a:52:87:f0:f9:41:17:a7:71:2d:ed:69:60:a7:41:39:d1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:17 2025 GMT
            Not After : Feb  3 18:13:17 2026 GMT
        Subject: CN=46F3302A88206E745C8959F0D2F8DB5ED26E7EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:5a:b0:64:9e:82:de:08:a3:0f:1e:2f:f2:
                    84:3d:32:0d:9e:7a:3d:f1:70:5a:0f:61:9f:3c:42:
                    86:9e:c5:c5:75:32:fc:18:d1:55:0b:70:d0:9c:8b:
                    71:c1:c5:58:a3:5d:06:7a:cf:5e:a6:25:7b:6b:1d:
                    db:6b:45:2f:de:26:76:7e:1b:d0:50:78:86:17:dc:
                    94:95:91:15:45:a0:42:84:d0:da:08:cb:87:d0:5a:
                    05:c7:8f:07:68:78:7d:5f:77:be:51:39:85:40:25:
                    28:38:86:7d:d9:98:47:75:2c:2a:fb:b9:82:49:dc:
                    9e:fe:d9:ee:80:bf:6a:f8:ab:c4:d8:18:b8:77:33:
                    97:04:c5:df:d4:46:3c:e2:7d:c9:25:c3:ec:32:d6:
                    ea:a7:65:6b:51:f6:24:1c:91:3a:9f:b4:6f:68:09:
                    e4:1f:5e:1b:3c:e3:4a:13:89:02:b7:54:ab:3f:34:
                    c1:c8:4a:aa:c0:de:04:8f:23:83:d7:4f:11:a5:95:
                    ce:ed:26:64:69:85:fc:13:ed:ef:5a:cc:dc:9a:f7:
                    76:81:48:9a:e3:3b:70:85:59:4f:03:1e:45:40:fe:
                    57:2e:d0:5e:04:6d:c0:d3:5e:ae:7f:d8:5d:57:78:
                    3d:2e:8c:c5:ef:d6:06:99:a1:1c:7e:8c:4f:5b:0f:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:30:2A:88:20:6E:74:5C:89:59:F0:D2:F8:DB:5E:D2:6E:7E:FD
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938393a3a2f34382d3438203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9989::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:c9:b7:60:01:ff:c4:2b:2c:bb:23:ef:0a:79:84:ad:14:db:
         ee:8d:91:9f:01:0f:be:aa:2c:88:5b:27:3a:dc:c1:a0:23:77:
         c9:31:74:4e:1a:c2:96:d1:19:f8:f0:31:61:c5:cc:03:77:89:
         7e:a0:54:25:6b:44:36:11:d5:a6:cf:61:45:93:76:3a:07:b5:
         30:6b:91:7d:e7:0f:0b:2e:c5:02:8f:6c:bb:e7:6a:36:30:b0:
         91:ba:3b:82:c7:19:4d:ab:83:11:fe:57:bf:9f:b2:f4:21:3a:
         91:68:49:44:a8:97:90:b1:f9:90:cf:60:ab:82:6f:38:31:05:
         0b:0c:6c:88:ed:09:27:6a:22:b6:62:61:be:f4:aa:81:c5:2f:
         4e:8c:10:43:e7:69:c2:95:54:cb:bc:ac:0c:2f:28:2f:94:72:
         27:fe:db:19:74:ef:6e:dd:e8:90:9f:31:d4:62:40:c0:6a:2b:
         fc:e0:f5:f1:ed:9d:52:30:bc:8c:96:c2:a5:02:a4:a6:af:fc:
         97:5d:18:d8:0c:3b:2e:79:75:2b:9e:4b:9d:2b:ed:00:30:4c:
         99:d7:70:5a:e5:a9:95:37:f1:c2:45:3d:cf:76:02:6f:fc:ae:
         a1:75:4c:31:c6:32:77:a7:ba:c4:2c:9b:b5:a6:b4:87:76:6c:
         b7:cd:1b:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----