Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa
File:                     323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa (raw, json)
Hash identifier:          RHxdQdSylZf6ZSw1+KN7VHHVD3qelHBrYCZpP5BmwKs=
Subject key identifier:   E0:09:7A:C1:F9:10:73:8C:4D:2E:D9:AC:8E:20:01:0C:7D:9E:3C:CF
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       34B7C7428E313273A37CA50C2F7623024D05BE83
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa
Signing time:             Tue 04 Feb 2025 18:13:15 +0000
ROA not before:           Tue 04 Feb 2025 18:08:15 +0000
ROA not after:            Tue 03 Feb 2026 18:13:15 +0000
asID:                     272978
IP address blocks:        2803:b0e0:99c8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:c7:42:8e:31:32:73:a3:7c:a5:0c:2f:76:23:02:4d:05:be:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:15 2025 GMT
            Not After : Feb  3 18:13:15 2026 GMT
        Subject: CN=E0097AC1F910738C4D2ED9AC8E20010C7D9E3CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:aa:15:5a:62:8e:ba:a3:a0:d4:e2:42:67:
                    ea:ff:30:ad:93:5d:03:d3:df:d3:56:c4:d8:cc:94:
                    6a:c9:86:6e:5b:b0:8c:01:94:06:6c:16:72:8f:6b:
                    8a:49:69:f0:06:b7:6e:da:63:a4:89:87:1c:80:36:
                    af:1b:7d:08:61:72:70:87:7a:9f:b7:60:e0:48:70:
                    76:6d:c9:68:ec:a3:d7:f8:43:1d:b1:e9:17:9c:f9:
                    72:96:17:30:e8:14:cb:ae:0e:0d:51:80:dc:30:83:
                    61:80:0e:97:3c:af:2b:35:86:28:ff:55:d0:7d:8d:
                    99:d0:9c:22:ba:d1:5f:08:41:a0:de:ba:18:bf:95:
                    37:b8:e4:78:d6:58:ff:ce:8c:f4:71:a4:e5:9d:65:
                    78:c4:cf:15:4d:91:20:6c:46:25:4c:4e:d0:25:4e:
                    49:9b:79:5f:6d:8c:bf:71:a8:43:b9:38:8f:99:18:
                    fe:d9:b7:e5:d4:5f:c7:a0:96:8a:d4:7a:dc:7e:58:
                    ee:91:d0:4e:b7:b4:2d:7e:2d:9b:79:97:a9:f5:00:
                    7f:4f:d9:8c:02:14:08:05:44:ae:99:dd:9b:da:e7:
                    b3:c4:83:55:60:5a:9c:c8:c8:9c:03:47:a3:9e:35:
                    fe:3e:bc:64:74:e2:2c:15:75:b8:fa:30:a9:4c:6a:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:09:7A:C1:F9:10:73:8C:4D:2E:D9:AC:8E:20:01:0C:7D:9E:3C:CF
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963383a3a2f34382d3438203d3e20323732393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:a9:24:4a:7c:e1:c6:24:db:46:7f:f4:29:84:f5:24:31:
         60:6e:19:26:da:72:74:1e:e0:6d:19:f9:c2:c8:79:3b:7f:29:
         1b:b7:6d:1f:8d:40:7c:1e:aa:ee:12:f8:17:8b:28:bd:b4:6e:
         91:d0:73:e3:a2:29:1e:55:1e:b9:e6:b6:1f:a9:70:74:0d:bd:
         76:9f:18:9d:c2:9a:4e:a2:34:59:b8:e1:33:ea:0c:fb:20:7f:
         03:10:06:e9:35:7d:a7:bb:40:c9:1a:83:ad:96:6a:e0:1c:1a:
         d1:cb:23:d9:c8:0f:ca:d3:9f:38:1a:f5:75:66:e0:9d:e1:d6:
         45:db:7b:7d:ed:32:b9:ad:b3:50:44:5d:fb:97:8c:2f:84:b7:
         bb:f9:d2:55:34:78:84:9c:99:55:6d:ed:d0:5b:61:58:ef:cc:
         22:dd:19:1e:d0:40:41:35:c3:7f:e1:35:d7:84:33:5d:45:ee:
         b0:6e:39:40:eb:f2:6b:6b:3f:3e:5a:80:49:22:9e:fb:ce:c4:
         5d:1e:31:b8:72:ce:be:ea:6c:be:09:f0:62:c2:2d:6c:58:b8:
         4e:56:22:a5:e1:b0:14:4e:33:e9:9d:ae:36:99:c0:e6:ce:39:
         3a:1f:a5:a2:d0:df:b1:0e:ec:7f:ac:ed:85:7c:2f:40:1d:cc:
         78:7d:23:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----