Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963393a3a2f34382d3438203d3e20323733303834.roa
File:                     323830333a623065303a393963393a3a2f34382d3438203d3e20323733303834.roa (raw, json)
Hash identifier:          QDCJ2s3YID6jZRAiSJGt/INUqp/Co4EIa2U2v/2OpIs=
Subject key identifier:   45:4A:2B:8B:82:31:BF:CA:48:BC:DD:F5:DE:AB:B8:99:F8:02:04:84
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       6DD45C9DC783489A25568E9D9600FC354814D696
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963393a3a2f34382d3438203d3e20323733303834.roa
Signing time:             Fri 07 Mar 2025 18:11:29 +0000
ROA not before:           Fri 07 Mar 2025 18:06:29 +0000
ROA not after:            Fri 06 Mar 2026 18:11:29 +0000
asID:                     273084
IP address blocks:        2803:b0e0:99c9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d4:5c:9d:c7:83:48:9a:25:56:8e:9d:96:00:fc:35:48:14:d6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  7 18:06:29 2025 GMT
            Not After : Mar  6 18:11:29 2026 GMT
        Subject: CN=454A2B8B8231BFCA48BCDDF5DEABB899F8020484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:db:39:23:08:74:e3:24:c4:5f:a2:4e:1b:
                    c8:72:41:7b:b5:eb:c5:5e:91:7e:4e:f9:ab:76:70:
                    81:b7:9b:c1:67:4c:c2:41:79:af:8c:54:6f:dc:34:
                    ba:2a:16:d8:57:0d:50:10:10:7b:bc:8e:cb:65:64:
                    c3:6e:40:47:d2:9e:09:32:40:c1:e1:50:0c:93:fb:
                    e7:b2:4a:fe:e1:b2:e9:95:61:85:8b:b2:b7:8f:0b:
                    9b:c5:9e:a7:27:fc:29:2b:3e:41:39:fd:5e:e5:d4:
                    31:fb:23:44:06:2c:11:14:a4:e5:39:a1:5d:c2:03:
                    a7:ba:0a:d5:38:32:bc:f9:17:d9:3e:88:c3:ac:12:
                    84:ca:5e:91:c8:6c:d6:28:df:d1:a5:30:b3:b3:7b:
                    20:74:53:a7:21:f0:dd:f8:d3:df:16:6a:f4:da:24:
                    6e:44:be:66:1a:09:f8:88:37:01:4f:93:d6:4c:2e:
                    68:e8:33:ec:fb:98:7e:c6:09:d1:20:3c:96:47:59:
                    1e:5f:89:81:51:6a:e6:e7:f6:6e:0b:2d:da:c8:04:
                    cc:85:bb:26:1a:b5:54:65:70:39:d8:5f:1d:2f:d8:
                    39:ad:56:12:c3:28:4f:be:07:7b:12:50:05:0b:1b:
                    fe:71:08:d3:f3:cf:3d:93:d3:eb:a2:af:6b:83:26:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4A:2B:8B:82:31:BF:CA:48:BC:DD:F5:DE:AB:B8:99:F8:02:04:84
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963393a3a2f34382d3438203d3e20323733303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:68:86:d5:1f:3e:fa:ad:a5:2f:c1:95:6d:ab:00:e6:71:
         71:b5:6e:e7:8b:90:25:26:cb:f1:81:c6:dd:3a:5a:b4:6d:28:
         46:fe:80:6b:62:a1:e4:8f:87:13:4c:55:d8:3c:1d:87:e5:f5:
         ef:13:7f:f1:03:e6:ae:59:61:a5:43:d6:f1:d8:fc:a2:84:35:
         22:0e:b0:83:4a:c1:bf:e1:47:fb:f8:e0:10:f0:33:30:2a:65:
         fb:75:52:eb:fa:db:d5:b0:c6:8f:e5:28:4f:a3:20:38:4d:ed:
         92:c2:59:ce:fc:a4:32:55:02:1b:01:cd:31:e2:72:21:6b:cf:
         94:d6:f9:cc:d8:2b:92:de:59:3e:df:82:c6:70:28:e2:a4:4f:
         54:ec:07:a9:c6:53:af:31:2e:df:7e:dd:25:98:d6:6b:46:c4:
         e3:15:83:08:22:de:5f:d7:99:41:89:1b:8d:f0:13:fc:77:ed:
         56:cf:e6:0a:c5:33:3a:f5:d9:d3:37:03:9e:bc:f5:b4:48:0d:
         00:9a:9d:26:d7:71:15:d8:05:21:a4:6a:8b:30:10:57:80:55:
         10:0c:62:2c:a3:4f:71:5a:6d:8e:06:54:60:9c:e6:5d:63:75:
         5f:8d:24:b8:5c:77:b6:42:52:90:0b:c6:64:64:69:bd:77:c6:
         96:fe:12:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----