Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          Ud/prbBJXRCXE9Ir0l3tpB4a8Sud2SBKTen0Fa4CHnY=
Subject key identifier:   64:AC:F1:45:D9:A1:E3:86:1E:90:81:BB:68:B8:92:F1:E2:02:0C:42
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       3CF76590ED6551FCC7EE725AC3AFCE5A32C7AD44
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 05 Mar 2024 18:03:47 +0000
ROA not before:           Tue 05 Mar 2024 17:58:47 +0000
ROA not after:            Tue 04 Mar 2025 18:03:47 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8013::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:65:90:ed:65:51:fc:c7:ee:72:5a:c3:af:ce:5a:32:c7:ad:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:47 2024 GMT
            Not After : Mar  4 18:03:47 2025 GMT
        Subject: CN=64ACF145D9A1E3861E9081BB68B892F1E2020C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:ec:83:90:a6:91:05:5d:21:54:07:01:88:
                    dc:6d:88:d1:35:9b:4f:4c:a4:c9:e3:6e:fd:dd:57:
                    8f:8d:1c:c2:68:2e:07:5e:ae:3b:7f:33:0c:df:38:
                    a4:c4:a7:6c:9f:6e:dd:ec:2a:1c:8d:23:49:01:c2:
                    c1:4a:82:93:11:54:4a:4a:16:10:8a:7d:35:07:21:
                    82:64:9c:86:9b:30:94:37:79:72:f9:7d:fc:56:06:
                    eb:54:b0:ae:dd:8e:8e:b9:15:d0:96:ff:da:2f:6b:
                    98:90:59:ee:ff:68:b6:79:31:81:78:20:81:cc:ba:
                    d6:d8:80:d3:03:a1:9f:14:b1:85:34:a4:eb:00:b9:
                    8a:e3:d6:29:2b:79:1d:37:42:29:74:67:9a:9e:0c:
                    03:70:42:d8:f2:8c:65:a3:45:b6:dd:23:05:39:d7:
                    a7:b1:a5:9e:a9:fc:51:31:25:8b:82:17:22:7f:72:
                    d6:06:79:2c:39:58:a4:38:1e:07:62:38:48:8f:93:
                    22:92:8f:62:4c:3a:55:19:ca:d1:f9:b2:3d:0f:41:
                    2e:7c:96:41:03:17:73:5f:e2:73:26:1b:56:3a:5e:
                    52:3c:c2:64:c9:37:c9:8f:f6:d9:4a:1a:74:98:ba:
                    36:46:62:f4:b0:05:f5:44:d2:78:6a:92:2c:6c:26:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:F1:45:D9:A1:E3:86:1E:90:81:BB:68:B8:92:F1:E2:02:0C:42
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031333a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:00:f4:30:5c:fa:4f:22:fd:fb:22:8b:0f:93:cc:d7:f1:
         55:2d:cb:dc:a5:b3:94:cb:55:03:01:66:b6:85:a5:b7:05:dc:
         7b:fa:da:f2:2a:e5:0a:e8:ea:e3:80:c6:e8:63:f7:89:6d:25:
         0e:4c:e0:35:35:05:64:56:15:27:f1:0b:d3:aa:0e:64:4c:3f:
         b5:69:16:5f:67:dc:21:aa:c0:0a:c0:36:cb:2b:e8:7d:4d:74:
         ee:36:4d:a9:d4:d7:0a:b7:f9:83:b0:8c:e1:3a:92:fa:d0:42:
         f8:ed:aa:23:81:d4:e6:19:be:2c:9a:32:ad:f4:2e:08:8f:de:
         88:5e:c4:da:fe:2e:7d:76:88:9f:dd:ca:39:f7:91:60:bc:19:
         f2:0a:ff:82:57:bd:3a:c5:ff:0d:8a:21:99:6a:5a:5d:8f:4f:
         94:eb:be:71:cd:94:f4:4b:1b:4d:94:bf:a1:31:6f:98:d9:ee:
         63:f5:cb:e0:84:a3:b0:bd:22:1e:2d:e2:ec:0a:f5:c1:e1:c5:
         d1:ad:50:65:ab:b0:10:3c:bf:50:0c:cf:c6:35:20:cc:c6:a7:
         68:b6:30:3c:64:b1:60:80:69:42:fe:0d:a2:df:d3:21:95:92:
         fd:b0:e1:ee:78:75:c9:4b:cb:41:38:af:16:09:1d:d1:f7:36:
         be:70:47:79
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUPPdlkO1lUfzH7nJaw6/OWjLHrUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNDAzMDUxNzU4NDdaFw0yNTAzMDQxODAzNDdaMDMxMTAvBgNV
BAMTKDY0QUNGMTQ1RDlBMUUzODYxRTkwODFCQjY4Qjg5MkYxRTIwMjBDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXp+yDkKaRBV0hVAcBiNxtiNE1
m09MpMnjbv3dV4+NHMJoLgderjt/MwzfOKTEp2yfbt3sKhyNI0kBwsFKgpMRVEpK
FhCKfTUHIYJknIabMJQ3eXL5ffxWButUsK7djo65FdCW/9ova5iQWe7/aLZ5MYF4
IIHMutbYgNMDoZ8UsYU0pOsAuYrj1ikreR03Qil0Z5qeDANwQtjyjGWjRbbdIwU5
16expZ6p/FExJYuCFyJ/ctYGeSw5WKQ4HgdiOEiPkyKSj2JMOlUZytH5sj0PQS58
lkEDF3Nf4nMmG1Y6XlI8wmTJN8mP9tlKGnSYujZGYvSwBfVE0nhqkixsJpW3AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUZKzxRdmh44YekIG7aLiS8eICDEIwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz
MDMxMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7DggBMwDQYJKoZIhvcNAQELBQADggEBAG5XAPQwXPpPIv37IosPk8zX
8VUty9yls5TLVQMBZraFpbcF3Hv62vIq5Qro6uOAxuhj94ltJQ5M4DU1BWRWFSfx
C9OqDmRMP7VpFl9n3CGqwArANssr6H1NdO42TanU1wq3+YOwjOE6kvrQQvjtqiOB
1OYZviyaMq30LgiP3ohexNr+Ln12iJ/dyjn3kWC8GfIK/4JXvTrF/w2KIZlqWl2P
T5TrvnHNlPRLG02Uv6Exb5jZ7mP1y+CEo7C9Ih4t4uwK9cHhxdGtUGWrsBA8v1AM
z8Y1IMzGp2i2MDxksWCAaUL+DaLf0yGVkv2w4e54dclLy0E4rxYJHdH3Nr5wR3k=
-----END CERTIFICATE-----