Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa
File:                     323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa (raw, json)
Hash identifier:          dzhiKZQTBPgNRapOD5jwpJCdWjn7vVuThZBDjvpAgH4=
Subject key identifier:   3A:06:DA:FD:0D:15:93:3F:D3:05:86:25:39:31:2A:0E:3F:7D:93:E6
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       6EF080D359FD701926A79E55C3593E89D01B251F
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa
Signing time:             Tue 05 Mar 2024 21:20:00 +0000
ROA not before:           Tue 05 Mar 2024 21:15:00 +0000
ROA not after:            Tue 04 Mar 2025 21:20:00 +0000
asID:                     271803
IP address blocks:        2803:b0e0:801b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f0:80:d3:59:fd:70:19:26:a7:9e:55:c3:59:3e:89:d0:1b:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 21:15:00 2024 GMT
            Not After : Mar  4 21:20:00 2025 GMT
        Subject: CN=3A06DAFD0D15933FD305862539312A0E3F7D93E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:73:62:a2:0e:9a:6d:fa:37:ed:c8:91:79:
                    89:b0:05:39:a8:66:7a:dc:6f:0d:7f:30:7c:11:8f:
                    22:e4:b4:2c:5c:ca:2a:51:39:f9:66:06:a4:db:7d:
                    e7:5b:be:2f:61:07:48:90:bd:da:58:bd:d9:52:9e:
                    f1:4b:13:de:67:9f:b4:12:16:84:05:33:e1:02:6c:
                    f8:a8:4d:f7:2e:4d:63:5b:e8:11:23:a1:8f:3f:28:
                    93:5d:f4:2a:c4:d4:eb:77:6c:50:9e:6e:a6:51:b6:
                    b1:72:c9:b5:03:d4:79:ad:38:79:b6:26:1d:f2:a4:
                    77:c7:30:2c:9d:9e:a9:43:0b:a5:9a:6e:3d:3c:60:
                    b6:3d:62:8f:b1:d8:2b:a5:9a:ca:52:b5:27:dd:4e:
                    dc:cd:bf:9b:13:25:45:25:a7:0c:66:05:78:24:fb:
                    88:bc:e5:a2:99:11:bf:5e:42:d2:89:16:99:7c:f8:
                    9e:a1:0e:cc:a5:89:af:a2:98:0c:20:95:2e:0e:3b:
                    e9:dd:86:14:c8:57:b9:eb:24:e4:e5:72:c3:c8:cd:
                    fe:01:9e:13:66:10:25:d7:9c:33:7d:d2:76:e7:6b:
                    cd:d6:a4:d3:67:cf:b1:ce:3d:05:08:07:f3:32:8b:
                    3e:a0:ec:39:2a:39:97:5c:c7:3c:cd:e1:7c:18:69:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:DA:FD:0D:15:93:3F:D3:05:86:25:39:31:2A:0E:3F:7D:93:E6
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031623a3a2f34382d3438203d3e20323731383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:d0:d8:df:d1:dd:65:58:47:f4:b0:c7:46:1f:05:a1:7c:
         0c:a7:9a:bd:ae:30:3d:28:39:2e:d3:7d:a1:db:74:bd:e7:df:
         3d:75:25:b2:07:a6:5e:36:e4:64:32:72:63:20:51:80:dd:f3:
         c7:9f:62:62:9a:32:6b:6b:a1:3a:b4:f1:d0:a3:ff:9e:ad:90:
         1c:3d:d5:20:ca:98:3d:48:00:9b:35:b8:a4:53:cd:d0:dc:98:
         0c:4d:3d:6d:25:4d:14:60:be:b9:bd:68:1b:25:02:e7:df:ec:
         35:9f:e1:a3:f0:88:6b:62:c4:87:d9:df:1e:93:ef:1b:6f:76:
         75:36:e3:4d:49:b1:6d:74:ab:1f:b9:5f:8d:2a:ce:16:8b:13:
         34:48:6e:a7:98:1f:48:ce:27:0f:71:f2:2f:c0:54:bf:91:b4:
         8b:15:46:a7:32:df:51:43:4d:ed:29:72:27:81:bf:a1:a4:64:
         38:4e:45:fc:9e:0a:20:39:90:43:68:8c:d1:7e:20:37:5b:46:
         13:4d:11:09:80:f3:de:0b:99:18:3c:41:a4:4f:9e:74:e1:f6:
         9d:30:65:92:62:33:c9:14:e8:33:a3:bc:20:b0:ba:b2:34:cb:
         53:7f:e6:32:c7:ef:c3:db:b4:ba:42:1c:da:b5:7a:32:ff:2a:
         f1:d0:9f:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----