Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937613a3a2f34382d3438203d3e203634313330.roa
File:                     323830333a623065303a393937613a3a2f34382d3438203d3e203634313330.roa (raw, json)
Hash identifier:          LZYe1BKFJ2aZuPMapzPmAwvdn74/wDRir0ICoWfounE=
Subject key identifier:   71:C9:88:5C:06:F5:C8:8B:2C:45:0F:3F:11:A4:EA:D4:3A:45:94:A0
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       355B91BEFE0E1F8D32BFF0D435F14CA1B3DF2AB7
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937613a3a2f34382d3438203d3e203634313330.roa
Signing time:             Tue 05 Mar 2024 18:03:46 +0000
ROA not before:           Tue 05 Mar 2024 17:58:46 +0000
ROA not after:            Tue 04 Mar 2025 18:03:46 +0000
asID:                     64130
IP address blocks:        2803:b0e0:997a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:91:be:fe:0e:1f:8d:32:bf:f0:d4:35:f1:4c:a1:b3:df:2a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:46 2024 GMT
            Not After : Mar  4 18:03:46 2025 GMT
        Subject: CN=71C9885C06F5C88B2C450F3F11A4EAD43A4594A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:04:74:16:21:81:cc:98:61:c9:14:70:ae:
                    7d:42:cd:77:83:a6:60:d2:97:65:ff:50:2a:86:63:
                    01:71:09:92:f3:73:07:f5:dd:2b:00:4d:28:4e:44:
                    da:e5:c0:6b:3c:0d:da:ff:e3:06:08:c5:b0:d5:5d:
                    ab:38:ad:51:c1:2d:49:5b:c2:98:93:b2:4f:a8:bb:
                    50:f9:ea:10:b3:37:ad:fa:1c:4b:a1:6e:82:4a:f9:
                    06:a3:02:91:03:92:16:68:9f:85:34:d8:e3:ab:e2:
                    9e:cb:c0:ef:60:5f:44:94:fa:b3:16:63:85:42:0c:
                    16:49:b7:89:94:29:69:72:e4:e2:ea:27:65:1a:73:
                    41:c0:95:e2:f0:f9:ee:41:27:f9:72:3e:50:f3:66:
                    07:06:05:07:df:73:8e:c4:4b:37:56:45:bb:3c:aa:
                    90:75:c2:16:de:10:37:1e:71:7b:d2:25:1b:94:95:
                    94:3e:12:c3:66:33:39:2c:ca:f7:41:f6:23:3b:d9:
                    3a:1c:04:c9:4d:ba:6e:16:41:c2:f0:c1:e4:6b:30:
                    ef:c5:87:21:c2:57:7f:32:f7:3b:90:26:2a:e3:23:
                    ef:78:fe:ae:08:b6:c0:03:9a:7e:ab:98:49:15:9e:
                    14:1a:d3:1a:3c:bf:d7:41:65:a1:51:2d:9a:88:fa:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C9:88:5C:06:F5:C8:8B:2C:45:0F:3F:11:A4:EA:D4:3A:45:94:A0
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937613a3a2f34382d3438203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:997a::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:97:9c:2f:ad:70:b4:0c:f5:fc:87:34:25:82:85:a7:42:
         5e:7b:e1:57:61:dd:46:58:d7:0e:94:0a:d4:14:c9:bc:2f:c8:
         b8:ed:4b:4f:9b:29:6a:8d:92:6e:6b:83:c6:05:9f:86:9f:bd:
         fa:e7:4f:43:cd:cd:df:c9:37:07:b8:ad:d0:c2:a2:4a:88:76:
         b5:14:23:b4:95:15:f8:d6:12:8c:13:ed:66:b7:7d:17:f1:cd:
         37:19:30:dd:33:f5:26:95:66:e0:5f:81:0c:c2:25:61:92:7b:
         e1:f0:9e:d3:23:bf:50:58:2a:fa:53:00:60:77:ec:cb:bb:b2:
         e4:a0:b9:23:ff:60:52:e5:28:33:0e:77:6a:0f:d8:c7:9b:6a:
         41:61:69:15:af:80:89:92:95:49:aa:1a:3b:be:2f:91:55:70:
         70:41:92:71:0a:bc:e1:93:60:2f:e5:3b:4f:8e:2a:bc:69:e1:
         88:2b:10:7c:ec:0a:aa:b7:fc:1f:49:81:44:d9:88:7c:f4:8c:
         56:f7:57:6a:26:54:fc:35:61:5d:62:d8:0f:74:06:2f:c2:4b:
         87:48:1c:92:b4:f9:8a:08:4b:9b:0b:4b:ec:e6:e0:b5:1e:a5:
         d5:76:b1:a2:3c:28:48:a5:2a:c7:71:e1:66:b1:95:1a:80:fc:
         bd:c1:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----