Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a393938303a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          ijCb50y1HnfdxPYbCfl8JKxHXV3euqoaT3qxClzx/GI=
Subject key identifier:   D4:90:8A:45:17:BE:AC:D4:59:B1:D5:C0:EF:8A:29:23:99:48:E6:E3
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       4B4D7F9736843D4F9B36BB94EEF9C1AF3B6DCC9D
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 28 May 2024 21:00:03 +0000
ROA not before:           Tue 28 May 2024 20:55:03 +0000
ROA not after:            Tue 27 May 2025 21:00:03 +0000
asID:                     272979
IP address blocks:        2803:b0e0:9980::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4d:7f:97:36:84:3d:4f:9b:36:bb:94:ee:f9:c1:af:3b:6d:cc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 28 20:55:03 2024 GMT
            Not After : May 27 21:00:03 2025 GMT
        Subject: CN=D4908A4517BEACD459B1D5C0EF8A29239948E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:9a:e5:69:98:12:07:5a:2b:4c:ee:93:05:
                    d3:8f:cb:53:d3:27:f7:29:da:0c:7c:54:d1:90:8e:
                    dc:69:ae:c6:30:2c:25:3d:d2:5c:49:96:6f:0c:c6:
                    e4:db:3c:e8:a6:de:33:e5:95:d2:81:1a:bd:c5:6c:
                    62:8c:be:ed:c3:0b:5a:20:a9:ba:6f:6e:6e:f2:67:
                    a7:a4:b6:ec:6a:76:2b:ef:31:8c:1b:f6:db:49:d3:
                    80:42:f7:ae:1a:d5:3f:92:5e:e2:c8:08:28:66:6d:
                    2f:55:5e:b7:38:9c:c3:7a:2b:cb:75:0f:6f:fe:82:
                    7b:72:1a:99:c0:39:df:1a:1d:52:5e:28:74:62:4d:
                    f0:69:7a:8f:c6:f2:6a:d6:48:19:9a:38:dd:db:4e:
                    2a:5a:8c:52:0d:3d:50:e2:ec:e4:d7:86:e3:a4:3e:
                    94:84:90:f2:ce:59:3f:d3:a9:09:14:60:26:b6:33:
                    a8:89:09:2a:83:f0:16:ff:cb:08:1f:2f:fd:6b:cb:
                    90:97:ba:de:f1:77:44:4a:cf:b9:52:77:d4:9a:a0:
                    17:dd:c6:d1:04:91:94:20:d4:43:c5:15:30:ad:64:
                    bb:dd:e2:41:e4:c0:d7:c0:64:18:76:21:7d:7d:71:
                    55:e2:29:da:d8:b8:06:5d:3c:04:22:03:bc:84:4d:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:8A:45:17:BE:AC:D4:59:B1:D5:C0:EF:8A:29:23:99:48:E6:E3
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938303a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:e2:b9:41:25:ca:ec:cb:c2:97:57:c1:6b:0c:29:cd:c3:
         ae:8b:e3:e2:8e:89:e5:38:5e:7b:f1:df:93:0b:16:cd:dc:ee:
         45:8f:04:86:48:31:21:16:6c:00:80:1c:38:71:05:38:fc:b2:
         99:ea:ed:bf:2b:fe:8b:9a:3e:a1:0f:86:dd:c5:75:f1:e6:a9:
         ad:e1:51:68:11:86:3e:fc:90:80:33:1f:32:5b:44:c7:ed:af:
         4e:a8:3c:a0:27:46:8a:b4:75:4a:0e:da:c6:7f:c1:8b:fb:d7:
         3b:38:71:b9:22:ee:f7:40:5f:d1:93:a4:d5:54:72:b9:e9:70:
         61:d3:b9:c8:de:96:c2:44:bd:8c:e6:30:35:0c:f1:a3:4e:9c:
         56:e7:3b:38:ca:c9:ba:62:77:24:b8:1c:37:25:d3:9b:60:41:
         5f:ae:9d:05:29:d3:51:71:cd:e1:db:5d:bf:d8:1d:62:27:39:
         4d:cc:35:ec:61:cd:ab:ed:c7:d6:e3:19:e6:9c:41:e0:26:42:
         32:53:a6:57:cb:b9:0b:2f:43:a4:fe:32:36:fc:05:dd:14:b5:
         39:9b:50:85:6f:b4:2f:26:da:7f:d6:b2:99:ce:cf:9d:47:47:
         22:7b:71:1c:0b:27:4b:d4:00:ab:89:e1:2e:f1:d5:de:a6:c2:
         34:03:f3:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----