Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          sKWRxZ2sI65f0Mn5Y1DR76ebxuwyVsSu2nJ9QLuP8iU=
Subject key identifier:   F8:10:E1:80:AD:20:EF:96:A9:83:0C:FA:4F:9A:A5:CE:C7:0F:F0:14
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       09BA6CA73B0E1806BD0C2C66C438AF4C9291401D
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 05 Mar 2024 18:03:49 +0000
ROA not before:           Tue 05 Mar 2024 17:58:49 +0000
ROA not after:            Tue 04 Mar 2025 18:03:49 +0000
asID:                     272979
IP address blocks:        2803:b0e0:99c2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ba:6c:a7:3b:0e:18:06:bd:0c:2c:66:c4:38:af:4c:92:91:40:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:49 2024 GMT
            Not After : Mar  4 18:03:49 2025 GMT
        Subject: CN=F810E180AD20EF96A9830CFA4F9AA5CEC70FF014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:a0:13:7c:17:a7:9a:62:2a:ec:84:3b:5e:
                    ac:22:0c:48:bc:28:8c:0d:69:9d:49:b0:5f:bd:aa:
                    80:fa:28:5a:94:a8:ae:ce:23:1e:ff:f1:5a:b9:31:
                    b3:f2:86:27:06:a8:96:99:8e:e5:8f:54:8d:0a:99:
                    86:d8:50:c6:a5:0f:1a:2c:23:ea:c6:c3:9a:82:bd:
                    08:15:22:b1:df:72:e0:2c:66:a8:c2:d7:e4:4f:d6:
                    7d:85:af:7e:fa:58:af:09:3e:47:a6:56:68:23:89:
                    54:5d:60:79:e9:bd:65:81:fd:cd:36:04:59:83:41:
                    57:fc:bf:f1:07:de:dc:a4:39:52:32:93:4f:ec:c3:
                    f1:27:19:b0:06:87:c9:6d:3b:93:d9:71:a1:a1:30:
                    68:1f:6c:50:0e:47:5f:62:55:b1:9d:84:5c:42:6e:
                    7d:41:d6:f6:86:7c:35:23:63:5f:f2:18:e9:a4:84:
                    60:b7:a0:33:8f:50:0f:49:ec:e6:8f:f4:dc:83:79:
                    bd:94:a0:4f:17:6c:4e:14:a1:e3:07:ee:c8:66:ba:
                    7f:34:cf:b6:ef:80:e4:60:f1:e5:70:2a:0c:a5:6d:
                    5d:c9:69:2f:c4:6c:20:52:b4:df:73:87:7d:1f:7e:
                    43:12:e4:10:b5:09:f0:44:c4:56:f6:77:05:55:df:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:E1:80:AD:20:EF:96:A9:83:0C:FA:4F:9A:A5:CE:C7:0F:F0:14
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393963323a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:43:a7:89:77:fd:a5:9e:e8:a4:ab:c9:9c:ea:7e:b8:88:fd:
         88:87:bc:df:b5:96:82:8c:42:cc:a2:df:cb:07:5b:a4:04:f2:
         63:35:06:b3:49:c7:7b:50:18:bb:f3:b5:cd:7f:f0:06:d8:f6:
         c3:bd:d9:f5:1e:93:ed:46:ca:3d:3c:2e:35:e3:d9:8b:6d:d9:
         49:72:58:6b:62:66:80:fb:42:5e:84:01:36:76:e5:88:52:10:
         65:85:03:fa:5d:9d:16:7c:5d:ae:5e:77:6c:1f:a2:00:80:52:
         ca:e8:f1:05:dc:7c:fb:72:0a:de:e1:8f:c1:72:79:5b:4f:e3:
         63:f9:aa:99:a7:af:bc:13:7a:5e:1c:49:90:07:1d:9a:d2:ff:
         69:18:d5:5c:cb:25:82:24:ce:0b:bf:52:12:9d:6d:ed:4c:b4:
         09:2f:2c:8a:be:48:05:df:e1:d8:4d:c5:9c:4c:6e:54:f6:5c:
         96:d3:e1:b4:14:92:0d:1b:b2:ca:6d:b8:c7:a0:7a:e4:90:af:
         7c:a4:13:99:0b:c8:63:14:60:a2:49:5d:8e:75:21:a1:d7:a2:
         b5:39:80:67:75:bc:af:3f:ca:dd:ec:c2:36:20:3a:f8:62:4f:
         85:7c:ad:5e:ec:61:08:6b:c6:31:7b:f5:7e:ea:fc:9e:00:cf:
         8a:60:96:59
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUCbpspzsOGAa9DCxmxDivTJKRQB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNDAzMDUxNzU4NDlaFw0yNTAzMDQxODAzNDlaMDMxMTAvBgNV
BAMTKEY4MTBFMTgwQUQyMEVGOTZBOTgzMENGQTRGOUFBNUNFQzcwRkYwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6KATfBenmmIq7IQ7XqwiDEi8
KIwNaZ1JsF+9qoD6KFqUqK7OIx7/8Vq5MbPyhicGqJaZjuWPVI0KmYbYUMalDxos
I+rGw5qCvQgVIrHfcuAsZqjC1+RP1n2Fr376WK8JPkemVmgjiVRdYHnpvWWB/c02
BFmDQVf8v/EH3tykOVIyk0/sw/EnGbAGh8ltO5PZcaGhMGgfbFAOR19iVbGdhFxC
bn1B1vaGfDUjY1/yGOmkhGC3oDOPUA9J7OaP9NyDeb2UoE8XbE4UoeMH7shmun80
z7bvgORg8eVwKgylbV3JaS/EbCBStN9zh30ffkMS5BC1CfBExFb2dwVV3zEFAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU+BDhgK0g75apgwz6T5qlzscP8BQwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzkz
OTYzMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM3Mzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7DgmcIwDQYJKoZIhvcNAQELBQADggEBALpDp4l3/aWe6KSryZzqfriI
/YiHvN+1loKMQsyi38sHW6QE8mM1BrNJx3tQGLvztc1/8AbY9sO92fUek+1Gyj08
LjXj2Ytt2UlyWGtiZoD7Ql6EATZ25YhSEGWFA/pdnRZ8Xa5ed2wfogCAUsro8QXc
fPtyCt7hj8FyeVtP42P5qpmnr7wTel4cSZAHHZrS/2kY1VzLJYIkzgu/UhKdbe1M
tAkvLIq+SAXf4dhNxZxMblT2XJbT4bQUkg0bssptuMegeuSQr3ykE5kLyGMUYKJJ
XY51IaHXorU5gGd1vK8/yt3swjYgOvhiT4V8rV7sYQhrxjF79X7q/J4Az4pgllk=
-----END CERTIFICATE-----