Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa
File:                     323830303a3333303a3a2f33322d3434203d3e203237393836.roa (raw, json)
Hash identifier:          OTj6d5Okpz2s73PxNIZb+JJ7O/sJprUj1VCueh7f+iI=
Subject key identifier:   A2:E2:2E:8E:7F:8F:D8:76:1E:64:FF:27:25:10:B9:F8:84:52:50:C3
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       3EE91F29AD2A4C206E7CB73EF5EDB915577349C3
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa
Signing time:             Tue 04 Feb 2025 18:44:22 +0000
ROA not before:           Tue 04 Feb 2025 18:39:22 +0000
ROA not after:            Tue 03 Feb 2026 18:44:22 +0000
asID:                     27986
IP address blocks:        2800:330::/32 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e9:1f:29:ad:2a:4c:20:6e:7c:b7:3e:f5:ed:b9:15:57:73:49:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:22 2025 GMT
            Not After : Feb  3 18:44:22 2026 GMT
        Subject: CN=A2E22E8E7F8FD8761E64FF272510B9F8845250C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:21:61:34:fb:c2:4b:6a:be:60:d7:fa:de:
                    06:85:53:c9:84:a1:d4:49:0e:40:42:34:34:2f:ce:
                    f2:1e:6e:a6:ae:dd:d8:1d:8b:64:e2:45:cc:2e:33:
                    d0:a1:d6:83:d2:46:e2:67:72:54:68:34:f6:42:98:
                    1d:44:17:2d:34:9a:45:47:21:b2:ae:cc:4b:1b:44:
                    9c:e3:ce:a0:b3:2b:33:a9:6d:0d:c4:81:a8:5c:b3:
                    72:3f:25:51:87:1d:17:d2:4e:89:8d:e4:2b:bb:8a:
                    63:8a:37:5b:ac:31:a1:5e:4b:c4:be:a1:0a:d3:1c:
                    c2:27:98:66:09:8a:13:9b:18:b3:f0:b7:3e:bc:52:
                    36:c1:3d:c3:15:b9:4b:b3:cc:e3:ea:77:5f:4c:97:
                    09:ee:24:99:e6:a0:33:5e:f3:91:c8:39:e9:4b:c3:
                    ca:bd:13:9f:4f:fa:f6:7f:b3:b0:14:d7:f7:0c:52:
                    91:1c:29:98:9e:0e:b8:56:66:46:bb:40:ce:c3:84:
                    de:b6:9a:09:5b:d6:fc:5f:40:43:09:20:f4:f6:f1:
                    0c:c8:df:ba:ff:58:fd:10:12:9b:4a:5c:cd:8e:23:
                    f2:78:94:7f:8a:43:aa:56:43:6c:ac:1a:36:64:c7:
                    7c:28:91:44:e3:74:e9:08:67:dd:02:f8:7d:24:53:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E2:2E:8E:7F:8F:D8:76:1E:64:FF:27:25:10:B9:F8:84:52:50:C3
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/323830303a3333303a3a2f33322d3434203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:e3:a9:f7:0d:d1:0e:42:0d:83:04:17:f0:12:1d:e6:6c:
         ae:61:6c:cc:86:d5:35:21:a4:53:a2:7b:d8:ff:61:4d:ec:98:
         d0:1b:27:4a:19:02:a2:fe:f0:75:29:41:ef:bf:2d:df:70:a8:
         26:0a:88:af:10:8a:10:c0:cb:54:2c:e4:5a:5e:7e:76:43:18:
         ee:c4:fe:52:47:92:34:d8:3b:08:ff:45:14:ff:7f:4f:20:3b:
         49:de:63:8b:dd:25:f3:e2:ea:c6:c8:b4:08:47:67:cd:88:b8:
         6c:a6:c2:07:37:d1:75:81:0b:45:2c:f2:7d:74:ff:5a:f1:4b:
         76:c7:6f:1b:29:b7:95:4f:fc:de:40:f2:24:ba:8e:2c:41:23:
         69:26:bd:09:fc:38:a4:1d:fa:1c:08:d3:e9:72:c0:22:e1:75:
         b1:89:96:77:cf:03:8e:eb:d5:b3:04:e6:6e:ee:ad:c4:ed:e7:
         09:aa:0a:28:4e:c0:50:ec:d0:43:8b:d5:09:38:2a:09:89:c5:
         0f:8a:cb:0d:e0:e3:19:d6:88:65:49:d5:9f:7a:e0:5d:f6:42:
         42:6c:31:47:c1:e0:67:f6:af:97:94:86:f0:12:2f:a4:28:8c:
         f6:7f:90:a8:05:eb:3a:c9:3b:cb:ca:a3:17:24:4f:ea:f1:b6:
         42:48:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----