Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa
File:                     323830363a3365363a3a2f33322d3332203d3e20323730313539.roa (raw, json)
Hash identifier:          S70XeUR7N8uErELze5mGN66XJ+hzJ4qnfcdiZPqFcS0=
Subject key identifier:   F6:6C:79:52:18:66:E0:68:6F:68:07:9B:45:17:E1:68:7A:75:B2:28
Certificate issuer:       /CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
Certificate serial:       746A4948519898B55929F05C5A8D2B18A781BB46
Authority key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa
Signing time:             Tue 04 Feb 2025 18:41:13 +0000
ROA not before:           Tue 04 Feb 2025 18:36:13 +0000
ROA not after:            Tue 03 Feb 2026 18:41:13 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6a:49:48:51:98:98:b5:59:29:f0:5c:5a:8d:2b:18:a7:81:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
        Validity
            Not Before: Feb  4 18:36:13 2025 GMT
            Not After : Feb  3 18:41:13 2026 GMT
        Subject: CN=F66C79521866E0686F68079B4517E1687A75B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:8f:96:b9:65:c7:73:11:d8:5c:a1:a4:26:
                    6f:3b:28:4a:c8:ae:e5:c4:60:66:1d:23:e6:cd:1a:
                    7a:2d:51:14:0b:47:c7:d8:91:04:7f:c5:ec:7b:ac:
                    e0:59:3b:1c:cc:4e:8b:6e:96:4a:04:f2:84:5a:f8:
                    ce:81:c3:b5:d1:f3:c6:86:bc:17:b9:7d:eb:c0:29:
                    da:96:41:1d:0b:5b:85:57:b9:57:d8:65:76:22:2d:
                    00:ac:2d:d4:79:84:20:46:53:38:ca:6d:29:40:4a:
                    f5:a4:a7:e8:17:aa:f7:32:19:4c:16:93:a9:d9:f3:
                    ee:ff:85:0b:ce:c7:b5:25:11:67:e7:72:5f:1e:4f:
                    73:7b:60:e9:63:4d:5d:23:69:f5:6d:81:32:ee:35:
                    4a:0f:a2:ec:ff:c9:de:86:c7:93:dc:18:80:c0:2b:
                    b7:b1:81:ea:63:f0:e6:a6:94:ce:9e:1c:4a:55:75:
                    f8:45:f7:70:9b:e3:59:fb:d3:c8:67:7a:b7:eb:d7:
                    e9:04:ca:0c:dc:32:61:89:bc:53:81:11:9a:75:d5:
                    96:f0:2d:30:65:3d:b4:12:34:05:ca:0d:50:aa:73:
                    9f:40:47:2e:fb:e2:05:30:db:fc:ac:4e:5c:71:bd:
                    7f:55:73:fe:3f:8f:b7:45:93:18:9d:e3:b6:f0:b0:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:79:52:18:66:E0:68:6F:68:07:9B:45:17:E1:68:7A:75:B2:28
            X509v3 Authority Key Identifier:
                keyid:03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:58:57:8d:69:43:5a:73:d5:74:64:29:ba:67:7c:49:f1:
         d1:71:3d:dc:b0:e4:d0:a1:65:6e:29:35:c4:d5:b8:0d:2c:6d:
         3d:27:1e:93:55:9d:63:8e:9b:f2:a4:d8:81:29:be:d0:59:61:
         a1:e5:35:d0:e8:ac:63:5e:37:ee:a6:cb:a1:06:da:47:ca:7f:
         d3:8d:5f:39:93:f7:8c:80:53:fc:8a:c7:18:5d:0b:bc:c3:7b:
         58:f4:3d:c6:f5:38:46:b8:08:46:01:7a:8d:53:8a:7e:43:68:
         8f:f8:a1:66:47:1a:be:c4:0d:0e:c8:a0:80:d3:97:00:72:cb:
         54:01:da:17:02:1e:4a:49:28:b6:e4:7d:38:89:48:fe:db:c1:
         18:6e:91:28:89:a7:b9:dd:f5:25:b5:0c:8a:82:7b:b6:54:b1:
         74:4c:e6:86:77:fa:23:87:c3:5b:59:c6:e0:4b:c8:81:85:93:
         8f:17:09:63:92:74:53:c3:b4:6d:a5:64:c1:25:9e:e6:cc:58:
         e6:f7:ee:80:dd:76:c0:f0:9d:9d:5d:08:a9:d3:42:8f:b5:17:
         24:91:7a:c7:7e:4b:e5:4f:9c:94:cc:7b:fb:d9:5f:d2:f9:97:
         06:c0:df:b1:fe:79:fe:0a:7a:e2:2d:08:46:5b:53:1d:d0:67:
         e7:6e:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----