Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33342d3335203d3e20323635363232.roa
File:                     323830363a3361333a3a2f33342d3335203d3e20323635363232.roa (raw, json)
Hash identifier:          8tQI1eJdOwZc8vSxRnY2KjX18KXxSvIzDbeub3BHITw=
Subject key identifier:   7D:B4:80:F6:79:07:C1:CB:CF:B2:C9:7B:9C:53:A2:A3:1E:F6:75:C7
Certificate issuer:       /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial:       262CA9EE4AB7107C591AE32C85880CFD82785DBD
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33342d3335203d3e20323635363232.roa
Signing time:             Tue 04 Feb 2025 18:12:48 +0000
ROA not before:           Tue 04 Feb 2025 18:07:48 +0000
ROA not after:            Tue 03 Feb 2026 18:12:48 +0000
asID:                     265622
IP address blocks:        2806:3a3::/34 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:a9:ee:4a:b7:10:7c:59:1a:e3:2c:85:88:0c:fd:82:78:5d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
        Validity
            Not Before: Feb  4 18:07:48 2025 GMT
            Not After : Feb  3 18:12:48 2026 GMT
        Subject: CN=7DB480F67907C1CBCFB2C97B9C53A2A31EF675C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:6c:dc:6f:cb:94:a5:7f:0f:11:3c:66:fa:
                    21:98:d4:d3:71:ea:cb:6a:79:50:86:d9:ec:ce:d0:
                    c7:4f:ec:e9:66:6d:40:57:4f:4c:3d:34:83:ea:09:
                    0a:37:d8:ff:29:87:35:e6:f1:8d:73:e6:dd:8a:53:
                    af:bb:37:f9:05:be:98:58:26:17:39:d8:ad:14:65:
                    40:55:aa:f7:fd:1c:19:d4:38:7b:b0:c2:72:f4:07:
                    16:2f:17:19:bd:a9:7d:03:39:91:8d:6f:99:11:65:
                    58:3b:a1:c5:84:16:6d:61:06:35:fb:b1:05:0f:28:
                    8e:79:2e:77:a0:37:1a:b1:e0:de:72:c3:31:bb:89:
                    a9:86:89:a3:ba:02:b2:20:2c:5c:ab:53:5a:8f:69:
                    7d:3b:ed:52:4e:02:99:74:65:dc:09:45:22:ec:a0:
                    a9:59:47:c9:d2:8b:88:94:a0:55:ea:fa:5b:92:0c:
                    3e:d7:95:a8:05:74:0b:9e:f0:b2:b5:e1:2d:73:f3:
                    3f:e5:8b:19:6b:89:e6:c4:79:30:10:27:6f:c9:f6:
                    e0:bc:df:7b:7c:49:b8:84:ad:b0:cb:42:f7:81:5d:
                    66:76:aa:0d:70:8e:a0:d3:6a:82:ff:bc:18:f7:9b:
                    f4:59:17:3b:b9:29:67:83:c1:7d:b8:3f:3a:38:27:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:80:F6:79:07:C1:CB:CF:B2:C9:7B:9C:53:A2:A3:1E:F6:75:C7
            X509v3 Authority Key Identifier:
                keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/323830363a3361333a3a2f33342d3335203d3e20323635363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:44:e6:8f:22:72:ef:1f:c3:6d:ef:f4:94:85:9f:cf:39:0d:
         72:23:ea:7b:35:a9:01:cd:a6:0d:ec:0c:27:82:7d:d9:72:0e:
         0c:1b:ce:15:5e:86:65:a3:ea:98:96:94:f6:ed:84:ac:4f:32:
         6d:b8:80:77:ff:69:22:85:46:11:f8:09:fa:87:87:24:da:1b:
         15:f6:d2:a9:47:8e:f4:f3:87:cb:9d:83:67:19:e5:86:11:49:
         0e:82:c3:55:99:25:2a:a1:01:a3:c0:00:0b:19:c6:e2:67:2f:
         ad:c4:f2:18:d7:39:26:9e:b9:e2:68:a7:99:e1:01:79:f7:e3:
         51:fb:e3:75:3e:b5:43:2c:c4:f6:50:33:66:db:c8:ba:81:c8:
         20:21:55:f3:d3:83:6f:25:13:ee:d3:11:99:16:7c:3d:37:ab:
         a0:ae:0a:87:26:f0:b5:d2:f9:e4:8b:4b:d0:d8:bb:12:85:85:
         07:68:16:b4:39:55:1f:e5:8a:b4:c9:5a:e4:26:1a:f8:06:29:
         2a:b9:48:7f:dc:fa:a9:d3:16:79:19:bb:a4:04:14:37:58:e0:
         e5:77:07:26:87:3e:80:b4:7e:50:5c:28:d7:3a:e1:86:5d:fd:
         a0:37:96:fc:f7:6b:e6:7b:ff:b0:ef:db:ca:36:ab:79:7d:1d:
         6b:46:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----