Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
File:                     323830363a3361303a3a2f33322d3438203d3e20323635363230.roa (raw, json)
Hash identifier:          yElIdbjbRBlBoE+NszrWkXJ+ewCv4PXQW4ZnYF5MYCI=
Subject key identifier:   08:7A:36:27:1C:4E:32:F2:E2:CC:EE:4D:F1:8F:0F:AC:44:F9:07:3B
Certificate issuer:       /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial:       74A5BD6394C8427EB1C85673D4EE57E9EEDF5159
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
Signing time:             Tue 04 Feb 2025 20:08:59 +0000
ROA not before:           Tue 04 Feb 2025 20:03:59 +0000
ROA not after:            Tue 03 Feb 2026 20:08:59 +0000
asID:                     265620
IP address blocks:        2806:3a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:bd:63:94:c8:42:7e:b1:c8:56:73:d4:ee:57:e9:ee:df:51:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
        Validity
            Not Before: Feb  4 20:03:59 2025 GMT
            Not After : Feb  3 20:08:59 2026 GMT
        Subject: CN=087A36271C4E32F2E2CCEE4DF18F0FAC44F9073B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:a4:67:05:dd:cd:8e:a8:61:98:a6:6d:8d:
                    a8:bb:13:e3:0c:03:7e:f2:13:17:3d:fb:44:fc:82:
                    20:78:0d:da:72:00:10:ff:76:38:89:b2:57:2d:cc:
                    41:17:41:82:05:41:b7:4a:c4:9b:9d:6c:bf:43:ff:
                    22:ce:8b:76:4f:df:66:98:83:6b:ea:53:f8:46:ee:
                    3e:83:8e:6c:2d:ca:29:b5:6d:43:f4:d4:72:0d:be:
                    9c:1a:55:d8:53:51:b4:8c:d2:a7:1f:7f:df:23:9f:
                    5c:64:0a:99:f6:dd:a1:c6:c4:ae:69:e6:ef:0d:04:
                    7a:af:79:08:f3:5d:d4:eb:09:61:f2:ad:17:50:f9:
                    7e:3b:4b:78:f9:95:02:01:01:b2:d7:ef:c8:aa:f7:
                    9f:2e:13:d3:1f:77:df:73:79:cb:fd:0d:49:c2:7e:
                    45:5d:67:e5:a6:84:ea:59:f3:20:ef:6d:76:4c:49:
                    0e:b8:c8:f1:68:29:68:a2:59:95:42:46:20:7e:da:
                    0f:24:32:b5:a6:b3:f8:d1:61:2b:07:44:f1:6a:15:
                    96:ea:44:4c:e0:e7:53:f3:bf:a6:7c:3e:4b:2a:81:
                    0a:f1:84:d6:65:2c:f4:64:e5:1e:77:d9:52:84:75:
                    45:93:72:86:e5:da:5b:c1:89:e0:28:04:c1:7d:01:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7A:36:27:1C:4E:32:F2:E2:CC:EE:4D:F1:8F:0F:AC:44:F9:07:3B
            X509v3 Authority Key Identifier:
                keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ad:cc:9d:f1:a5:c8:86:56:18:a8:66:e3:ee:33:4a:64:90:
         02:89:10:38:86:6a:61:64:fa:38:78:c9:9e:2c:c5:f8:5d:06:
         9a:12:92:7e:b6:2e:43:28:18:b8:a0:bb:23:71:94:11:e4:a9:
         8b:d4:4b:63:a9:a5:5c:f7:07:87:f2:6a:f0:67:da:4a:7f:85:
         5d:c8:b4:18:69:38:59:1f:04:6e:09:80:b2:b7:be:97:d4:fc:
         d3:50:5c:61:84:11:2e:89:fc:13:b0:09:4a:c2:f9:e9:e4:67:
         23:48:d0:bd:d7:d5:b9:d4:7a:46:df:0a:76:d8:ba:fc:17:12:
         7c:7d:4a:3d:40:6f:22:40:be:9a:b5:21:0d:95:68:b0:94:05:
         30:f2:19:39:2d:45:46:5d:c4:b9:ea:3c:0a:73:09:96:09:b8:
         ee:85:a3:d4:f5:9a:61:57:bd:86:89:68:e4:ab:3f:08:11:07:
         1f:f2:c0:5e:9b:94:e3:b8:7c:cb:17:fd:c7:f3:17:94:9b:d0:
         2a:4f:ab:3d:06:37:38:55:c0:35:e4:e0:d0:d9:98:48:0c:36:
         10:a4:82:a6:c4:aa:c6:0a:2d:87:1c:25:5f:ae:23:b0:b3:d5:
         ef:e2:fa:9a:99:56:23:61:d7:aa:74:5c:f1:73:50:86:9a:71:
         fc:72:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----