Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3332203d3e20323635353635.roa
File:                     323830363a3331353a3a2f33322d3332203d3e20323635353635.roa (raw, json)
Hash identifier:          MhccZLcT3+VDuL8BBLnVA5FjVGRuSLDF49lPYSCfYDE=
Subject key identifier:   59:61:3C:4B:3C:AA:FA:4B:B2:6D:7C:F2:8B:D7:A5:7D:C3:ED:BA:16
Certificate issuer:       /CN=CD4D03807099629120DE095935B1E371248DA857
Certificate serial:       662B57FFBAF187BFA1E02427A53876E58945E5C2
Authority key identifier: CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3332203d3e20323635353635.roa
Signing time:             Tue 05 Mar 2024 18:01:00 +0000
ROA not before:           Tue 05 Mar 2024 17:56:00 +0000
ROA not after:            Tue 04 Mar 2025 18:01:00 +0000
asID:                     265565
IP address blocks:        2806:315::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:57:ff:ba:f1:87:bf:a1:e0:24:27:a5:38:76:e5:89:45:e5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4D03807099629120DE095935B1E371248DA857
        Validity
            Not Before: Mar  5 17:56:00 2024 GMT
            Not After : Mar  4 18:01:00 2025 GMT
        Subject: CN=59613C4B3CAAFA4BB26D7CF28BD7A57DC3EDBA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:70:84:74:4d:ee:4d:09:e9:ae:34:ff:d3:
                    76:92:67:f3:b0:ff:6a:27:04:b6:3e:d6:21:96:61:
                    07:09:55:79:5e:d4:90:1c:c6:59:4c:42:2c:6d:72:
                    a9:4a:39:61:a7:1d:29:e3:34:5d:38:6f:91:48:a0:
                    9c:c1:5d:c8:f9:20:a1:1e:13:04:82:25:56:db:93:
                    a4:a3:d7:8f:98:6d:c9:5e:15:03:8c:e4:a9:22:b2:
                    ed:07:62:ab:ca:60:01:46:b2:78:f5:d2:ae:c8:0e:
                    4c:1e:b5:1e:be:96:10:8b:01:c5:df:c8:d0:b0:f4:
                    6d:fb:50:a1:db:d2:c9:b9:1f:b2:1e:1a:ef:58:69:
                    6c:db:f5:58:dd:fd:80:a6:d4:70:02:96:c0:84:62:
                    f6:0a:b7:cd:8b:24:dc:17:2c:34:1f:59:a8:b9:8f:
                    ef:b9:4e:8c:ad:30:32:43:70:9a:d1:cd:c6:ac:2e:
                    b6:d5:78:27:8e:17:55:7b:c7:a7:53:38:88:8b:18:
                    7f:eb:66:d1:f0:5b:59:08:e6:c4:aa:45:43:d4:db:
                    c1:0c:bb:cc:03:8b:dd:ac:c0:7a:fa:4c:f4:f7:5e:
                    56:9f:fb:2f:84:38:6b:0e:c7:c4:75:d8:d7:f4:7c:
                    b9:22:ca:ad:87:c8:23:b2:b8:d7:b5:34:5a:9b:09:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:3C:4B:3C:AA:FA:4B:B2:6D:7C:F2:8B:D7:A5:7D:C3:ED:BA:16
            X509v3 Authority Key Identifier:
                keyid:CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/CD4D03807099629120DE095935B1E371248DA857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/323830363a3331353a3a2f33322d3332203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:315::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:cb:ef:ee:65:6f:e6:95:e5:bc:50:d4:28:51:34:c4:54:
         74:a8:95:cb:9c:58:0e:22:d7:77:ce:09:27:52:d7:19:27:a6:
         78:c3:0d:5c:15:2d:d9:76:c5:d9:ce:f5:e8:0b:0b:73:68:a7:
         ec:1a:d8:88:0e:3e:d0:73:7f:a9:66:62:6a:7d:11:56:bf:05:
         30:a1:26:6b:32:69:01:31:2d:45:57:fa:ac:70:e0:a1:e3:7c:
         26:b3:b1:84:8c:a0:2d:d5:2c:a1:a2:a5:6d:a1:2f:32:bd:13:
         de:6d:65:82:09:be:48:fa:0a:4e:33:3f:cc:e8:df:bf:1e:21:
         82:02:37:fc:26:15:d8:fa:13:e1:3b:75:e9:5c:2d:28:c1:59:
         14:ed:bb:9b:ec:bf:59:a4:20:6e:81:d6:ca:8a:63:25:36:a8:
         b7:a9:9d:f7:19:aa:6a:02:a2:b2:0c:0c:37:36:27:42:53:78:
         10:b1:8b:47:10:b8:b7:d3:c5:c5:da:b5:39:e7:c2:f0:c5:77:
         0a:c5:e0:11:35:32:4e:19:e2:62:b9:d8:a5:fc:52:07:29:8a:
         b7:ba:6c:1a:33:56:43:91:50:a1:16:7e:3d:d0:8a:e3:60:0f:
         e3:13:a7:e1:c7:36:60:80:4b:d4:08:32:ea:eb:11:90:43:cb:
         c7:dc:ed:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----