Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
File:                     323830363a3231373a3a2f33322d3332203d3e203238333934.roa (raw, json)
Hash identifier:          xjfpSH6SpNb2QkVSVvVwlY4WPfLTWs6CB/odpZFviRI=
Subject key identifier:   8E:7D:FD:0E:C5:A2:D1:2D:08:44:0A:5A:00:E1:04:B5:D7:6F:3A:60
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       59A80476EBB1B160F04F39077D00F9DECC5A05ED
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa
Signing time:             Mon 19 Aug 2024 18:40:01 +0000
ROA not before:           Mon 19 Aug 2024 18:35:01 +0000
ROA not after:            Mon 18 Aug 2025 18:40:01 +0000
asID:                     28394
IP address blocks:        2806:217::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a8:04:76:eb:b1:b1:60:f0:4f:39:07:7d:00:f9:de:cc:5a:05:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Aug 19 18:35:01 2024 GMT
            Not After : Aug 18 18:40:01 2025 GMT
        Subject: CN=8E7DFD0EC5A2D12D08440A5A00E104B5D76F3A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:dc:0e:8e:dd:38:72:6b:3e:4e:ad:b6:cc:
                    45:64:21:5b:b4:13:d3:b1:88:53:4d:90:31:09:7c:
                    f5:cd:13:65:9d:a8:58:f1:90:cf:75:03:01:82:2f:
                    9d:bf:43:1f:e4:16:f8:1c:6c:98:09:f7:40:b5:ba:
                    bc:69:26:53:95:03:ca:a6:d7:6f:0b:c0:59:0c:af:
                    35:47:2a:fe:59:44:62:e6:a3:70:7c:c0:3e:31:33:
                    7d:1c:7b:24:ef:ef:48:31:f9:b8:62:07:f9:37:99:
                    ac:10:89:b0:f8:32:0b:34:68:c7:b1:b7:d1:00:18:
                    0f:5d:f7:27:6c:57:6f:c7:1d:27:42:05:6f:d3:07:
                    9c:96:ff:4d:57:c4:9d:4b:39:30:94:52:49:23:a8:
                    f7:fb:6e:ed:cc:26:a0:51:76:4d:31:84:a1:5b:9b:
                    6f:27:a9:9c:1a:88:fd:60:69:ba:d9:49:6d:85:a0:
                    b3:14:41:d9:a0:75:06:12:85:04:39:f2:9c:67:f7:
                    f4:5c:00:70:01:ef:6c:32:15:82:c2:f9:dd:df:99:
                    5f:73:7f:8b:7e:b7:75:b0:1f:1f:68:55:e5:d0:dc:
                    11:c4:42:cb:5b:f6:8c:f5:2e:a2:8d:03:b2:43:ce:
                    2c:f2:60:86:fb:5c:99:ee:dd:66:03:ac:78:19:fc:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7D:FD:0E:C5:A2:D1:2D:08:44:0A:5A:00:E1:04:B5:D7:6F:3A:60
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/323830363a3231373a3a2f33322d3332203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:217::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:b3:39:c9:b2:d0:9b:09:1b:eb:65:46:2b:fe:ed:58:77:
         95:fd:48:53:51:44:5b:0c:ea:42:66:53:cf:84:e7:62:46:71:
         c5:2d:20:9b:c8:9d:50:35:55:6f:fa:62:d3:de:98:cf:0f:b1:
         f4:c6:3e:d9:a0:0c:d6:0b:e0:4f:53:39:e2:c3:e7:da:c8:3b:
         1c:c1:c6:38:0a:f9:3a:9c:17:5f:a3:91:1c:98:43:da:a8:db:
         fe:d8:d2:45:01:8c:75:c6:a6:69:ac:61:f8:5d:8b:63:4f:ef:
         69:89:d9:b7:a7:99:ac:8a:67:3d:60:45:4c:8b:54:99:8f:1a:
         b0:a9:16:1c:84:7a:2d:f7:86:54:32:9c:69:6c:52:c0:45:72:
         4d:35:b6:b7:de:7c:a3:78:b4:2f:bd:aa:fe:f1:c8:ad:9d:5a:
         2e:ce:0f:21:b4:d5:aa:1e:30:b4:e4:6e:b0:94:61:5b:f3:ba:
         d2:90:08:04:5e:40:ee:70:60:33:69:5f:8f:36:b0:5f:91:e1:
         9e:6f:2d:b7:cd:0d:d4:c0:c1:3f:f1:de:2f:2a:c9:32:f3:b2:
         64:cd:73:b6:9e:bb:9e:5d:f3:f2:c6:fe:03:ab:0e:46:26:d0:
         99:95:22:1d:10:92:98:b7:be:3a:20:03:1e:4c:63:48:d2:70:
         12:f8:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----