Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
File:                     323830363a3432343a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          6rIY096f3px9Tf7AmfHi0ePLAPrcxDVNQMst2sGpo8Y=
Subject key identifier:   7D:96:7F:A2:55:BB:3D:77:33:D7:48:99:49:98:0A:5A:07:98:66:8A
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       6D7B275F0C3D06B3B36CE667220F020A8472314C
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 04 Nov 2024 20:50:00 +0000
ROA not before:           Mon 04 Nov 2024 20:45:00 +0000
ROA not after:            Mon 03 Nov 2025 20:50:00 +0000
asID:                     0
IP address blocks:        2806:424::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7b:27:5f:0c:3d:06:b3:b3:6c:e6:67:22:0f:02:0a:84:72:31:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Nov  4 20:45:00 2024 GMT
            Not After : Nov  3 20:50:00 2025 GMT
        Subject: CN=7D967FA255BB3D7733D7489949980A5A0798668A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:c0:41:ca:f0:20:eb:18:e2:d9:37:91:a9:
                    91:32:67:95:7e:91:cf:55:bf:5d:d6:63:4c:4b:9a:
                    8d:ba:49:1d:ed:c7:84:48:59:8c:53:7e:0f:25:52:
                    5e:c0:05:a4:0e:d1:92:a4:04:28:4e:ff:3a:00:68:
                    ed:68:e2:17:80:4c:1d:58:e5:d2:55:07:bd:46:c2:
                    59:a8:50:48:27:be:1e:9c:0a:0e:55:77:dd:2e:b4:
                    f0:65:bc:9b:85:dc:3a:a4:1c:39:ed:3e:a6:57:69:
                    07:cf:d5:20:04:f1:1c:0f:a5:19:bd:b7:1d:90:ff:
                    9b:9d:16:20:69:b0:80:8c:9f:6a:dd:38:0b:25:4e:
                    11:a0:3c:20:e8:d7:98:ac:f5:18:8c:ff:ea:0d:c3:
                    05:77:23:ba:16:41:79:cd:55:41:ff:ad:9d:af:d2:
                    cd:94:77:03:dd:db:61:5e:c4:25:5f:5e:b7:04:f8:
                    48:b4:6c:ad:de:3c:66:86:26:06:d8:56:b4:f3:03:
                    d0:41:1b:9a:1e:d6:7e:88:5c:8c:b2:32:f7:13:02:
                    ca:a4:f1:15:bc:24:2e:2c:6e:32:0e:b6:20:3d:85:
                    73:4e:86:20:56:e6:5d:c7:6a:b1:e0:ae:5f:03:c4:
                    d5:17:33:69:46:52:96:02:d5:1a:76:dd:e3:68:bf:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:96:7F:A2:55:BB:3D:77:33:D7:48:99:49:98:0A:5A:07:98:66:8A
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/323830363a3432343a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:424::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:82:9f:da:d6:d7:1e:64:40:a2:01:ef:19:51:e6:e7:e9:19:
         17:c1:86:97:95:ba:19:25:a0:55:51:28:93:67:d6:6f:14:31:
         6c:5e:93:91:3d:80:76:24:fa:99:ae:6a:51:fa:f6:4d:8c:33:
         3b:5a:f6:25:e0:7c:c8:3c:c3:74:cc:d9:f4:44:da:ec:cb:c0:
         16:26:a9:32:3d:23:82:44:ce:bb:e7:92:43:cc:b3:36:19:c8:
         2f:23:46:3d:42:2f:81:8d:3b:a7:bd:42:5f:c3:d7:ed:7f:bf:
         74:5f:41:3d:0f:cd:c0:c8:be:30:01:94:83:3f:15:a4:0d:8d:
         6a:36:1c:15:ed:e8:b1:66:af:de:99:53:ad:b2:a3:0e:b6:e6:
         21:1b:93:2e:41:06:7e:d9:f3:aa:4e:0e:fd:77:f9:4f:c9:2e:
         93:3c:28:57:f3:19:8b:6d:51:c2:da:4a:6d:1a:37:23:4b:27:
         0d:54:a5:25:15:9f:c1:5b:db:94:47:98:46:3b:b5:de:b6:f7:
         70:bf:5a:77:97:49:9e:e0:93:a5:4e:4a:3d:0a:b4:cc:52:76:
         7f:c3:be:55:3d:09:d1:25:2b:ed:fe:8a:26:17:e4:eb:eb:80:
         9a:dc:73:a3:06:d1:9c:1d:2b:25:4b:b5:94:78:d9:11:67:4a:
         2f:6e:07:67
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUbXsnXww9BrOzbOZnIg8CCoRyMUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwODhENkZFQzNGRDE0QjcxREVEQjc4ODYwQzkwRDgy
NTU3MTQ2NjAeFw0yNDExMDQyMDQ1MDBaFw0yNTExMDMyMDUwMDBaMDMxMTAvBgNV
BAMTKDdEOTY3RkEyNTVCQjNENzczM0Q3NDg5OTQ5OTgwQTVBMDc5ODY2OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC758BByvAg6xji2TeRqZEyZ5V+
kc9Vv13WY0xLmo26SR3tx4RIWYxTfg8lUl7ABaQO0ZKkBChO/zoAaO1o4heATB1Y
5dJVB71GwlmoUEgnvh6cCg5Vd90utPBlvJuF3DqkHDntPqZXaQfP1SAE8RwPpRm9
tx2Q/5udFiBpsICMn2rdOAslThGgPCDo15is9RiM/+oNwwV3I7oWQXnNVUH/rZ2v
0s2UdwPd22FexCVfXrcE+Ei0bK3ePGaGJgbYVrTzA9BBG5oe1n6IXIyyMvcTAsqk
8RW8JC4sbjIOtiA9hXNOhiBW5l3HarHgrl8DxNUXM2lGUpYC1Rp23eNov6rlAgMB
AAGjggK/MIICuzAdBgNVHQ4EFgQUfZZ/olW7PXcz10iZSZgKWgeYZoowHwYDVR0j
BBgwFoAUQgiNb+w/0Utx3tt4hgyQ2CVXFGYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RTgyMUU2QjA3NTRGMkI0Q0U0NzUyMUYyMUUzRTczQ0I3
QUEyMjU4MEI5NUY5QzcyN0FCNjc2MEYyNUE1MDI4LzAvNDIwODhENkZFQzNGRDE0
QjcxREVEQjc4ODYwQzkwRDgyNTU3MTQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjA4OEQ2RkVDM0ZEMTRCNzFE
RURCNzg4NjBDOTBEODI1NTcxNDY2LmNlcjCBuwYIKwYBBQUHAQsEga4wgaswgagG
CCsGAQUFBzALhoGbcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUU4MjFFNkIwNzU0RjJCNENFNDc1MjFGMjFFM0U3M0NCN0FBMjI1ODBC
OTVGOUM3MjdBQjY3NjBGMjVBNTAyOC8wLzMyMzgzMDM2M2EzNDMyMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgGBCQAADANBgkqhkiG9w0B
AQsFAAOCAQEAUIKf2tbXHmRAogHvGVHm5+kZF8GGl5W6GSWgVVEok2fWbxQxbF6T
kT2AdiT6ma5qUfr2TYwzO1r2JeB8yDzDdMzZ9ETa7MvAFiapMj0jgkTOu+eSQ8yz
NhnILyNGPUIvgY07p71CX8PX7X+/dF9BPQ/NwMi+MAGUgz8VpA2NajYcFe3osWav
3plTrbKjDrbmIRuTLkEGftnzqk4O/Xf5T8kukzwoV/MZi21RwtpKbRo3I0snDVSl
JRWfwVvblEeYRju13rb3cL9ad5dJnuCTpU5KPQq0zFJ2f8O+VT0J0SUr7f6KJhfk
6+uAmtxzowbRnB0rJUu1lHjZEWdKL24HZw==
-----END CERTIFICATE-----