Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a383030303a3a2f33342d3334203d3e203238343531.roa
File:                     323830363a3366393a383030303a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier:          Ctlb7I/dUPSBeLL2PnF3rMEokhXP3HIAKLUVW/G+EuI=
Subject key identifier:   C9:3C:5B:D5:9D:16:36:23:DD:FE:16:5C:DA:9C:1F:D5:0A:D5:F1:79
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       555D1AE490C90B54E953F1520D44E16690A64F3F
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a383030303a3a2f33342d3334203d3e203238343531.roa
Signing time:             Wed 05 Mar 2025 23:35:00 +0000
ROA not before:           Wed 05 Mar 2025 23:30:00 +0000
ROA not after:            Wed 04 Mar 2026 23:35:00 +0000
asID:                     28451
IP address blocks:        2806:3f9:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5d:1a:e4:90:c9:0b:54:e9:53:f1:52:0d:44:e1:66:90:a6:4f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Mar  5 23:30:00 2025 GMT
            Not After : Mar  4 23:35:00 2026 GMT
        Subject: CN=C93C5BD59D163623DDFE165CDA9C1FD50AD5F179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:77:ed:24:22:0f:35:ff:c7:5c:f5:c4:2f:
                    cd:39:1a:8b:fb:cb:75:a9:2a:9b:c3:8e:30:e7:dd:
                    24:24:b3:3f:12:9d:55:57:7a:fc:df:39:04:90:a4:
                    12:33:13:60:8e:ea:ec:19:32:a6:70:79:dd:ce:7d:
                    be:32:75:76:02:6c:26:b9:da:94:47:99:a1:51:4c:
                    cb:d7:2a:80:20:a4:9d:07:9e:35:a5:c3:fe:13:b1:
                    f8:82:55:d8:57:ab:a5:3c:da:40:75:aa:ff:db:19:
                    61:a9:ca:33:3e:4c:39:d7:d4:41:2d:2a:60:76:c9:
                    2c:83:b3:da:e4:b2:9a:a3:d9:49:61:84:04:dc:d5:
                    a8:cb:ff:27:cf:4a:42:64:de:59:9b:f1:b4:1e:f6:
                    02:b7:29:58:9a:b5:fe:9e:6f:66:72:0c:b7:1e:5f:
                    f4:a5:bf:64:62:b6:79:81:9a:ff:67:81:89:d5:42:
                    84:5a:e2:5f:a2:c2:ae:97:6a:77:b9:a7:90:3f:e7:
                    2c:2b:d1:ba:35:b7:bb:95:a9:8e:ea:df:ef:66:f5:
                    d5:56:88:b6:db:ea:c3:22:72:e3:71:e2:c5:1b:81:
                    86:d0:cb:4f:5f:27:7f:6e:b3:21:e8:d3:e1:41:72:
                    ed:9a:6f:84:bd:79:4f:3d:8a:d4:74:c7:0d:e1:c6:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:5B:D5:9D:16:36:23:DD:FE:16:5C:DA:9C:1F:D5:0A:D5:F1:79
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a383030303a3a2f33342d3334203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:62:7f:23:08:64:81:80:61:f6:fe:83:7e:78:35:13:d4:64:
         fb:e2:8a:74:da:f2:c7:45:17:00:fd:1a:b5:a3:5b:28:3a:66:
         31:7b:70:b1:71:8a:07:65:3c:44:48:f6:4c:92:89:11:c4:96:
         e0:f8:31:3f:84:fa:00:5f:4a:f3:06:f5:35:4e:45:ba:b3:af:
         e6:dd:01:33:12:ab:31:31:df:6d:af:89:ae:d2:2a:b2:f4:10:
         06:55:9f:df:c7:94:f5:b8:fe:24:89:b1:03:75:7e:b2:21:2e:
         63:27:98:85:44:e0:64:76:be:7e:69:cd:45:36:03:3d:2c:c8:
         ce:ba:d9:72:fd:20:7d:22:60:99:c4:5c:d0:95:e6:c4:5b:ca:
         f5:a5:93:dc:9e:87:cc:12:2e:71:e8:a3:50:f3:9d:d7:d5:5f:
         3a:dd:a6:e6:37:5a:52:14:3d:18:71:f3:0b:87:ec:99:c2:eb:
         b0:d8:b7:68:a1:09:75:e9:62:78:a6:66:e2:9b:6e:bd:74:3d:
         2a:64:73:f1:2f:24:82:29:74:76:02:d5:67:15:5b:e1:5e:bc:
         d7:d8:ad:77:27:f3:f9:58:36:81:ea:48:e1:c4:fa:b8:54:da:
         ad:c0:e6:13:9e:60:e4:d7:73:fd:20:54:58:1e:8e:97:2d:db:
         83:ac:48:27
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUVV0a5JDJC1TpU/FSDUThZpCmTz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMzNDY3OTVFOEMw
NzUzRDNEQjAeFw0yNTAzMDUyMzMwMDBaFw0yNjAzMDQyMzM1MDBaMDMxMTAvBgNV
BAMTKEM5M0M1QkQ1OUQxNjM2MjNEREZFMTY1Q0RBOUMxRkQ1MEFENUYxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxXftJCIPNf/HXPXEL805Gov7
y3WpKpvDjjDn3SQksz8SnVVXevzfOQSQpBIzE2CO6uwZMqZwed3Ofb4ydXYCbCa5
2pRHmaFRTMvXKoAgpJ0HnjWlw/4TsfiCVdhXq6U82kB1qv/bGWGpyjM+TDnX1EEt
KmB2ySyDs9rkspqj2UlhhATc1ajL/yfPSkJk3lmb8bQe9gK3KViatf6eb2ZyDLce
X/Slv2RitnmBmv9ngYnVQoRa4l+iwq6Xane5p5A/5ywr0bo1t7uVqY7q3+9m9dVW
iLbb6sMicuNx4sUbgYbQy09fJ39usyHo0+FBcu2ab4S9eU89itR0xw3hxoMHAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUyTxb1Z0WNiPd/hZc2pwf1QrV8XkwHwYDVR0j
BBgwFoAU/4rAZwZQaOCctlHDRnlejAdT09swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZB
RjZCMUFBNzhDQjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhF
MDlDQjY1MUMzNDY3OTVFOEMwNzUzRDNEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjhBQzA2NzA2NTA2OEUwOUNC
NjUxQzM0Njc5NUU4QzA3NTNEM0RCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdDRTcxMjEzOEZGQUY2QjFBQTc4
Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzMyMzgzMDM2M2EzMzY2MzkzYTM4MzAz
MDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzODM0MzUzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
BigGA/mAMA0GCSqGSIb3DQEBCwUAA4IBAQABYn8jCGSBgGH2/oN+eDUT1GT74op0
2vLHRRcA/Rq1o1soOmYxe3CxcYoHZTxESPZMkokRxJbg+DE/hPoAX0rzBvU1TkW6
s6/m3QEzEqsxMd9tr4mu0iqy9BAGVZ/fx5T1uP4kibEDdX6yIS5jJ5iFROBkdr5+
ac1FNgM9LMjOutly/SB9ImCZxFzQlebEW8r1pZPcnofMEi5x6KNQ853X1V863abm
N1pSFD0YcfMLh+yZwuuw2LdooQl16WJ4pmbim269dD0qZHPxLySCKXR2AtVnFVvh
XrzX2K13J/P5WDaB6kjhxPq4VNqtwOYTnmDk13P9IFRYHo6XLduDrEgn
-----END CERTIFICATE-----