Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33322d3332203d3e203238343531.roa
File:                     323830363a3366393a3a2f33322d3332203d3e203238343531.roa (raw, json)
Hash identifier:          W2Ado/bnsakfht+yPfETkhm3Q+mG/EEKNt8Gx64eczA=
Subject key identifier:   CB:0C:1E:E9:A6:49:ED:6C:82:A0:8A:45:EA:31:28:A9:46:E4:6B:F0
Certificate issuer:       /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial:       1F4CB6CF4E7E4797DA9F24930EBB155D4940C2BE
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33322d3332203d3e203238343531.roa
Signing time:             Wed 05 Mar 2025 23:35:00 +0000
ROA not before:           Wed 05 Mar 2025 23:30:00 +0000
ROA not after:            Wed 04 Mar 2026 23:35:00 +0000
asID:                     28451
IP address blocks:        2806:3f9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:b6:cf:4e:7e:47:97:da:9f:24:93:0e:bb:15:5d:49:40:c2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
        Validity
            Not Before: Mar  5 23:30:00 2025 GMT
            Not After : Mar  4 23:35:00 2026 GMT
        Subject: CN=CB0C1EE9A649ED6C82A08A45EA3128A946E46BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:d6:a3:9c:63:0f:b3:65:27:fd:ee:6c:f5:
                    df:84:10:23:77:bf:db:b9:99:25:54:f5:2a:3a:b5:
                    44:fc:df:89:74:b9:fd:7a:5a:03:1c:ad:40:be:64:
                    ae:00:ad:1c:b0:26:a9:dd:3e:a5:02:9a:8f:6e:5d:
                    37:8a:81:6a:7d:1f:53:6f:ce:2b:fa:d1:d6:7c:0b:
                    c2:27:5f:72:28:e4:8f:d8:14:17:bd:25:de:2a:c1:
                    0d:56:ec:d4:9c:1d:9f:45:25:b5:fb:6a:87:93:f8:
                    27:a0:db:4d:ae:b1:9f:58:9c:aa:48:19:7f:2d:e2:
                    84:40:9a:58:88:5f:66:b8:d5:3d:4f:a7:47:63:95:
                    ae:7d:53:28:75:ee:48:51:9b:2a:e1:23:0c:a5:98:
                    cb:7c:2d:dc:48:4b:03:38:f2:21:06:74:3b:3e:63:
                    98:38:80:2d:ce:95:f8:6e:dc:b0:02:1a:11:18:d1:
                    9b:7a:24:10:7a:a4:97:8e:bb:51:f2:a8:ce:f4:e4:
                    03:e5:80:58:e4:85:46:00:8b:cd:ab:5a:3c:be:94:
                    52:4f:72:78:23:37:ad:1a:e8:a6:7d:8f:37:4d:a3:
                    3f:a3:f2:9d:3b:d0:3c:05:e7:2c:00:30:5f:b1:64:
                    28:2c:21:9e:3a:86:ae:af:a9:fc:9d:6e:e3:07:1e:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0C:1E:E9:A6:49:ED:6C:82:A0:8A:45:EA:31:28:A9:46:E4:6B:F0
            X509v3 Authority Key Identifier:
                keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a3a2f33322d3332203d3e203238343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:e1:2e:93:46:e1:14:7a:7c:54:75:bc:c0:09:1d:67:16:14:
         ce:0d:f7:f2:10:bf:c1:3c:5d:1a:1d:3b:7f:4b:4a:fb:18:6b:
         05:5b:6c:f7:98:76:99:a5:82:c0:03:50:08:ca:cd:28:5b:76:
         7a:83:2d:1d:4c:15:21:87:17:83:9e:26:5d:2e:8b:17:92:6c:
         4d:bb:42:f8:f9:8c:82:0b:02:67:d2:23:d9:3b:61:4d:f2:85:
         c5:7d:6a:86:2e:61:69:f7:77:5e:8b:d3:00:8b:90:90:9e:02:
         22:08:18:bd:59:ef:e9:b3:ab:82:09:5c:b1:bb:7f:36:98:bb:
         fb:6c:37:f4:44:a8:a0:3a:cf:45:6e:ad:48:67:49:25:60:00:
         7e:61:b9:a9:93:e2:bb:cb:66:0c:99:25:56:b1:31:a3:44:16:
         6e:54:54:5f:0a:d9:24:6c:d3:93:2f:2f:63:b2:24:7e:3f:73:
         46:9a:0f:92:7b:6d:dd:aa:66:52:62:87:7d:89:b4:0e:be:0e:
         9f:c6:c4:51:5a:e8:1d:6e:07:c3:14:10:f1:cd:b0:13:a7:e4:
         63:af:fa:73:13:a6:f0:ac:51:93:26:e2:9a:60:32:e4:70:fe:
         a7:2d:55:1e:80:3d:aa:b2:3d:34:df:ed:82:1f:59:4d:b8:cb:
         18:f4:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----