Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa
File:                     323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa (raw, json)
Hash identifier:          G0CJCz8psteyeWEnC+Oqcq+ge3ruauA+V90Mqi8Ddyg=
Subject key identifier:   A5:60:46:5E:32:6F:98:60:36:18:3A:16:FF:67:85:A8:D4:63:8F:F9
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       340DED15DB64C3455FFB6AB27F0A0E8110EFA935
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa
Signing time:             Tue 04 Feb 2025 19:58:07 +0000
ROA not before:           Tue 04 Feb 2025 19:53:07 +0000
ROA not after:            Tue 03 Feb 2026 19:58:07 +0000
asID:                     28458
IP address blocks:        2806:202:2::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:ed:15:db:64:c3:45:5f:fb:6a:b2:7f:0a:0e:81:10:ef:a9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Feb  4 19:53:07 2025 GMT
            Not After : Feb  3 19:58:07 2026 GMT
        Subject: CN=A560465E326F986036183A16FF6785A8D4638FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:d0:0e:45:cc:a3:ed:9f:a1:fb:8a:9d:18:
                    36:e6:16:54:24:53:5d:35:25:03:9e:16:1c:b6:9a:
                    ce:3e:72:7f:01:07:29:a1:58:a6:85:3e:6a:d7:5b:
                    36:24:ec:b6:8f:5c:88:77:a1:07:d5:1f:e7:db:c8:
                    b8:86:29:09:d0:03:62:29:30:93:8d:0f:57:c6:5e:
                    19:5d:b8:bd:0e:01:f3:48:4f:cc:7f:00:90:92:93:
                    88:1d:54:49:a4:3b:e6:6e:82:8a:84:de:c2:ee:ed:
                    a2:09:72:30:14:87:5e:5d:d4:5b:00:69:16:cc:c6:
                    46:71:94:d9:40:72:09:b9:32:b5:03:02:95:af:d9:
                    d2:a0:69:a4:f6:28:d4:f0:37:54:b8:48:52:fe:e2:
                    e1:64:f7:ba:9e:43:ae:73:ad:af:24:2e:00:d7:06:
                    ac:77:e4:1b:c8:e5:c4:94:85:0d:fb:54:25:21:31:
                    b5:b8:6f:a2:99:76:c0:56:ed:a1:63:e0:f1:d9:83:
                    92:4b:5d:a8:e2:40:99:12:32:55:24:c2:29:6b:ad:
                    29:0b:91:11:a1:89:69:06:fc:ed:52:55:c1:d7:92:
                    a4:f7:70:30:2c:ae:5e:5f:d4:56:66:cd:69:cc:44:
                    bf:07:ae:07:99:73:99:56:26:9c:fb:5d:56:fd:8d:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:46:5E:32:6F:98:60:36:18:3A:16:FF:67:85:A8:D4:63:8F:F9
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:27:a0:32:ff:88:25:6f:17:1b:f9:ba:cb:18:a4:db:ba:35:
         ee:8f:03:40:b1:43:20:cc:b3:5e:1b:e5:4c:20:13:71:50:f4:
         8b:39:16:95:48:0c:9a:08:59:20:c1:a8:dc:53:d5:a7:8e:b7:
         a0:0b:ad:61:a3:78:b4:be:db:19:aa:ae:14:95:3e:c0:eb:00:
         3c:cb:6e:3e:88:d6:bd:1f:89:19:27:b4:f1:d2:14:31:92:0d:
         96:cb:09:38:87:34:f8:b8:fd:64:75:e1:b8:f1:1f:c5:81:1b:
         ae:8d:e9:37:6d:ff:1c:cb:69:2d:ee:58:25:76:da:f0:b4:77:
         7a:49:d4:74:42:90:2e:bf:bc:c3:07:81:b2:39:30:99:d8:06:
         a9:ab:0a:b6:dd:bf:52:57:10:17:cc:34:ed:98:f0:58:78:0b:
         4d:01:71:4d:19:55:d4:79:93:fb:8c:cc:45:e7:27:a4:bb:c7:
         90:6c:2c:23:4e:75:63:ea:10:62:e9:22:91:65:b7:7b:13:e5:
         9b:22:b5:0b:32:ed:f7:a5:f2:d1:4f:ae:65:15:ed:70:52:48:
         cf:63:a7:37:df:4a:d7:8c:b7:c9:82:fd:f7:9a:22:d2:c7:c9:
         a0:ea:06:19:41:5a:ed:bb:4b:81:75:4a:78:0c:57:62:81:c7:
         bc:85:8b:f4
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUNA3tFdtkw0Vf+2qyfwoOgRDvqTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJGMjNFNEFGQUFERTM3NDI1QjYxOTgyNkM4RTAwRTA3
RUUyNkJFRjAeFw0yNTAyMDQxOTUzMDdaFw0yNjAyMDMxOTU4MDdaMDMxMTAvBgNV
BAMTKEE1NjA0NjVFMzI2Rjk4NjAzNjE4M0ExNkZGNjc4NUE4RDQ2MzhGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYdAORcyj7Z+h+4qdGDbmFlQk
U101JQOeFhy2ms4+cn8BBymhWKaFPmrXWzYk7LaPXIh3oQfVH+fbyLiGKQnQA2Ip
MJOND1fGXhlduL0OAfNIT8x/AJCSk4gdVEmkO+ZugoqE3sLu7aIJcjAUh15d1FsA
aRbMxkZxlNlAcgm5MrUDApWv2dKgaaT2KNTwN1S4SFL+4uFk97qeQ65zra8kLgDX
Bqx35BvI5cSUhQ37VCUhMbW4b6KZdsBW7aFj4PHZg5JLXajiQJkSMlUkwilrrSkL
kRGhiWkG/O1SVcHXkqT3cDAsrl5f1FZmzWnMRL8HrgeZc5lWJpz7XVb9jVONAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUpWBGXjJvmGA2GDoW/2eFqNRjj/kwHwYDVR0j
BBgwFoAUq/I+Svqt43QlthmCbI4A4H7ia+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QjUzQzc5NTBCQkU2NTZFRjdGMkVDODY1QUEwNENGOTFE
QzZBODNBOERBQjFBRjJEQUY0NTdGQjFGMERCNTYyLzAvQUJGMjNFNEFGQUFERTM3
NDI1QjYxOTgyNkM4RTAwRTA3RUUyNkJFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQkYyM0U0QUZBQURFMzc0MjVC
NjE5ODI2QzhFMDBFMDdFRTI2QkVGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUI1M0M3OTUwQkJFNjU2RUY3RjJFQzg2NUFBMDRDRjkxREM2QTgzQThE
QUIxQUYyREFGNDU3RkIxRjBEQjU2Mi8wLzMyMzgzMDM2M2EzMjMwMzIzYTMyM2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzODM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgGAgIA
AjANBgkqhkiG9w0BAQsFAAOCAQEAdiegMv+IJW8XG/m6yxik27o17o8DQLFDIMyz
XhvlTCATcVD0izkWlUgMmghZIMGo3FPVp463oAutYaN4tL7bGaquFJU+wOsAPMtu
PojWvR+JGSe08dIUMZINlssJOIc0+Lj9ZHXhuPEfxYEbro3pN23/HMtpLe5YJXba
8LR3eknUdEKQLr+8wweBsjkwmdgGqasKtt2/UlcQF8w07ZjwWHgLTQFxTRlV1HmT
+4zMRecnpLvHkGwsI051Y+oQYukikWW3exPlmyK1CzLt96Xy0U+uZRXtcFJIz2On
N99K14y3yYL995oi0sfJoOoGGUFa7btLgXVKeAxXYoHHvIWL9A==
-----END CERTIFICATE-----