Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa
File:                     323830363a3334353a3a2f33322d3332203d3e20323635353936.roa (raw, json)
Hash identifier:          gJ2KE+hhCnBlKNK4IXm1DBQhXwWRHEEVfQKtsDSjF60=
Subject key identifier:   37:55:A2:46:4D:9C:6C:89:DB:B4:A2:CA:B8:ED:A4:6F:17:46:DE:9B
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       52D5DED90B9EF8FB515F09C5A573B632D4305A15
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa
Signing time:             Tue 04 Feb 2025 18:39:08 +0000
ROA not before:           Tue 04 Feb 2025 18:34:08 +0000
ROA not after:            Tue 03 Feb 2026 18:39:08 +0000
asID:                     265596
IP address blocks:        2806:345::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d5:de:d9:0b:9e:f8:fb:51:5f:09:c5:a5:73:b6:32:d4:30:5a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Feb  4 18:34:08 2025 GMT
            Not After : Feb  3 18:39:08 2026 GMT
        Subject: CN=3755A2464D9C6C89DBB4A2CAB8EDA46F1746DE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:13:99:dc:a3:41:9d:8f:5c:28:f2:d4:4c:
                    27:a8:51:c5:d1:8e:bb:6f:45:79:f4:dc:18:9d:97:
                    0d:b1:65:94:ee:37:13:6b:87:92:d4:e1:75:b5:8d:
                    e2:dd:47:e0:a3:97:b4:69:35:4e:80:3b:a6:e2:2f:
                    9f:d9:cf:4a:b3:bf:87:fb:e2:31:2c:08:e7:f6:1b:
                    70:d3:9d:b1:a5:4d:c3:fe:31:0c:b1:7d:bf:ce:7d:
                    18:76:9a:69:87:06:dc:2d:a5:e6:7f:50:50:d3:f6:
                    10:a0:ab:5b:28:53:b0:07:cc:31:8a:17:df:5e:4e:
                    50:3c:b1:ff:00:53:0e:df:92:f5:96:bc:15:f7:4b:
                    a5:7e:fc:a4:6a:5f:a6:2b:23:93:b5:2f:88:ba:10:
                    84:c3:38:cf:bb:61:44:d6:b2:e1:1b:02:70:09:44:
                    31:73:8f:b1:5e:aa:f5:46:2a:f8:74:b8:f2:f6:d6:
                    83:c9:20:80:b2:a6:02:de:2e:71:51:b6:0e:c0:5a:
                    5f:be:7b:0e:65:0a:e4:e3:de:f9:3a:d2:ec:9d:8c:
                    80:61:6f:80:4f:42:34:46:9c:a8:3a:64:ca:b3:f4:
                    bf:bd:e4:67:75:08:04:0b:28:cd:0e:77:73:f9:25:
                    db:d6:40:f4:b8:82:41:f9:56:19:ff:bd:bd:08:9a:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:A2:46:4D:9C:6C:89:DB:B4:A2:CA:B8:ED:A4:6F:17:46:DE:9B
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/323830363a3334353a3a2f33322d3332203d3e20323635353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:345::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:07:01:71:73:93:d1:e4:2f:f9:a0:38:2c:1b:6a:a4:ed:1c:
         95:37:eb:86:af:30:d0:9a:40:f9:1d:46:f0:a6:aa:27:aa:35:
         95:e5:90:b5:b0:77:03:3b:63:91:c3:d5:77:4d:21:1e:c5:b8:
         c5:06:2e:e6:45:e4:55:e5:4d:e3:50:ea:bb:b4:9f:84:0c:5d:
         e8:02:79:24:de:90:4c:1f:45:80:64:5b:b8:b9:2e:4c:1d:b1:
         d3:7a:04:96:58:fb:00:00:c7:c3:9a:d7:ef:46:25:61:22:a3:
         a3:44:32:8f:7c:e3:50:58:5b:1f:8f:d6:82:99:ef:5c:f7:e1:
         61:86:00:37:df:54:b2:17:17:0a:60:00:65:e2:36:9b:23:3d:
         a7:95:68:bb:88:5e:20:a5:7d:07:43:2e:df:8b:f1:92:f0:e0:
         01:00:1c:49:7f:25:b5:ec:50:e5:cd:77:67:20:fa:02:33:3a:
         dd:a5:a6:1e:5a:05:1f:9b:19:c6:9f:d3:30:0e:81:49:d5:16:
         67:ba:f6:21:8e:b0:7e:9a:5c:ba:b1:4e:b8:95:41:c3:29:fb:
         b0:90:51:a6:de:d4:48:46:e8:dd:d6:ee:72:b1:d4:d4:dc:09:
         fe:c4:60:7e:b1:18:2b:85:c4:fb:41:b7:b1:ef:3e:ed:9e:3e:
         82:82:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----