Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa
File:                     323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa (raw, json)
Hash identifier:          FFiOhkg5GtC04F1mbpRc2dlMLOMmEDYTIaEvRxACyVE=
Subject key identifier:   B7:FA:6D:4E:C3:0D:DC:3A:4F:8A:65:3A:01:CC:B7:78:04:AA:B4:34
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       785394A5BC3D3A9964EF4D725FD58F9457592D85
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa
Signing time:             Thu 11 Jul 2024 01:45:00 +0000
ROA not before:           Thu 11 Jul 2024 01:40:00 +0000
ROA not after:            Thu 10 Jul 2025 01:45:00 +0000
asID:                     270160
IP address blocks:        2806:3e7:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:53:94:a5:bc:3d:3a:99:64:ef:4d:72:5f:d5:8f:94:57:59:2d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jul 11 01:40:00 2024 GMT
            Not After : Jul 10 01:45:00 2025 GMT
        Subject: CN=B7FA6D4EC30DDC3A4F8A653A01CCB77804AAB434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:22:d9:0d:4b:50:5b:11:44:50:b6:84:b5:
                    d5:00:d0:f7:b8:bf:ce:94:b2:b5:99:e3:19:8b:aa:
                    3e:f8:03:78:ba:6b:b3:d1:77:9d:7b:56:e8:8a:58:
                    c9:60:b0:70:9d:b8:6e:7f:bd:f4:f0:15:5a:eb:ed:
                    22:88:08:18:13:8c:6d:40:11:ab:9b:5b:ef:a7:28:
                    91:d4:e8:70:97:1c:d3:44:09:84:6e:fb:5c:60:21:
                    97:1e:e4:97:68:a3:70:7d:37:7a:27:d1:0c:a2:9e:
                    99:86:3a:30:d0:6f:10:0a:1c:65:9a:c1:f0:a3:0e:
                    84:ed:02:16:89:60:b0:04:ec:fa:f7:0d:fe:b8:5e:
                    bb:5f:00:53:fd:d1:5f:72:91:38:92:61:31:8b:58:
                    7b:d3:33:a8:4b:22:5e:e1:5b:7f:07:e8:97:df:7a:
                    a7:9d:f1:45:88:80:6b:26:97:8f:0c:fd:ea:5a:c1:
                    60:7c:8a:a5:4c:79:de:0b:ec:c8:3a:95:37:a7:ac:
                    af:d4:ba:b3:4a:92:b1:a6:a7:6a:60:e4:0c:77:84:
                    1b:d6:50:53:8c:57:9e:1c:5f:e4:b5:f5:f7:14:07:
                    dd:dc:21:a1:82:2c:ac:03:39:f8:97:7e:48:c5:19:
                    43:0b:cd:13:83:92:3f:e2:14:4b:5c:d4:16:a0:ac:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FA:6D:4E:C3:0D:DC:3A:4F:8A:65:3A:01:CC:B7:78:04:AA:B4:34
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:ad:f9:07:30:c1:73:80:ff:d9:f4:e9:a1:bf:c9:bf:eb:01:
         30:ad:ba:d7:7b:fa:4a:94:c8:53:6f:db:94:71:27:76:88:1e:
         52:8a:ec:59:6d:ff:c5:c8:2e:b0:3f:ad:68:fe:c3:ec:13:87:
         37:f8:c9:30:4a:ef:de:3b:22:1b:cd:48:66:9e:b1:b5:30:ae:
         b9:54:08:1c:33:7f:b7:2e:51:66:f3:6f:6e:a0:cc:3c:fb:40:
         d1:3f:6e:26:1e:3d:9d:d5:d9:fd:9c:c1:53:3f:4b:12:f4:c8:
         bb:61:c8:ea:22:44:bc:fb:a8:02:77:e3:9c:41:a2:68:dc:d4:
         64:73:8e:19:77:bb:68:6e:5e:09:c0:04:53:ef:48:5c:21:6b:
         f1:6d:03:7a:58:00:bc:1f:17:fe:cc:d6:5a:2b:bf:7c:a8:fc:
         17:f8:d3:dd:6f:a2:76:22:f5:26:75:a7:27:1e:16:d7:65:1e:
         81:e4:7c:45:97:ee:cf:a8:a2:60:a8:33:0b:ba:a4:10:d3:63:
         f0:58:5f:df:df:9a:7b:f1:8b:34:9a:ca:87:9f:3d:32:1f:73:
         36:1a:65:e7:32:7b:d2:a5:58:9b:28:1c:d1:46:f4:f8:f4:48:
         76:f1:a2:ba:e9:cc:fd:89:9a:bc:2d:32:39:7b:55:9e:6e:e8:
         be:58:3c:fa
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUeFOUpbw9Oplk701yX9WPlFdZLYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRFMDkzNDkzNEZGRUMxMjE2MkVBRkQ1NzE2RDBBRjky
MERDNjNBRDAeFw0yNDA3MTEwMTQwMDBaFw0yNTA3MTAwMTQ1MDBaMDMxMTAvBgNV
BAMTKEI3RkE2RDRFQzMwRERDM0E0RjhBNjUzQTAxQ0NCNzc4MDRBQUI0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9yLZDUtQWxFEULaEtdUA0Pe4
v86UsrWZ4xmLqj74A3i6a7PRd517VuiKWMlgsHCduG5/vfTwFVrr7SKICBgTjG1A
EaubW++nKJHU6HCXHNNECYRu+1xgIZce5Jdoo3B9N3on0QyinpmGOjDQbxAKHGWa
wfCjDoTtAhaJYLAE7Pr3Df64XrtfAFP90V9ykTiSYTGLWHvTM6hLIl7hW38H6Jff
eqed8UWIgGsml48M/epawWB8iqVMed4L7Mg6lTenrK/UurNKkrGmp2pg5Ax3hBvW
UFOMV54cX+S19fcUB93cIaGCLKwDOfiXfkjFGUMLzRODkj/iFEtc1BagrAA1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUt/ptTsMN3DpPimU6Acy3eASqtDQwHwYDVR0j
BBgwFoAUtOCTSTT/7BIWLq/VcW0K+SDcY60wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RkE2QTNBRTE2RkFENDlFRTAwNTJEODhCMjhFMjBFMjAz
NEU0MEU0NDkxQ0Y0Mjk0ODhCQjMzNkQ2NTcxQTYwLzAvQjRFMDkzNDkzNEZGRUMx
MjE2MkVBRkQ1NzE2RDBBRjkyMERDNjNBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNEUwOTM0OTM0RkZFQzEyMTYy
RUFGRDU3MTZEMEFGOTIwREM2M0FELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUZBNkEzQUUxNkZBRDQ5RUUwMDUyRDg4QjI4RTIwRTIwMzRFNDBFNDQ5
MUNGNDI5NDg4QkIzMzZENjU3MUE2MC8wLzMyMzgzMDM2M2EzMzY1MzczYTM0MzAz
MDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNzMwMzEzNjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAYD50AwDQYJKoZIhvcNAQELBQADggEBAImt+QcwwXOA/9n06aG/yb/rATCt
utd7+kqUyFNv25RxJ3aIHlKK7Flt/8XILrA/rWj+w+wThzf4yTBK7947IhvNSGae
sbUwrrlUCBwzf7cuUWbzb26gzDz7QNE/biYePZ3V2f2cwVM/SxL0yLthyOoiRLz7
qAJ345xBomjc1GRzjhl3u2huXgnABFPvSFwha/FtA3pYALwfF/7M1lorv3yo/Bf4
091vonYi9SZ1pyceFtdlHoHkfEWX7s+oomCoMwu6pBDTY/BYX9/fmnvxizSayoef
PTIfczYaZecye9KlWJsoHNFG9Pj0SHbxorrpzP2JmrwtMjl7VZ5u6L5YPPo=
-----END CERTIFICATE-----