Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e203238333938.roa
File:                     323830363a3431353a3a2f33352d3335203d3e203238333938.roa (raw, json)
Hash identifier:          tf6nqXTWEjB91G/8bm1ib3xK0gUip/RWGAeiS7FlLAA=
Subject key identifier:   B2:59:88:9B:AF:6F:33:AA:00:74:64:85:B7:9E:95:E1:85:76:63:28
Certificate issuer:       /CN=D24CCB0FA07D4E4955005CDC6D6A7EE65D5751FE
Certificate serial:       62D6A061AD3B301C0F0C85558D6A962AEBEC5EDE
Authority key identifier: D2:4C:CB:0F:A0:7D:4E:49:55:00:5C:DC:6D:6A:7E:E6:5D:57:51:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24CCB0FA07D4E4955005CDC6D6A7EE65D5751FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e203238333938.roa
Signing time:             Fri 19 Jul 2024 20:30:00 +0000
ROA not before:           Fri 19 Jul 2024 20:25:00 +0000
ROA not after:            Fri 18 Jul 2025 20:30:00 +0000
asID:                     28398
IP address blocks:        2806:415::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d6:a0:61:ad:3b:30:1c:0f:0c:85:55:8d:6a:96:2a:eb:ec:5e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24CCB0FA07D4E4955005CDC6D6A7EE65D5751FE
        Validity
            Not Before: Jul 19 20:25:00 2024 GMT
            Not After : Jul 18 20:30:00 2025 GMT
        Subject: CN=B259889BAF6F33AA00746485B79E95E185766328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:8b:40:b8:8c:a3:98:ca:27:a8:cb:65:68:
                    07:a0:a2:67:c1:f4:1e:06:55:a1:04:46:3c:27:f8:
                    64:7e:d1:cc:3e:19:b6:93:e9:20:de:49:aa:9a:0e:
                    73:e9:b1:5f:9c:b5:ba:6a:93:38:3b:6c:d2:94:8d:
                    ca:7a:02:a6:7f:fa:13:d3:f2:2a:20:86:74:c5:cb:
                    9a:01:6f:15:10:ac:a0:ca:56:29:03:7f:eb:15:ba:
                    99:81:89:d9:b0:85:39:5b:0c:4c:e2:28:a2:11:aa:
                    ff:92:a0:1b:b8:6f:12:fd:96:5b:9e:3b:6a:ce:51:
                    3b:a2:63:85:c1:bd:73:84:1f:49:f4:39:a9:5c:88:
                    3b:11:7c:37:23:fc:b6:4c:7f:be:ad:24:26:be:e1:
                    3e:2b:21:51:3d:e3:c0:5e:92:a8:bd:de:b5:c8:d8:
                    3d:34:7c:f9:19:61:b7:dc:e4:3d:ea:76:71:f9:66:
                    1b:c9:a7:95:10:d9:e8:51:63:53:80:00:f7:1e:9a:
                    6a:a2:b8:bf:77:de:e7:f6:f3:3a:c8:d5:24:65:88:
                    7c:f0:c5:93:8e:26:28:2f:1b:6b:11:7a:7b:c7:2e:
                    db:78:46:1b:c4:91:3a:79:61:f6:cd:fa:ed:32:8d:
                    5d:1f:cd:17:27:39:55:cb:e2:3c:c8:07:78:a7:43:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:59:88:9B:AF:6F:33:AA:00:74:64:85:B7:9E:95:E1:85:76:63:28
            X509v3 Authority Key Identifier:
                keyid:D2:4C:CB:0F:A0:7D:4E:49:55:00:5C:DC:6D:6A:7E:E6:5D:57:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/D24CCB0FA07D4E4955005CDC6D6A7EE65D5751FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24CCB0FA07D4E4955005CDC6D6A7EE65D5751FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADEBB7439F8BFB5A901B6888B899B5E9FFE2ACD6BC36D6E1DDFA15B16566BEFF/0/323830363a3431353a3a2f33352d3335203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:415::/35

    Signature Algorithm: sha256WithRSAEncryption
         7f:6d:a6:46:64:1f:e6:d9:16:2f:96:9f:e0:60:7d:0c:48:80:
         6a:f5:6c:c5:44:ef:a4:40:97:38:da:bd:cf:80:58:d1:88:a3:
         8e:f8:61:35:51:1c:cb:04:55:aa:b8:26:fa:47:17:9e:c3:c3:
         3d:72:e4:0e:7e:8b:2c:98:ef:9b:52:49:61:64:3b:75:fd:b0:
         f0:82:5f:1e:0a:54:33:85:0d:b4:f3:1a:00:11:f1:ce:10:9c:
         48:a0:d4:bf:29:d3:ee:5c:ce:81:2a:92:6e:c0:25:d7:53:44:
         14:a7:c2:f5:53:be:27:dc:ba:37:0a:a6:a2:1e:6f:43:e8:aa:
         bd:b3:35:80:f2:54:22:6a:27:a2:26:be:cb:88:5c:dd:17:3a:
         8d:35:a4:48:15:f6:26:bc:30:6d:d2:5c:47:60:73:7f:9c:f9:
         31:34:46:df:6b:a3:9b:e0:4b:21:a1:6e:23:da:05:8c:b4:99:
         83:b3:05:57:cb:30:b5:7b:83:a8:2a:88:84:55:5e:64:db:f5:
         7a:b8:26:fb:5e:3e:9c:4e:81:f0:e1:7a:58:66:eb:09:9d:cb:
         89:44:ba:b0:62:25:e9:bf:cd:bd:64:34:34:66:1c:06:ed:cb:
         d6:f6:0d:27:c8:e4:76:a2:52:54:9b:7c:6f:a9:7f:5b:41:e5:
         34:9f:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----