Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/323830363a3430333a3a2f33322d3332203d3e203238333937.roa
File:                     323830363a3430333a3a2f33322d3332203d3e203238333937.roa (raw, json)
Hash identifier:          Ou5CETSZQXI8Lr1YLsxqq3TYA8DMjIrErzMQzVvs/q0=
Subject key identifier:   47:A1:CC:53:31:B0:DA:B0:A3:19:4E:E3:C1:61:95:34:68:CF:C9:1E
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       6F3D5746CA8CB5E1FFB5B6D43629A03AD4974F23
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/323830363a3430333a3a2f33322d3332203d3e203238333937.roa
Signing time:             Tue 11 Mar 2025 17:40:00 +0000
ROA not before:           Tue 11 Mar 2025 17:35:00 +0000
ROA not after:            Tue 10 Mar 2026 17:40:00 +0000
asID:                     28397
IP address blocks:        2806:403::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3d:57:46:ca:8c:b5:e1:ff:b5:b6:d4:36:29:a0:3a:d4:97:4f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Mar 11 17:35:00 2025 GMT
            Not After : Mar 10 17:40:00 2026 GMT
        Subject: CN=47A1CC5331B0DAB0A3194EE3C161953468CFC91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:f6:e4:b1:2e:03:bd:9c:2e:b3:95:47:66:
                    73:a1:43:8c:a8:0e:c4:3e:09:b7:f1:b8:ca:69:89:
                    7c:14:75:2b:ac:8f:5a:59:7f:cd:d0:26:b9:ad:c4:
                    9c:f3:a6:c9:79:38:39:f2:a0:6c:49:d4:d6:b0:6a:
                    54:6f:94:d0:01:8b:30:0a:f3:21:17:a2:cb:04:bc:
                    ab:a2:8d:f1:44:e5:9d:db:03:ee:2e:35:4c:ee:8e:
                    d3:62:fc:30:17:97:3a:ba:cb:44:c4:06:eb:a5:d0:
                    d6:82:54:ee:30:47:77:89:80:a9:ee:15:cc:e8:da:
                    c3:45:89:a0:f3:c6:7a:a5:f0:1c:a4:14:a6:8a:74:
                    44:14:56:96:73:8c:93:42:80:ac:9f:c8:88:c5:5c:
                    ad:9a:1e:ac:b1:c3:af:6b:42:26:ae:da:bb:06:4e:
                    c5:92:bf:01:1e:16:c6:ef:74:0b:3d:03:75:4e:b5:
                    f9:d0:d6:e2:fe:22:d4:59:84:01:8c:d3:2d:08:e0:
                    72:b5:14:85:79:1e:3f:79:39:30:16:47:f6:49:da:
                    a9:4f:4d:16:e4:51:a1:e7:a3:40:91:f2:af:b1:05:
                    99:42:0a:54:40:4c:7d:14:43:a1:87:0f:53:d4:cb:
                    cc:22:4a:4b:97:5a:85:5f:20:96:63:df:94:bd:01:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A1:CC:53:31:B0:DA:B0:A3:19:4E:E3:C1:61:95:34:68:CF:C9:1E
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/323830363a3430333a3a2f33322d3332203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:403::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:b9:a5:e3:3a:ca:bf:f4:03:a3:4f:4f:e8:74:0e:3d:63:
         e9:56:a5:2f:c4:4d:98:25:9a:f2:ab:f7:ba:56:0f:a6:28:c5:
         3a:02:da:01:8d:f9:dc:32:af:d4:b8:49:a9:2c:a3:3d:ee:11:
         32:9f:82:5f:d1:d9:71:e2:17:36:fe:51:b9:50:5f:8e:ac:d8:
         bd:65:3c:87:8d:c2:a5:f6:c1:62:4b:3d:d6:1e:76:f5:90:99:
         9e:a5:59:f1:fa:21:ac:1d:37:98:65:0d:69:1c:f1:6b:c2:6f:
         97:8b:bc:0e:fa:3b:c7:12:8d:20:da:83:b2:fe:fc:e5:70:f0:
         32:32:71:1c:2e:f4:b9:62:9c:fd:f0:ce:02:ac:85:55:11:a9:
         cc:a8:06:e2:52:db:9f:17:b3:b2:83:ca:d2:85:42:e0:a2:b1:
         33:d5:df:8b:35:cf:ff:ef:0b:58:62:5b:88:a2:af:c6:b2:99:
         a3:1d:71:09:f5:a5:62:82:89:8e:a4:f4:c3:58:cf:d4:5d:b5:
         94:89:47:b6:9e:11:ae:4c:50:7f:d2:86:7c:23:5e:a2:08:23:
         ec:e9:71:be:7c:4e:74:dd:0d:7e:3a:f3:f8:fc:32:e9:a7:66:
         f8:86:cf:be:45:3d:a9:d3:c2:7e:5e:0f:47:7b:fb:70:c1:de:
         08:7c:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----