Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/323830363a3361663a3a2f33322d3438203d3e203438343635.roa
File:                     323830363a3361663a3a2f33322d3438203d3e203438343635.roa (raw, json)
Hash identifier:          Wowg5FQp75xkfDJoFWNQIEUZgH6j5Dj/zfvfyIFu0LA=
Subject key identifier:   E7:C3:3E:3A:2D:4F:3B:C7:1E:B6:A2:AD:11:DF:CF:8A:EA:5B:CC:39
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       38044F07619AB7CB39E9AEF61A219015D4D54F16
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/323830363a3361663a3a2f33322d3438203d3e203438343635.roa
Signing time:             Sun 16 Jun 2024 15:45:00 +0000
ROA not before:           Sun 16 Jun 2024 15:40:00 +0000
ROA not after:            Sun 15 Jun 2025 15:45:00 +0000
asID:                     48465
IP address blocks:        2806:3af::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:04:4f:07:61:9a:b7:cb:39:e9:ae:f6:1a:21:90:15:d4:d5:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 16 15:40:00 2024 GMT
            Not After : Jun 15 15:45:00 2025 GMT
        Subject: CN=E7C33E3A2D4F3BC71EB6A2AD11DFCF8AEA5BCC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:87:c3:1b:30:22:cb:8f:dc:2d:eb:4d:6c:
                    d4:33:02:2a:e6:77:86:21:fd:88:3a:84:f2:27:f2:
                    fe:eb:6e:b6:b7:f0:c1:43:fe:4d:9a:ad:04:d0:7f:
                    7c:a4:ac:e0:c3:37:b3:72:92:98:ba:83:b8:b0:dd:
                    51:c3:f1:02:9a:6d:c6:8f:7c:1f:4a:83:22:ee:3a:
                    e5:aa:cf:53:ae:a1:e4:c9:3d:16:43:19:54:8c:f6:
                    51:60:06:63:3f:9b:b6:f1:b8:22:f5:d4:0e:3e:7c:
                    0b:96:75:81:c2:0e:0a:db:0f:b2:6b:46:2f:90:66:
                    2c:5f:bf:27:7f:3c:6d:76:15:b0:e3:48:53:02:36:
                    24:05:22:11:2a:96:ea:7d:a4:47:9c:4d:ac:cf:6b:
                    61:af:d4:06:46:e5:fb:4c:4d:dd:a7:28:05:9b:b6:
                    42:c2:1b:4c:53:e6:86:f8:4e:bd:ee:fd:3f:7c:41:
                    b5:ad:3f:e1:97:12:b6:17:6c:ad:99:c3:2c:4d:09:
                    98:26:5c:61:0d:32:5e:1b:9e:bf:8b:ee:6d:0d:71:
                    2c:82:f2:84:09:56:03:7f:0f:5f:2e:03:df:2a:de:
                    d1:9b:d6:1a:16:52:26:19:12:72:26:53:49:53:d1:
                    c6:e6:87:aa:a8:ec:94:49:df:9a:8e:58:87:d1:7e:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:3E:3A:2D:4F:3B:C7:1E:B6:A2:AD:11:DF:CF:8A:EA:5B:CC:39
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/323830363a3361663a3a2f33322d3438203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3af::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:66:e2:7a:40:a0:a2:69:13:ab:a9:09:40:92:4e:9f:c1:
         9c:0e:90:24:7a:fc:49:95:c5:d7:af:41:d0:e3:31:80:08:fb:
         79:dc:b9:fe:df:23:c5:ff:36:3c:a1:83:b1:af:05:18:de:31:
         39:4a:40:c4:ec:df:75:a6:1a:47:0e:69:52:2c:b0:bb:d8:f3:
         5d:b9:1f:f7:45:c8:99:91:12:63:1e:15:89:14:37:63:b1:3f:
         ea:52:6f:93:2f:bc:1f:67:10:4b:22:40:c8:7d:f4:dc:28:73:
         78:ee:2e:c6:d4:45:b5:92:be:3a:ea:60:2b:3d:64:4c:6e:40:
         ef:b8:5c:db:a7:d5:e7:5b:cc:88:47:eb:7a:f5:b7:37:f6:c9:
         cd:ee:de:86:39:56:cd:bf:4f:f5:88:b3:43:e5:16:b5:76:bb:
         fa:c3:d6:0c:a1:01:ef:ef:f2:7f:69:c1:84:b6:3a:62:07:c2:
         a9:71:bc:1e:81:49:be:07:ce:9f:60:ce:21:dd:41:83:e4:6d:
         fc:c4:85:5b:6f:70:e3:08:65:38:7a:95:8e:f3:9e:26:61:56:
         16:32:95:5c:f1:06:ef:d1:41:b1:ef:54:67:11:c4:3c:58:d4:
         1d:73:4b:b6:59:fc:78:08:51:ad:a6:f4:b5:9c:aa:01:cb:6f:
         70:3f:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----