Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa
File:                     323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa (raw, json)
Hash identifier:          OSsxm7t9LrCLU4nA+3JrnZa9DY3ibI8LXgHS/o7I7Vs=
Subject key identifier:   23:A0:56:A9:B2:5C:49:F5:46:8D:10:6C:74:8F:7A:B9:A3:DA:9D:BD
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       02E6CF60691E42F3756D007FB0DDAA933685B6D7
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa
Signing time:             Tue 04 Feb 2025 19:57:16 +0000
ROA not before:           Tue 04 Feb 2025 19:52:16 +0000
ROA not after:            Tue 03 Feb 2026 19:57:16 +0000
asID:                     28435
IP address blocks:        2806:366:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e6:cf:60:69:1e:42:f3:75:6d:00:7f:b0:dd:aa:93:36:85:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Feb  4 19:52:16 2025 GMT
            Not After : Feb  3 19:57:16 2026 GMT
        Subject: CN=23A056A9B25C49F5468D106C748F7AB9A3DA9DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:25:79:4d:60:69:fb:72:7f:dc:6b:aa:ef:
                    28:45:8d:ec:ae:74:a3:1b:fe:1f:e8:fa:54:1f:9a:
                    dd:da:05:19:2f:c4:67:f0:e6:8c:1c:20:23:3d:0d:
                    0a:ba:48:f6:ca:41:d7:e6:d7:f6:05:ae:8c:f6:e6:
                    02:86:12:8c:66:8c:87:7c:84:dd:0b:42:ed:0f:ca:
                    5f:67:40:7b:8b:2a:83:5a:63:f3:16:38:08:9d:72:
                    93:89:83:be:1c:96:11:a5:86:10:19:94:b1:88:65:
                    5a:3e:f0:d7:e2:c8:d5:06:80:ec:70:1c:4b:e3:9e:
                    66:2f:fb:89:97:fe:78:10:de:ff:b3:ab:56:17:56:
                    fe:15:b4:ba:3f:ba:86:7f:4f:92:7b:d3:9a:6f:c9:
                    d9:f2:e5:71:9d:b7:b6:7a:73:3f:ec:40:16:51:85:
                    7b:07:2a:05:96:cb:5e:5e:b1:e0:ab:1e:7f:29:c0:
                    cb:2e:40:9c:b7:27:1a:a2:6e:88:ca:96:d1:27:72:
                    12:80:f8:07:d5:72:a8:28:38:e8:36:80:12:1c:ee:
                    44:c3:75:5b:dc:ea:40:21:4d:82:4e:c2:46:6f:a9:
                    e4:2c:b7:c3:8f:24:7d:a2:2c:95:88:bf:aa:2e:84:
                    c8:92:2d:a4:8f:ed:fb:80:bd:8f:70:ab:d4:f3:0e:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A0:56:A9:B2:5C:49:F5:46:8D:10:6C:74:8F:7A:B9:A3:DA:9D:BD
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a313a3a2f34382d3438203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:6c:13:1a:00:76:e1:8f:5c:b7:d8:46:7c:e1:c3:a5:f6:
         99:6a:99:05:42:d9:58:2a:75:04:ef:d1:5a:ed:f3:61:28:63:
         f5:8c:ec:7c:38:c7:0d:7c:45:1c:ad:5c:c4:11:7a:1a:56:f8:
         ef:a7:89:17:09:0a:7d:c2:b3:1f:03:6f:9d:47:e7:01:77:56:
         50:4a:13:bb:17:67:01:c1:78:eb:b4:c1:1a:d9:e8:02:27:a0:
         5d:94:05:b5:de:c4:cb:fb:82:cb:c0:07:8b:3f:7e:a2:f3:83:
         ed:4a:c4:38:a8:6f:d5:a2:31:1e:75:a2:44:ab:6e:8d:86:34:
         0f:69:b7:60:32:b0:3b:2a:0b:95:a4:41:2a:d2:05:3d:c4:e7:
         95:2b:ed:5e:c6:21:a5:60:02:a6:d4:5b:e5:40:07:46:4f:f4:
         59:b2:f8:39:ca:28:f3:0a:15:9d:3a:f4:a5:55:25:7c:03:15:
         66:97:a9:b2:77:0c:ef:5c:49:a0:6c:db:05:4e:bf:ea:e9:23:
         06:e2:03:2b:59:4c:ea:48:e3:fb:d3:59:d4:e9:e9:da:15:1a:
         e2:30:dc:0f:91:eb:f7:43:32:9d:54:1a:bb:b6:f9:dd:dd:7b:
         70:94:05:47:d0:66:25:3c:b3:d8:36:42:dd:a5:3a:44:1c:32:
         41:2d:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----