Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa
File:                     323830303a3662303a3a2f33322d3332203d3e2036333036.roa (raw, json)
Hash identifier:          l2RpZaG7+w/2Tr2l95Mw1xhOkNtrpRL93su0ZO3OpzA=
Subject key identifier:   09:86:6A:7D:45:74:4A:7F:A4:8C:7D:2F:24:13:7D:63:3B:1C:4F:8E
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0302CB5FCB5F1FE947FF7172FDC281B559CE1C21
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:33:08 +0000
ROA not before:           Tue 04 Feb 2025 18:28:08 +0000
ROA not after:            Tue 03 Feb 2026 18:33:08 +0000
asID:                     6306
IP address blocks:        2800:6b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:cb:5f:cb:5f:1f:e9:47:ff:71:72:fd:c2:81:b5:59:ce:1c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:28:08 2025 GMT
            Not After : Feb  3 18:33:08 2026 GMT
        Subject: CN=09866A7D45744A7FA48C7D2F24137D633B1C4F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:d5:13:ec:74:b1:bf:57:0f:f6:5b:ae:92:
                    9c:6e:5a:db:59:0b:ac:fd:54:39:1e:d5:84:64:bd:
                    97:a4:c4:53:ce:e2:be:15:3b:ef:68:4e:f5:b4:62:
                    7e:13:de:10:ac:11:14:0a:ee:c3:9d:c4:e4:d4:92:
                    a3:84:0b:da:ab:2c:79:2c:d3:7c:0d:3e:69:30:c2:
                    95:34:df:f1:a0:d4:08:f3:52:3d:14:b9:87:01:72:
                    18:08:fe:0b:0f:a9:ba:6c:d1:dc:27:10:e2:b6:33:
                    c9:8c:17:10:e1:00:65:c2:22:b1:5e:ef:87:a1:f6:
                    85:bf:ad:87:7a:9e:ba:44:1f:70:2a:f8:2b:61:bd:
                    26:f2:e2:35:69:b6:52:51:3d:bf:45:b6:02:48:63:
                    f7:03:8b:77:7c:e7:50:68:04:e5:07:af:e3:cd:81:
                    be:65:fb:d3:49:6b:4d:46:21:27:54:77:ac:ed:87:
                    3f:81:b9:d4:ac:13:34:46:e0:04:ac:84:62:da:21:
                    79:a7:7d:0f:26:db:41:dc:e8:fc:a1:03:7a:56:b0:
                    25:00:06:d5:7a:c3:c8:6b:7c:ef:9e:f3:34:44:51:
                    7d:bf:55:a0:48:4a:3b:80:9e:67:b9:2a:89:40:47:
                    95:ee:a7:b2:2c:30:f1:aa:72:6b:80:f6:e4:ed:9e:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:6A:7D:45:74:4A:7F:A4:8C:7D:2F:24:13:7D:63:3B:1C:4F:8E
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/323830303a3662303a3a2f33322d3332203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:d9:cc:de:9e:5c:15:bd:07:77:e4:9c:a8:20:ef:7d:5e:
         fa:b7:c4:fa:96:1d:ac:ce:c1:85:71:a8:67:39:24:b8:c7:08:
         a3:00:43:b9:5c:07:ae:28:23:34:60:de:36:9b:e3:0f:91:a7:
         b6:f1:ac:8c:88:b8:fe:81:94:6a:b1:f0:e5:f4:99:04:ae:b4:
         99:79:14:fe:1f:7e:28:85:f1:ad:d2:07:32:bd:22:37:bf:fa:
         e5:aa:6b:72:7f:ea:a7:2c:70:82:f6:60:65:4e:6a:54:88:72:
         70:6d:1e:82:65:91:ce:ad:b9:34:46:00:04:c8:ea:47:37:a8:
         97:5c:e2:45:91:db:5c:4f:8b:44:24:cf:42:45:04:a7:f7:61:
         aa:bd:aa:c3:1a:fb:24:33:bb:b6:d1:97:2b:c6:44:2b:82:7e:
         fb:c7:2c:b7:fe:62:b1:94:a1:eb:c2:cd:9f:12:88:30:93:59:
         09:2e:2a:aa:75:ab:2a:d0:83:c8:6e:61:2e:41:ae:bb:ba:2c:
         1d:0c:bb:c9:c3:9b:5b:b1:bf:ed:2c:10:23:75:35:6f:86:16:
         14:21:fd:fc:9e:6a:12:67:b8:fd:22:7a:17:fb:a9:f6:3e:54:
         5e:98:8b:80:70:4e:35:94:27:d2:b1:ed:66:37:23:b6:6e:0c:
         50:d6:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----