Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
File:                     323830363a3266343a3a2f33322d3438203d3e20323635353430.roa (raw, json)
Hash identifier:          BRW9cdefspcrkRT1iVZMpp9550Vch+6X+tU6b5TZv8A=
Subject key identifier:   8E:B6:B4:61:57:BD:9E:76:8B:C8:83:0C:56:8B:2D:C8:4A:A4:CE:B2
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       3350761BF379ADE518F846697F4EA3FD84A99465
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa
Signing time:             Tue 04 Feb 2025 18:50:15 +0000
ROA not before:           Tue 04 Feb 2025 18:45:15 +0000
ROA not after:            Tue 03 Feb 2026 18:50:15 +0000
asID:                     265540
IP address blocks:        2806:2f4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:50:76:1b:f3:79:ad:e5:18:f8:46:69:7f:4e:a3:fd:84:a9:94:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Feb  4 18:45:15 2025 GMT
            Not After : Feb  3 18:50:15 2026 GMT
        Subject: CN=8EB6B46157BD9E768BC8830C568B2DC84AA4CEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:2d:2f:01:49:1c:58:a5:59:bc:2c:8b:02:
                    d5:29:30:76:8a:cf:0f:cd:a9:f2:9a:cd:9f:8c:d1:
                    cf:9e:ef:c9:b0:ae:db:d4:e9:45:76:52:71:0d:43:
                    64:42:e2:10:d3:84:cc:79:56:cc:99:e1:7e:3d:ae:
                    c9:ae:78:2d:4a:e2:24:0c:2e:28:c6:13:09:4e:82:
                    4e:76:dc:d6:53:a4:24:02:27:1e:e4:af:a0:cb:0a:
                    0c:08:94:7e:8d:cf:bd:b7:64:52:34:8d:76:d9:d0:
                    9f:1b:5d:78:81:ed:75:98:5f:11:4f:da:2b:7e:72:
                    20:28:b4:84:a9:72:f5:75:d6:40:c7:f8:99:97:44:
                    a0:1a:a9:32:25:3b:c6:48:39:1d:c0:83:e0:65:b9:
                    0e:20:7b:7e:08:70:20:2c:bb:d9:2f:40:67:e6:da:
                    11:73:b6:a7:dc:3e:a3:9d:98:ca:bf:d2:45:c7:13:
                    aa:10:dc:ed:60:ae:37:ba:60:84:53:1f:cb:43:f2:
                    66:4a:8e:ed:8b:aa:29:e7:50:88:b3:50:ec:89:d0:
                    09:89:de:78:17:f0:a2:13:e6:18:ed:0d:ed:3d:fc:
                    76:ec:3d:13:9d:68:12:ec:9a:77:96:1a:4d:2c:f4:
                    8a:fb:60:04:b5:ad:0a:0a:1c:17:ba:ff:04:30:5e:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:B4:61:57:BD:9E:76:8B:C8:83:0C:56:8B:2D:C8:4A:A4:CE:B2
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/323830363a3266343a3a2f33322d3438203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:60:a1:d4:15:e4:eb:c3:d4:6d:0a:87:0d:eb:87:f1:ea:
         e5:4a:85:ed:6d:1c:fd:38:5e:20:e0:0b:e6:e0:c7:7d:ec:79:
         ce:0e:ac:92:da:27:8a:b7:69:c1:7e:ea:89:3d:a3:39:46:ed:
         ba:9c:90:aa:44:79:93:fa:8f:4a:da:61:d0:16:e7:0b:c4:f8:
         74:bc:a4:78:d4:3d:45:2a:05:08:b7:79:eb:d6:49:ec:38:e4:
         b4:e9:2c:fb:9c:4c:06:5c:f3:4e:12:d8:45:cd:82:43:74:a4:
         18:7a:27:bb:3e:ba:4e:6a:0a:b9:fa:8f:3d:dc:1a:e3:4f:da:
         ec:73:e3:58:90:47:f2:ba:80:05:78:ef:14:34:7c:80:79:1d:
         e8:39:75:d9:3f:f5:bb:d2:d7:72:54:6a:b8:47:8f:fe:49:3a:
         06:f8:2d:dd:9f:7f:1b:56:0f:ff:09:08:70:6f:21:59:fc:5d:
         9f:93:9b:f0:48:4f:34:b1:6b:c4:f0:6d:32:06:94:96:9d:bb:
         2f:3d:0d:68:5b:6a:12:85:9e:23:6b:1b:ea:df:88:96:5c:88:
         6c:a7:67:02:ca:17:c1:e9:6e:a0:e7:c8:77:14:d5:7a:18:01:
         23:8d:8a:c0:9a:ce:d6:cd:a7:39:c9:63:95:25:28:a4:8a:00:
         b0:45:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----