Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa
File:                     323830363a3330663a3a2f33322d3438203d3e20323635353631.roa (raw, json)
Hash identifier:          hLqBSgN8RgDW33QgjdUejq49ApvLBh0THSFyGTkRcZM=
Subject key identifier:   F5:F6:65:0D:09:75:86:04:A8:77:4B:0B:CA:CB:27:7C:8A:FA:71:66
Certificate issuer:       /CN=B766171E94B1BFFD247503064521180F9BB7304D
Certificate serial:       4DC8B5BFB86C545052B33FD347D45C126D39C9BA
Authority key identifier: B7:66:17:1E:94:B1:BF:FD:24:75:03:06:45:21:18:0F:9B:B7:30:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B766171E94B1BFFD247503064521180F9BB7304D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa
Signing time:             Tue 04 Feb 2025 18:00:00 +0000
ROA not before:           Tue 04 Feb 2025 17:55:00 +0000
ROA not after:            Tue 03 Feb 2026 18:00:00 +0000
asID:                     265561
IP address blocks:        2806:30f::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c8:b5:bf:b8:6c:54:50:52:b3:3f:d3:47:d4:5c:12:6d:39:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B766171E94B1BFFD247503064521180F9BB7304D
        Validity
            Not Before: Feb  4 17:55:00 2025 GMT
            Not After : Feb  3 18:00:00 2026 GMT
        Subject: CN=F5F6650D09758604A8774B0BCACB277C8AFA7166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:32:2f:e1:83:b5:0b:16:9d:f0:39:ab:e5:
                    f3:73:1a:02:79:05:e6:6f:3a:a2:8c:7d:66:27:28:
                    d5:84:60:97:c3:77:f7:60:ec:79:26:e6:4f:71:8f:
                    34:da:9a:54:08:94:51:d0:b2:b3:21:f3:a0:c6:29:
                    9f:2a:4c:19:c7:a5:cf:b6:54:7b:e7:cd:f8:4b:3a:
                    ab:64:45:44:b9:b7:fe:f0:bd:16:ce:96:f3:f5:92:
                    77:b8:af:28:d2:69:11:3f:df:74:6a:1f:a1:f7:3e:
                    17:38:4d:19:d9:f7:8f:43:14:71:da:67:1f:3d:7d:
                    2e:51:5e:6c:0a:99:de:d6:ac:0a:7a:06:b3:18:58:
                    a2:3d:07:6e:4d:02:f2:88:24:d6:0d:42:a2:4a:39:
                    f0:b0:7d:e5:f7:7a:54:32:df:e6:d8:ed:46:a1:c0:
                    9a:e2:c7:66:fd:19:90:c8:d3:ac:18:b5:e5:2e:0c:
                    b9:64:76:5a:c1:f9:a8:83:8c:1a:ee:f9:af:3e:6d:
                    3d:cb:d4:33:a7:e5:92:66:bc:33:19:d4:45:64:91:
                    2c:43:ff:e0:3a:88:12:a0:85:8a:ea:48:67:31:35:
                    4b:40:96:3b:72:2e:cf:dd:15:39:bc:b9:92:3a:16:
                    2f:a4:63:01:e5:bf:ec:af:f1:00:c0:85:0b:6f:cb:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:65:0D:09:75:86:04:A8:77:4B:0B:CA:CB:27:7C:8A:FA:71:66
            X509v3 Authority Key Identifier:
                keyid:B7:66:17:1E:94:B1:BF:FD:24:75:03:06:45:21:18:0F:9B:B7:30:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/B766171E94B1BFFD247503064521180F9BB7304D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B766171E94B1BFFD247503064521180F9BB7304D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30f::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:65:f6:4c:a9:1b:82:93:ed:5f:e2:0d:99:4a:fb:10:6d:00:
         88:98:f3:bb:53:5f:c1:a2:c3:7b:d3:51:38:46:6a:99:9d:71:
         1d:b6:8a:6f:4e:14:d3:92:40:c3:47:12:d3:d1:e1:76:f7:05:
         15:14:10:81:88:83:78:12:9b:14:7f:b4:d6:62:e6:50:5e:64:
         7c:59:b9:07:8c:8f:e8:2b:d6:06:6c:d9:84:bd:3d:2b:fe:7c:
         01:f0:ba:32:15:4d:b5:a5:fd:90:35:88:60:f2:d5:33:a5:be:
         62:1a:c0:36:bd:01:ac:ff:1e:e9:05:5b:53:fa:7d:4e:b0:dd:
         c8:18:85:c4:ce:ec:96:6a:fb:ee:34:16:5e:76:d4:e8:1b:9c:
         10:b9:0c:a5:6b:26:86:08:20:7f:bf:13:55:d0:ce:a0:4d:29:
         7d:94:50:fd:2c:66:c0:14:4a:27:f0:47:85:19:03:5e:8e:d3:
         76:c0:21:f7:8b:a0:55:89:8b:dd:8b:27:ba:b8:64:cb:f1:2c:
         e8:61:1a:e9:08:64:ed:52:68:f8:b2:0c:94:c4:cc:ee:05:39:
         96:4e:f1:55:34:ad:85:55:7f:08:6a:c1:8f:e0:02:60:f5:18:
         aa:a2:9d:9e:5c:1f:5f:4a:90:02:7a:63:8a:e6:7d:5c:1c:e9:
         30:ef:54:8f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTci1v7hsVFBSsz/TR9RcEm05ybowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc2NjE3MUU5NEIxQkZGRDI0NzUwMzA2NDUyMTE4MEY5
QkI3MzA0RDAeFw0yNTAyMDQxNzU1MDBaFw0yNjAyMDMxODAwMDBaMDMxMTAvBgNV
BAMTKEY1RjY2NTBEMDk3NTg2MDRBODc3NEIwQkNBQ0IyNzdDOEFGQTcxNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEMjIv4YO1Cxad8Dmr5fNzGgJ5
BeZvOqKMfWYnKNWEYJfDd/dg7Hkm5k9xjzTamlQIlFHQsrMh86DGKZ8qTBnHpc+2
VHvnzfhLOqtkRUS5t/7wvRbOlvP1kne4ryjSaRE/33RqH6H3Phc4TRnZ949DFHHa
Zx89fS5RXmwKmd7WrAp6BrMYWKI9B25NAvKIJNYNQqJKOfCwfeX3elQy3+bY7Uah
wJrix2b9GZDI06wYteUuDLlkdlrB+aiDjBru+a8+bT3L1DOn5ZJmvDMZ1EVkkSxD
/+A6iBKghYrqSGcxNUtAljtyLs/dFTm8uZI6Fi+kYwHlv+yv8QDAhQtvy+WpAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU9fZlDQl1hgSod0sLyssnfIr6cWYwHwYDVR0j
BBgwFoAUt2YXHpSxv/0kdQMGRSEYD5u3ME0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOTgwNEU1QzM1NTIzODVBQkNFQUMxRDc4N0I1QTJENjNB
NkJDNzZENzMxRERBRkFGQjQ5MEU2MzgyMTE0MTQzLzAvQjc2NjE3MUU5NEIxQkZG
RDI0NzUwMzA2NDUyMTE4MEY5QkI3MzA0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNzY2MTcxRTk0QjFCRkZEMjQ3
NTAzMDY0NTIxMTgwRjlCQjczMDRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTk4MDRFNUMzNTUyMzg1QUJDRUFDMUQ3ODdCNUEyRDYzQTZCQzc2RDcz
MUREQUZBRkI0OTBFNjM4MjExNDE0My8wLzMyMzgzMDM2M2EzMzMwNjYzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzUzNTM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgMPMA0G
CSqGSIb3DQEBCwUAA4IBAQAHZfZMqRuCk+1f4g2ZSvsQbQCImPO7U1/BosN701E4
RmqZnXEdtopvThTTkkDDRxLT0eF29wUVFBCBiIN4EpsUf7TWYuZQXmR8WbkHjI/o
K9YGbNmEvT0r/nwB8LoyFU21pf2QNYhg8tUzpb5iGsA2vQGs/x7pBVtT+n1OsN3I
GIXEzuyWavvuNBZedtToG5wQuQylayaGCCB/vxNV0M6gTSl9lFD9LGbAFEon8EeF
GQNejtN2wCH3i6BViYvdiye6uGTL8SzoYRrpCGTtUmj4sgyUxMzuBTmWTvFVNK2F
VX8IasGP4AJg9Riqop2eXB9fSpACemOK5n1cHOkw71SP
-----END CERTIFICATE-----