Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC206E536A4CE438CC183EFE3EC0DEA31C449E329F11339C3CF2E5A6B89D5FF7/0/323830363a3332353a3a2f33322d3332203d3e203238343238.roa
File:                     323830363a3332353a3a2f33322d3332203d3e203238343238.roa (raw, json)
Hash identifier:          NAF7kKaG/iPoOm6hVuViapFbT+/hqsB6a3OtwAV/bh0=
Subject key identifier:   DC:A1:64:88:2C:A2:91:87:84:8C:E0:68:12:74:04:4F:18:4E:71:9C
Certificate issuer:       /CN=695F507539305A50BC20BF9C448FA0C7650EE486
Certificate serial:       299237DCE8D9896EE30863E77D02814C4C20CF10
Authority key identifier: 69:5F:50:75:39:30:5A:50:BC:20:BF:9C:44:8F:A0:C7:65:0E:E4:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/695F507539305A50BC20BF9C448FA0C7650EE486.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC206E536A4CE438CC183EFE3EC0DEA31C449E329F11339C3CF2E5A6B89D5FF7/0/323830363a3332353a3a2f33322d3332203d3e203238343238.roa
Signing time:             Tue 04 Feb 2025 18:00:46 +0000
ROA not before:           Tue 04 Feb 2025 17:55:46 +0000
ROA not after:            Tue 03 Feb 2026 18:00:46 +0000
asID:                     28428
IP address blocks:        2806:325::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:92:37:dc:e8:d9:89:6e:e3:08:63:e7:7d:02:81:4c:4c:20:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695F507539305A50BC20BF9C448FA0C7650EE486
        Validity
            Not Before: Feb  4 17:55:46 2025 GMT
            Not After : Feb  3 18:00:46 2026 GMT
        Subject: CN=DCA164882CA29187848CE0681274044F184E719C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:44:60:a8:6a:41:9a:89:6e:5a:c9:68:88:
                    1c:26:45:8f:56:57:2b:d3:1a:7f:d3:d0:a4:d4:4e:
                    5e:e1:ac:b2:d0:27:5c:19:d9:ea:81:3c:54:88:b6:
                    a2:21:5e:c8:18:14:84:f4:53:72:52:1f:dc:e7:4a:
                    e2:fc:71:e3:5f:54:88:e1:ed:97:8f:c7:df:d6:28:
                    d7:04:00:eb:c5:4e:7d:ef:b0:95:1e:3a:2a:63:12:
                    3d:50:ff:eb:78:ec:18:ce:e9:a2:6a:e9:5d:d4:a6:
                    74:ba:e3:a2:b5:40:95:c3:c6:c7:8f:46:a2:18:4d:
                    ad:f5:53:d9:25:5e:61:ed:9c:02:57:93:f9:1a:bc:
                    dc:ee:fe:d9:db:c5:9f:0f:6a:dc:12:54:62:0a:3d:
                    90:d1:52:91:de:c0:97:f8:e7:e7:92:0d:1d:8e:bf:
                    a9:71:f7:9e:f5:e1:58:d5:c1:89:12:e8:0a:b4:bb:
                    a0:bb:21:ea:6a:46:7c:e7:3b:ea:10:da:c5:aa:9f:
                    02:95:fe:0f:ce:38:3e:cb:77:70:32:ad:5d:e1:c5:
                    07:29:b9:33:5b:d6:62:d8:dd:6a:12:b9:20:d2:a6:
                    30:37:7f:e3:d6:6e:c2:49:8b:7a:f8:39:a2:eb:a3:
                    4f:33:b1:a1:74:b4:1b:e4:27:98:6e:1a:a4:95:49:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:64:88:2C:A2:91:87:84:8C:E0:68:12:74:04:4F:18:4E:71:9C
            X509v3 Authority Key Identifier:
                keyid:69:5F:50:75:39:30:5A:50:BC:20:BF:9C:44:8F:A0:C7:65:0E:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC206E536A4CE438CC183EFE3EC0DEA31C449E329F11339C3CF2E5A6B89D5FF7/0/695F507539305A50BC20BF9C448FA0C7650EE486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/695F507539305A50BC20BF9C448FA0C7650EE486.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC206E536A4CE438CC183EFE3EC0DEA31C449E329F11339C3CF2E5A6B89D5FF7/0/323830363a3332353a3a2f33322d3332203d3e203238343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:325::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:a2:bf:db:bf:d6:b0:13:98:08:8f:fa:25:10:00:d6:63:
         1a:ba:a9:55:e2:55:ba:d0:84:f1:09:aa:c5:2f:93:94:bc:57:
         e6:a5:70:00:99:01:31:43:92:15:57:ed:ea:a9:fd:0a:1b:cd:
         df:77:f4:88:a3:95:bd:1a:8d:ee:d5:2c:32:1e:87:fe:e3:26:
         48:fc:01:12:b9:10:95:5c:ed:5a:24:c1:a4:9b:37:98:27:9a:
         f5:2e:33:32:64:c7:c2:63:4f:99:96:9a:c3:45:78:56:fb:4f:
         b9:18:5d:97:83:85:7f:e2:c7:ff:33:ba:3f:38:89:ce:a4:5d:
         50:c3:4c:42:8f:65:da:aa:91:5b:3d:31:db:4b:53:c3:a2:87:
         5b:63:51:c0:61:b9:5a:59:f8:c3:a4:45:2f:f6:76:6a:49:68:
         ca:2d:e3:0c:3f:c6:e9:c5:2b:86:55:38:bf:b9:60:a5:c8:14:
         10:3d:f2:34:1a:7a:74:32:10:ec:cd:6f:cb:d8:5c:f6:62:3e:
         b7:b7:1d:c8:25:18:cc:79:15:5a:15:29:20:ef:ae:a9:79:00:
         55:09:ce:7c:4a:ed:69:39:b2:4e:2e:65:ff:4d:34:61:84:6a:
         dd:0f:13:45:02:cd:91:58:53:21:8b:3f:b6:58:68:d6:d7:4e:
         70:f0:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----