Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa
File:                     323830363a3365363a3a2f33322d3332203d3e20323730313539.roa (raw, json)
Hash identifier:          NYiV2VNc6OAWc9G4YZ47SkRsxr8TH5evf4VnaBg0keA=
Subject key identifier:   4F:DA:EC:CC:DC:4E:35:B1:17:C0:82:15:BA:8C:3A:9A:DE:03:5A:B4
Certificate issuer:       /CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
Certificate serial:       13A0AB2D45BB174BAA1D358C9A03DE8661D02D87
Authority key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa
Signing time:             Tue 05 Mar 2024 17:44:01 +0000
ROA not before:           Tue 05 Mar 2024 17:39:01 +0000
ROA not after:            Tue 04 Mar 2025 17:44:01 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:ab:2d:45:bb:17:4b:aa:1d:35:8c:9a:03:de:86:61:d0:2d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
        Validity
            Not Before: Mar  5 17:39:01 2024 GMT
            Not After : Mar  4 17:44:01 2025 GMT
        Subject: CN=4FDAECCCDC4E35B117C08215BA8C3A9ADE035AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:cd:9d:cf:9d:b1:06:cc:35:c5:36:84:25:
                    eb:21:e0:c7:c0:d4:5e:e1:0a:58:3f:da:b0:18:ef:
                    6f:67:6d:63:37:cb:df:ea:65:34:4c:73:0b:55:e7:
                    e5:e4:0d:76:4a:e1:a1:25:e3:29:af:f3:95:b8:24:
                    1d:59:3f:ed:68:92:39:39:7a:59:09:23:cc:8b:0a:
                    06:27:3e:19:ed:d5:20:7c:b3:47:0d:e9:6f:fd:0b:
                    37:a1:ec:33:4d:53:73:a7:b3:e4:7f:16:88:a1:17:
                    9a:27:59:40:a5:40:64:9e:e3:99:5d:d4:ab:f6:d3:
                    4a:4e:3e:d3:94:a4:79:d4:5b:53:da:f1:d5:b0:37:
                    52:63:dc:ad:f9:b3:3a:c4:a3:1c:69:77:a5:87:31:
                    b6:f6:36:bb:47:af:6c:05:11:09:73:6f:77:00:d5:
                    e2:72:3c:a0:03:6f:70:7e:21:4d:3b:c8:0c:31:11:
                    4f:62:46:d9:79:fa:18:b2:87:81:47:d4:28:5b:04:
                    29:da:4c:43:9f:67:ca:cc:b6:61:28:c9:e4:6d:be:
                    62:d0:7b:39:1a:a3:f0:c6:fe:77:aa:39:09:21:06:
                    96:99:9e:fc:e8:96:3c:a1:00:5c:ec:b5:3f:52:c5:
                    12:53:a1:d5:70:64:a3:ed:2b:67:85:63:08:05:b1:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:EC:CC:DC:4E:35:B1:17:C0:82:15:BA:8C:3A:9A:DE:03:5A:B4
            X509v3 Authority Key Identifier:
                keyid:03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3332203d3e20323730313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:43:29:9d:bc:62:ae:90:b7:27:07:38:52:03:54:ce:5a:
         0c:2f:fe:38:95:0b:df:65:7d:fc:96:e6:3d:f4:76:1c:42:3f:
         bb:93:8c:fe:0c:61:75:31:63:94:c4:3f:63:5e:76:45:c0:00:
         24:bd:9a:f4:25:e7:09:c3:59:54:c1:5e:6d:3d:e2:f9:83:42:
         5e:3d:b6:67:13:68:47:22:09:a6:4a:3b:f7:07:00:57:15:c9:
         4c:fd:82:1a:ea:40:81:de:60:5c:01:3d:da:2a:97:4c:34:6c:
         23:fc:72:6c:62:08:89:21:fc:3f:40:3b:0a:46:d3:ff:0e:a0:
         5f:09:58:c7:b7:72:77:fd:9b:3f:00:97:03:89:d8:11:7f:27:
         22:6f:d8:23:c0:80:92:af:7a:a1:91:13:94:43:15:25:48:86:
         52:a2:4c:8c:c4:61:47:59:9d:fc:e6:bb:e8:6e:22:3a:4e:d2:
         35:75:4a:c5:ca:d5:24:43:e7:13:c7:9a:54:0d:c9:14:09:db:
         77:5c:1d:09:80:f6:72:89:86:44:96:3a:25:95:59:f8:54:bb:
         a5:0c:7f:77:9e:84:43:5c:4d:d8:96:69:92:e6:13:b8:30:07:
         ff:a4:65:d8:a2:50:1a:b9:18:31:98:ca:84:65:8c:c6:51:be:
         2b:8d:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----