Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
File:                     323830363a3365363a3a2f33322d3634203d3e20323730313539.roa (raw, json)
Hash identifier:          Wb1FDXU3C4V7LZzE2wP00PqvHPnVQd6O/LVFuFDOS7E=
Subject key identifier:   3F:0E:13:16:C5:9D:65:07:EF:A2:95:89:C6:75:FD:8D:57:32:A4:C7
Certificate issuer:       /CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
Certificate serial:       4DF91AD126D7EC9ABE3877772C04BBCFB94C2A10
Authority key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
Signing time:             Tue 05 Mar 2024 17:44:01 +0000
ROA not before:           Tue 05 Mar 2024 17:39:01 +0000
ROA not after:            Tue 04 Mar 2025 17:44:01 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:1a:d1:26:d7:ec:9a:be:38:77:77:2c:04:bb:cf:b9:4c:2a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
        Validity
            Not Before: Mar  5 17:39:01 2024 GMT
            Not After : Mar  4 17:44:01 2025 GMT
        Subject: CN=3F0E1316C59D6507EFA29589C675FD8D5732A4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:fc:c5:c0:62:a2:16:5b:7f:31:2a:73:99:
                    d0:25:f6:19:52:ba:74:95:f7:e6:85:a7:15:f3:21:
                    70:53:b7:7e:af:ab:80:07:7b:96:38:4d:cb:98:09:
                    14:c5:d9:ce:c3:b3:60:80:d4:45:5e:d5:d8:01:be:
                    94:f8:29:f4:0c:16:0e:d6:14:b5:49:ef:49:d6:6c:
                    b1:50:f9:63:82:d6:37:c7:84:d8:87:09:02:f8:08:
                    43:4c:fc:ac:65:d5:bd:28:6f:16:a1:d2:49:06:4c:
                    f0:b2:a2:b2:bf:cb:c1:76:51:c0:dc:1b:cf:93:a2:
                    d1:24:6b:84:81:ff:2c:bd:e3:0f:a2:31:9d:d9:b1:
                    82:0d:4d:10:bf:5c:c1:74:aa:8a:2c:cc:f9:0a:45:
                    c1:d1:a5:e4:58:21:bc:e8:6e:cc:e2:00:7c:6c:fd:
                    51:e6:d8:49:3e:22:86:1e:a7:14:b5:91:30:dd:9e:
                    27:18:83:7b:d4:54:ce:09:c7:d1:b3:e3:e5:9b:c0:
                    d5:73:48:a6:45:7c:96:d0:73:fb:58:9b:a8:9e:c5:
                    a1:fd:b6:bd:3f:26:56:14:bd:fe:26:6f:01:fb:35:
                    3b:63:f0:d8:0e:7f:3b:73:28:76:b4:a1:77:e0:8b:
                    05:2c:d5:cf:e4:4f:4a:69:97:ac:5b:47:eb:2a:98:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:13:16:C5:9D:65:07:EF:A2:95:89:C6:75:FD:8D:57:32:A4:C7
            X509v3 Authority Key Identifier:
                keyid:03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ad:3f:55:fe:29:0f:21:2f:9f:5c:2d:c2:35:a3:c9:4b:6a:
         1d:92:4d:0d:16:7f:ca:0e:5a:f2:56:ef:9f:93:6d:17:ff:f4:
         07:a6:0a:61:63:96:89:26:de:c8:53:6f:3f:7c:b1:5d:33:77:
         82:86:17:b8:a5:bf:6d:e9:f6:b5:51:45:e5:c3:73:7a:c1:3e:
         92:17:51:9f:ec:9f:31:a8:7d:b4:52:4c:31:d7:0e:2f:7e:51:
         01:80:d3:f9:47:e9:29:af:29:52:90:bb:b5:54:8f:83:17:7b:
         37:e9:ca:66:5c:96:d8:85:bb:d8:78:fc:23:bd:03:18:b6:ac:
         0b:b7:fa:ee:30:b8:35:eb:a7:2a:84:ad:a0:81:cb:e5:6d:36:
         d3:4f:db:93:0c:2d:9e:18:e7:68:31:9e:6a:f7:4e:9a:70:f4:
         03:3c:0b:71:19:f7:7c:0e:b6:a2:b5:bc:4a:c3:2d:7b:db:9c:
         67:47:db:14:bc:02:9d:96:e0:d9:be:b0:4f:ba:d7:ca:71:e8:
         3a:a6:63:fa:67:db:cf:99:35:45:0b:d1:48:a9:cf:c0:54:75:
         e5:d4:dd:a4:13:87:59:6d:83:b7:3c:22:84:fe:4b:37:e2:c2:
         64:82:7b:c8:fe:89:65:3b:f1:a4:5d:0b:e3:48:a5:7c:2c:24:
         73:a4:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----