Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
File:                     323830363a3430393a3a2f33322d3438203d3e20323730313930.roa (raw, json)
Hash identifier:          WchGH4gIXB3lfBzOt9zmGMOaHew7MtvPjwAtqnieeqM=
Subject key identifier:   9D:50:3B:C0:5F:CF:BA:DB:8A:20:B9:73:F5:F7:6A:96:DC:E8:36:74
Certificate issuer:       /CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
Certificate serial:       12B73DF12E1F21D5BACB9182CF1E3BD0D08D4411
Authority key identifier: 18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
Signing time:             Tue 05 Mar 2024 17:57:34 +0000
ROA not before:           Tue 05 Mar 2024 17:52:34 +0000
ROA not after:            Tue 04 Mar 2025 17:57:34 +0000
asID:                     270190
IP address blocks:        2806:409::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:3d:f1:2e:1f:21:d5:ba:cb:91:82:cf:1e:3b:d0:d0:8d:44:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
        Validity
            Not Before: Mar  5 17:52:34 2024 GMT
            Not After : Mar  4 17:57:34 2025 GMT
        Subject: CN=9D503BC05FCFBADB8A20B973F5F76A96DCE83674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:4e:5d:f7:a7:cd:c5:1f:5a:6b:27:dd:76:
                    75:1e:27:79:34:8b:40:07:23:1d:7e:74:3e:39:a5:
                    54:ae:be:fa:dd:1a:97:9a:d2:73:a0:e7:e1:87:b2:
                    20:06:1d:c9:06:a2:ba:57:ee:da:0d:0a:3a:d7:37:
                    84:b9:40:74:cc:af:73:71:5b:e6:0b:68:3f:97:2d:
                    55:ba:b3:f0:d6:ed:d1:cb:19:3d:31:78:c3:45:3a:
                    de:46:1d:d6:19:5c:f8:b0:aa:92:b7:88:19:53:33:
                    d3:d5:f9:50:09:fa:d2:3a:09:ed:30:26:fc:44:f1:
                    07:7f:23:0c:10:14:1b:fe:7f:d6:0b:b8:43:e9:13:
                    64:86:91:6c:32:48:39:3a:e4:9d:7f:9a:52:04:8c:
                    35:a2:a1:40:77:12:e9:55:26:e2:a9:f0:b5:81:68:
                    28:d8:b7:69:77:a4:49:71:de:ee:31:12:af:96:cb:
                    30:a3:e6:17:8e:46:dd:96:57:ad:58:01:85:c0:db:
                    f0:c6:a1:7b:0b:0a:9f:0a:23:dd:b5:32:73:e8:ba:
                    d6:84:a4:1e:c3:ef:58:91:13:5f:c0:b6:a4:6e:a0:
                    20:65:10:fd:94:30:6e:ef:75:45:c1:3a:9e:d1:fe:
                    59:33:7d:34:17:ac:2a:b0:f6:66:6c:6c:64:17:1b:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:3B:C0:5F:CF:BA:DB:8A:20:B9:73:F5:F7:6A:96:DC:E8:36:74
            X509v3 Authority Key Identifier:
                keyid:18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:409::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a8:de:91:b0:5e:b9:42:0a:05:3e:d9:08:0c:8e:50:eb:4e:
         1b:fc:17:ba:20:7e:93:a5:13:85:ca:fa:74:64:2c:22:2c:cc:
         ba:97:a4:36:ac:3f:e2:55:64:22:72:a5:21:37:ae:80:c3:c1:
         9f:24:31:84:13:63:68:9d:74:11:7f:b1:16:c2:df:ea:7f:89:
         a6:68:4d:cb:db:7b:d9:c4:0a:50:3f:10:ac:4f:28:12:f3:96:
         3c:f8:c0:13:bb:aa:61:70:c8:9e:8d:96:6d:6f:ae:00:a0:c3:
         75:db:28:97:80:2e:6b:9e:c7:54:a3:0c:82:ae:aa:02:51:e7:
         ff:84:3c:79:92:90:79:44:9d:d7:41:9d:cc:a0:dc:c7:a0:4a:
         93:0b:92:b8:75:9b:c2:33:3b:ed:2e:db:c3:9e:24:0c:82:28:
         05:e7:01:e5:80:2c:f9:d2:0f:f7:09:4b:b3:06:6b:a4:5b:de:
         27:26:7a:dc:22:cc:ed:09:6b:24:6e:85:c4:74:67:27:4a:2b:
         a3:d3:c7:ef:07:cc:08:b1:68:f9:13:c2:68:7e:7d:24:00:ad:
         e1:f9:1c:e7:4c:ce:02:8c:53:6b:f2:a1:60:a9:ee:b4:ed:0d:
         a1:09:d8:1e:64:7c:6a:2c:5c:a6:22:a8:b2:c7:1b:46:91:b0:
         29:c5:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----