Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/323830363a3336663a3a2f33322d3438203d3e20323635363139.roa
File:                     323830363a3336663a3a2f33322d3438203d3e20323635363139.roa (raw, json)
Hash identifier:          SHMSWgqQndZVLTUlIpcORgs6TdLI9tKMGc7zRfa15TU=
Subject key identifier:   AC:04:24:AD:28:36:ED:77:92:FB:B8:2C:34:55:AC:98:E9:BB:12:37
Certificate issuer:       /CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
Certificate serial:       6E53E80955DC834C51503CD95EC1462DCADC77B5
Authority key identifier: FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/323830363a3336663a3a2f33322d3438203d3e20323635363139.roa
Signing time:             Tue 05 Mar 2024 18:01:43 +0000
ROA not before:           Tue 05 Mar 2024 17:56:43 +0000
ROA not after:            Tue 04 Mar 2025 18:01:43 +0000
asID:                     265619
IP address blocks:        2806:36f::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:e8:09:55:dc:83:4c:51:50:3c:d9:5e:c1:46:2d:ca:dc:77:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
        Validity
            Not Before: Mar  5 17:56:43 2024 GMT
            Not After : Mar  4 18:01:43 2025 GMT
        Subject: CN=AC0424AD2836ED7792FBB82C3455AC98E9BB1237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:83:cd:2d:9f:3a:78:15:6b:4d:4e:fa:e8:
                    de:a8:bc:d8:db:d0:eb:b9:bb:e6:aa:4e:9b:0c:ed:
                    82:bd:7d:d8:51:9e:b2:c4:c7:fc:04:76:8f:8f:f1:
                    d7:82:f4:97:3a:8e:04:b2:32:38:9d:bc:f1:78:26:
                    94:7f:d4:0b:27:51:03:c1:74:7a:fb:e9:81:73:bf:
                    cc:f0:f2:39:29:33:80:f0:d7:3b:98:a9:ec:75:50:
                    05:c6:dd:5d:af:67:ef:11:4d:15:5f:82:72:eb:cf:
                    e2:1d:47:34:fe:05:99:63:f6:30:6b:a6:4d:83:41:
                    7c:90:0d:45:65:55:bf:d1:2a:10:00:7f:16:e0:1b:
                    1a:1a:97:c7:87:7a:5d:e7:c2:bd:aa:02:fd:aa:e3:
                    50:1b:87:a2:49:c6:02:dc:4b:08:41:69:1b:2b:2c:
                    04:23:89:47:c6:ba:bd:ce:d4:0a:18:93:10:41:cd:
                    ec:dd:e9:83:13:03:1c:86:a5:39:b7:fc:45:31:3c:
                    d3:2d:09:59:a4:13:ae:cf:c8:5e:38:c5:14:83:bd:
                    f6:4a:13:d6:d8:00:92:59:41:b5:b6:cf:ba:16:8a:
                    04:c0:d0:4d:a2:70:54:4c:b0:61:b7:0b:22:11:ef:
                    a5:c2:c7:4d:bc:cb:b3:32:09:b7:33:ae:5a:e3:dd:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:24:AD:28:36:ED:77:92:FB:B8:2C:34:55:AC:98:E9:BB:12:37
            X509v3 Authority Key Identifier:
                keyid:FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/323830363a3336663a3a2f33322d3438203d3e20323635363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36f::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:3d:f7:25:27:72:c7:c2:a0:be:96:8e:32:62:96:d0:99:
         e7:12:8b:67:50:dd:f1:2e:70:91:48:56:ff:1d:ee:73:40:bf:
         08:60:b6:84:89:77:4d:4c:e0:41:da:c8:35:ba:88:bc:2e:69:
         f5:e2:4e:c8:01:c2:5c:0c:0b:40:e8:35:38:e9:e0:ec:c7:a1:
         f3:bd:bc:2c:fd:56:d8:0c:4a:d6:e9:39:08:43:36:ac:9e:92:
         44:79:3f:fa:5a:07:d6:3b:1d:05:d1:48:49:cb:1c:a0:8c:74:
         c1:29:63:c8:e9:4c:bc:5f:96:b8:16:54:da:71:cb:83:1c:38:
         13:62:9b:2d:13:2e:2d:dd:c2:8d:85:7a:43:c9:9d:19:a8:69:
         10:ad:58:23:0c:65:60:bb:42:cc:0b:0d:1a:ba:48:80:b8:af:
         ff:61:46:d0:5c:c2:dc:01:84:71:aa:f1:b8:d3:a6:db:a0:22:
         a8:4d:65:b0:9b:2d:ac:4b:3a:d8:90:84:33:96:41:bd:15:c5:
         84:9a:4e:30:68:24:fc:f0:60:40:4c:40:6a:8d:39:b0:dd:b1:
         16:b2:b0:31:9e:a2:6f:5b:e4:46:fa:28:38:76:81:bb:b6:43:
         15:60:1b:0c:14:ad:6b:a6:86:90:58:5c:36:50:c3:bc:62:2b:
         3c:47:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----