Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa
File:                     323830363a3363383a3a2f33322d3332203d3e20323730313439.roa (raw, json)
Hash identifier:          WQ0Myupi2I31LJarNzPn5G3dUpYlLJ0MUMinu4EfRbA=
Subject key identifier:   6B:33:C3:ED:24:B9:E5:84:53:CC:C9:E8:F2:25:86:59:0D:EF:B3:68
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       15891D888443A371B052BEE43C44ED50E2FED117
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa
Signing time:             Tue 05 Mar 2024 17:42:21 +0000
ROA not before:           Tue 05 Mar 2024 17:37:21 +0000
ROA not after:            Tue 04 Mar 2025 17:42:21 +0000
asID:                     270149
IP address blocks:        2806:3c8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:89:1d:88:84:43:a3:71:b0:52:be:e4:3c:44:ed:50:e2:fe:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Mar  5 17:37:21 2024 GMT
            Not After : Mar  4 17:42:21 2025 GMT
        Subject: CN=6B33C3ED24B9E58453CCC9E8F22586590DEFB368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:ed:8b:9c:0e:fd:2f:66:24:8c:e5:56:1b:
                    41:a4:1d:86:61:44:7a:c6:f3:02:04:66:86:ea:0c:
                    e3:80:eb:e3:d3:63:06:9b:3d:5d:cc:80:e6:f0:b2:
                    e9:ba:c3:c1:45:08:2f:86:5f:b0:80:02:99:b6:ac:
                    e7:44:e5:59:70:26:c3:a7:e7:fe:3e:35:4b:3c:87:
                    4b:a1:80:2b:bc:fc:9f:6e:67:de:2f:a3:38:2a:7f:
                    b7:3a:28:10:28:cf:79:3e:09:a1:ec:ea:d7:a0:06:
                    12:f3:3e:a7:86:7d:73:91:de:9c:d9:92:b5:c6:9f:
                    29:b3:92:ba:f1:c8:f7:8c:75:1a:f7:92:43:9e:d6:
                    a5:bf:0e:6d:87:b5:fe:e1:9c:53:e5:ff:7d:1d:cf:
                    35:78:44:7b:c1:4c:5f:65:98:c3:3e:24:f2:cc:cf:
                    03:ce:c7:5d:95:ba:d3:ff:3c:37:e6:3d:4b:ec:a1:
                    7f:27:da:c2:2d:92:32:e7:be:1a:69:2c:b5:66:7a:
                    46:3a:92:d8:e1:d8:ce:ca:ed:27:09:1a:7f:c6:e7:
                    28:bb:0e:38:7a:7c:2d:80:03:a7:36:38:2b:ba:3d:
                    7d:20:bf:86:91:0f:fc:d0:82:a0:90:80:a4:20:29:
                    3d:3d:40:bc:3b:33:5c:3f:3f:99:ad:2f:e0:44:d1:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:C3:ED:24:B9:E5:84:53:CC:C9:E8:F2:25:86:59:0D:EF:B3:68
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:c4:be:f6:59:14:08:30:59:2f:42:a9:9c:d9:ea:6c:37:
         ea:d9:01:ea:c9:17:1e:0d:18:eb:0c:da:68:07:91:25:3c:b5:
         92:f9:8d:e3:c4:15:db:60:d9:9c:2f:9a:00:dc:be:f4:50:0e:
         85:34:d7:cb:eb:04:46:9c:e3:c1:18:12:85:6c:82:3a:19:b1:
         a1:8d:8a:6d:44:cd:e6:4d:d4:42:31:54:ed:31:90:a5:23:09:
         db:bc:5f:7d:b8:65:da:80:f9:04:95:df:52:c6:cd:d0:4f:a6:
         3f:e2:bd:98:9d:29:d5:40:ed:ce:6f:00:2e:dd:fc:8e:da:bb:
         46:8e:d2:19:7e:9a:be:74:5d:2e:cf:d6:82:fc:63:b3:9d:1e:
         48:98:df:92:76:0f:e8:97:9c:f5:0d:f1:f0:54:0c:51:fa:14:
         37:1a:75:56:47:d7:5e:0f:86:b6:68:a5:6d:f0:06:de:c7:f0:
         1f:8f:6b:01:3f:b4:62:45:76:d7:e9:df:a0:69:6c:cc:da:29:
         c1:81:a1:20:4e:03:bc:0e:60:4d:ab:a1:2c:0e:06:f8:ba:0f:
         c9:58:41:17:e0:bc:8e:29:df:db:59:29:22:cb:13:06:94:cf:
         a4:04:f8:87:bb:f9:e0:23:a5:71:c3:fb:b7:54:c5:65:41:2f:
         c1:55:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----