Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
File:                     323830363a3365653a3a2f33322d3438203d3e20323730313734.roa (raw, json)
Hash identifier:          PgcWYhnqE8awL6lQgFGD80hLtc5ZapsM4psKRLhITuc=
Subject key identifier:   28:DD:6C:14:77:E3:F5:7F:0A:41:E3:36:22:A7:20:ED:9D:7D:04:25
Certificate issuer:       /CN=5562ACA50E5F7263782A622F5FA3929390EAC355
Certificate serial:       234DF2C9A6E0532F5AE61FF3B39E548F3A1AA0DC
Authority key identifier: 55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa
Signing time:             Tue 05 Mar 2024 17:59:08 +0000
ROA not before:           Tue 05 Mar 2024 17:54:08 +0000
ROA not after:            Tue 04 Mar 2025 17:59:08 +0000
asID:                     270174
IP address blocks:        2806:3ee::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4d:f2:c9:a6:e0:53:2f:5a:e6:1f:f3:b3:9e:54:8f:3a:1a:a0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5562ACA50E5F7263782A622F5FA3929390EAC355
        Validity
            Not Before: Mar  5 17:54:08 2024 GMT
            Not After : Mar  4 17:59:08 2025 GMT
        Subject: CN=28DD6C1477E3F57F0A41E33622A720ED9D7D0425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:13:d2:2c:8d:48:13:77:a1:40:f4:99:00:
                    ad:fa:d7:73:ed:10:ad:c2:1f:e1:7b:c8:38:0a:3c:
                    a4:5c:02:17:73:78:6f:a9:e4:40:71:1f:6e:0d:29:
                    b7:b8:2c:11:4d:2f:d7:9f:fa:ab:25:f4:5c:22:24:
                    63:e4:45:12:8f:e2:6a:54:46:67:03:0a:dc:02:55:
                    89:be:c9:92:85:0d:4b:0d:0e:18:2c:11:54:dd:c0:
                    21:2e:1f:47:4f:18:3a:3e:c8:08:fb:d1:79:29:b0:
                    d9:87:ef:f4:6c:51:4b:5a:6e:90:fe:db:60:d5:41:
                    e6:34:12:e1:46:46:0d:6a:21:4f:ea:ce:4e:72:19:
                    0b:f1:d7:3f:29:ce:da:43:bb:cb:b6:8e:66:0a:f7:
                    18:30:2a:43:bc:0f:91:8f:49:94:88:d1:9c:fb:07:
                    e7:85:c5:32:5f:15:d2:f9:3e:b6:be:89:ab:a3:73:
                    3e:a3:2f:48:58:2e:87:80:0e:1b:32:04:70:85:8b:
                    4a:59:16:0c:2b:bd:bd:23:1a:6b:c9:95:51:38:24:
                    06:8a:cf:eb:dd:b2:a0:49:2a:35:f1:24:58:4f:69:
                    84:f8:4c:b3:e1:f6:50:97:56:e7:2d:29:0a:67:6a:
                    e3:5d:9a:c5:b0:e5:d5:37:ab:95:1d:2b:c3:b0:d1:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:6C:14:77:E3:F5:7F:0A:41:E3:36:22:A7:20:ED:9D:7D:04:25
            X509v3 Authority Key Identifier:
                keyid:55:62:AC:A5:0E:5F:72:63:78:2A:62:2F:5F:A3:92:93:90:EA:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/5562ACA50E5F7263782A622F5FA3929390EAC355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5562ACA50E5F7263782A622F5FA3929390EAC355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2957B424D8208B1EBEEFD3B0679AD762B783E1076B8CCEBCAF61C8740E36C26F/0/323830363a3365653a3a2f33322d3438203d3e20323730313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:be:96:5f:4b:03:ee:a3:f2:67:2d:71:4e:fb:58:15:49:dc:
         cf:fa:5e:d9:10:ce:9f:f6:cb:3e:a5:97:eb:92:f9:2f:9c:c1:
         5b:0e:f7:05:c0:d6:32:e7:16:5f:59:c9:ab:d4:bc:42:bc:b0:
         a4:89:2e:c4:60:ec:82:71:a4:4c:be:af:d9:43:11:64:bc:e8:
         c9:64:8c:42:25:60:73:b5:eb:f2:ef:38:6e:aa:d6:71:e9:4b:
         30:cd:05:fc:ef:00:51:7c:3b:71:e1:ab:27:b9:af:1d:1b:1a:
         4d:b1:82:5b:2e:17:fd:25:ac:5d:44:77:7b:ba:a9:ef:30:62:
         09:25:58:8c:7e:ff:c2:e4:e7:39:ea:b9:97:e0:cd:6e:c8:03:
         84:4d:d9:d8:dd:7a:68:46:7c:1c:9c:e2:fe:59:ec:37:64:b7:
         44:64:62:5a:b6:9a:d0:21:48:20:f8:0f:f0:dc:5d:61:5b:7a:
         c4:32:b3:c7:ae:be:2d:24:b0:f1:79:1e:b6:d9:06:b5:c4:56:
         3d:fd:43:5d:01:a9:33:ac:3e:cd:00:18:99:e6:dc:4e:cc:db:
         1b:82:7f:00:cb:3d:0b:2e:d6:fe:45:a1:2f:b0:5b:dd:3a:01:
         ca:5e:dd:88:83:bc:ee:a4:c7:71:7d:53:47:cf:0a:d3:45:08:
         d3:20:a6:bd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUI03yyabgUy9a5h/zs55UjzoaoNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2MkFDQTUwRTVGNzI2Mzc4MkE2MjJGNUZBMzkyOTM5
MEVBQzM1NTAeFw0yNDAzMDUxNzU0MDhaFw0yNTAzMDQxNzU5MDhaMDMxMTAvBgNV
BAMTKDI4REQ2QzE0NzdFM0Y1N0YwQTQxRTMzNjIyQTcyMEVEOUQ3RDA0MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PhPSLI1IE3ehQPSZAK3613Pt
EK3CH+F7yDgKPKRcAhdzeG+p5EBxH24NKbe4LBFNL9ef+qsl9FwiJGPkRRKP4mpU
RmcDCtwCVYm+yZKFDUsNDhgsEVTdwCEuH0dPGDo+yAj70XkpsNmH7/RsUUtabpD+
22DVQeY0EuFGRg1qIU/qzk5yGQvx1z8pztpDu8u2jmYK9xgwKkO8D5GPSZSI0Zz7
B+eFxTJfFdL5Pra+iaujcz6jL0hYLoeADhsyBHCFi0pZFgwrvb0jGmvJlVE4JAaK
z+vdsqBJKjXxJFhPaYT4TLPh9lCXVuctKQpnauNdmsWw5dU3q5UdK8Ow0ZWTAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUKN1sFHfj9X8KQeM2Iqcg7Z19BCUwHwYDVR0j
BBgwFoAUVWKspQ5fcmN4KmIvX6OSk5Dqw1UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTU3QjQyNEQ4MjA4QjFFQkVFRkQzQjA2NzlBRDc2MkI3
ODNFMTA3NkI4Q0NFQkNBRjYxQzg3NDBFMzZDMjZGLzAvNTU2MkFDQTUwRTVGNzI2
Mzc4MkE2MjJGNUZBMzkyOTM5MEVBQzM1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTYyQUNBNTBFNUY3MjYzNzgy
QTYyMkY1RkEzOTI5MzkwRUFDMzU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk1N0I0MjREODIwOEIxRUJFRUZEM0IwNjc5QUQ3NjJCNzgzRTEwNzZC
OENDRUJDQUY2MUM4NzQwRTM2QzI2Ri8wLzMyMzgzMDM2M2EzMzY1NjUzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM3MzAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPuMA0G
CSqGSIb3DQEBCwUAA4IBAQCPvpZfSwPuo/JnLXFO+1gVSdzP+l7ZEM6f9ss+pZfr
kvkvnMFbDvcFwNYy5xZfWcmr1LxCvLCkiS7EYOyCcaRMvq/ZQxFkvOjJZIxCJWBz
tevy7zhuqtZx6UswzQX87wBRfDtx4asnua8dGxpNsYJbLhf9JaxdRHd7uqnvMGIJ
JViMfv/C5Oc56rmX4M1uyAOETdnY3XpoRnwcnOL+Wew3ZLdEZGJatprQIUgg+A/w
3F1hW3rEMrPHrr4tJLDxeR622Qa1xFY9/UNdAakzrD7NABiZ5txOzNsbgn8Ayz0L
Ltb+RaEvsFvdOgHKXt2Ig7zupMdxfVNHzwrTRQjTIKa9
-----END CERTIFICATE-----