Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C9AA2C334FE0E68C2263029F8058D13AAFFD9C68218B8974854A1E91B1F97CA/0/323830363a3364353a3a2f33322d3634203d3e20323730313333.roa
File:                     323830363a3364353a3a2f33322d3634203d3e20323730313333.roa (raw, json)
Hash identifier:          /Te6dche3gGYhmbxHqJ/fIwK5TuLz446JMKO+h5mQVM=
Subject key identifier:   AD:FA:92:98:5F:9F:43:11:F4:C4:01:57:5C:04:54:24:C9:68:7E:8D
Certificate issuer:       /CN=0BA31E688FC187BB18657847D0585DC1291EBD14
Certificate serial:       1CB98DE4EAF2BF63DDB7AD67279C778399ED7A05
Authority key identifier: 0B:A3:1E:68:8F:C1:87:BB:18:65:78:47:D0:58:5D:C1:29:1E:BD:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA31E688FC187BB18657847D0585DC1291EBD14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C9AA2C334FE0E68C2263029F8058D13AAFFD9C68218B8974854A1E91B1F97CA/0/323830363a3364353a3a2f33322d3634203d3e20323730313333.roa
Signing time:             Fri 22 Mar 2024 13:45:00 +0000
ROA not before:           Fri 22 Mar 2024 13:40:00 +0000
ROA not after:            Fri 21 Mar 2025 13:45:00 +0000
asID:                     270133
IP address blocks:        2806:3d5::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:8d:e4:ea:f2:bf:63:dd:b7:ad:67:27:9c:77:83:99:ed:7a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA31E688FC187BB18657847D0585DC1291EBD14
        Validity
            Not Before: Mar 22 13:40:00 2024 GMT
            Not After : Mar 21 13:45:00 2025 GMT
        Subject: CN=ADFA92985F9F4311F4C401575C045424C9687E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:51:cd:f5:fe:cc:01:23:41:45:94:50:37:
                    dc:eb:5f:ca:80:dd:e6:ee:49:9f:b9:04:87:27:0f:
                    6d:47:ec:f6:c2:e4:c5:d1:eb:bd:f0:c7:19:5e:c4:
                    ef:02:2b:59:54:f3:3c:a6:77:f4:1c:26:1e:4a:c2:
                    65:f0:fc:19:84:51:2b:c8:72:67:66:10:eb:43:ba:
                    65:92:cd:37:62:ab:8e:bb:3b:ea:f2:69:e4:e8:50:
                    af:da:db:43:b0:3d:91:36:e9:12:13:bc:c1:c7:f8:
                    a8:86:62:ee:d8:bc:77:d1:3a:68:f9:95:a3:7c:c1:
                    aa:3a:f8:d4:5d:6a:b1:93:5f:37:37:b5:66:d8:85:
                    7e:f1:94:0f:13:97:a2:f5:27:f9:c7:46:e0:12:37:
                    fe:89:3d:59:96:47:9f:56:88:83:5e:7a:22:26:d4:
                    8f:de:08:5e:a7:04:56:9b:47:c0:25:14:b5:f7:29:
                    b1:36:fc:35:c8:77:b5:e6:b2:ce:5c:13:e0:9b:2a:
                    ac:9a:1f:34:e5:5e:b4:82:af:f7:76:55:32:7e:ef:
                    5d:ec:40:10:dc:b1:77:ef:82:97:9f:0c:04:dd:4a:
                    a2:3f:1c:1f:e5:40:ac:00:e1:c5:6f:ee:f5:8f:a1:
                    fe:31:12:ba:ba:ab:b4:e8:2b:ef:ea:48:59:1b:79:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:92:98:5F:9F:43:11:F4:C4:01:57:5C:04:54:24:C9:68:7E:8D
            X509v3 Authority Key Identifier:
                keyid:0B:A3:1E:68:8F:C1:87:BB:18:65:78:47:D0:58:5D:C1:29:1E:BD:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C9AA2C334FE0E68C2263029F8058D13AAFFD9C68218B8974854A1E91B1F97CA/0/0BA31E688FC187BB18657847D0585DC1291EBD14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA31E688FC187BB18657847D0585DC1291EBD14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C9AA2C334FE0E68C2263029F8058D13AAFFD9C68218B8974854A1E91B1F97CA/0/323830363a3364353a3a2f33322d3634203d3e20323730313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d5::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:43:d4:82:db:bf:d6:ec:1a:e5:da:06:a1:26:ad:d9:ba:
         fc:c0:ab:36:78:b0:53:05:69:4f:55:47:71:b1:f3:de:ee:02:
         9f:48:86:b2:4a:f1:a8:b3:f7:90:82:da:21:f2:77:8e:6e:ac:
         59:77:ae:d2:5f:a8:9b:c4:87:cc:48:40:23:df:2f:c7:b9:7c:
         c3:e9:4d:ff:aa:76:8e:fd:a1:b2:11:84:cc:a9:0a:3e:1b:23:
         2e:4f:63:7d:84:52:1c:d6:3b:b5:60:81:fc:b3:90:4f:cb:72:
         b6:2d:3b:ff:2d:c6:e2:9a:5d:35:d3:ed:ad:8f:ed:19:9f:10:
         75:5d:d6:64:ec:b6:b7:b6:98:b8:1a:82:33:59:ea:3e:da:3a:
         5c:de:d0:31:48:e5:f0:f2:c7:0d:b7:97:1a:79:89:f6:77:1c:
         61:7c:ee:9f:85:d5:5a:51:b5:fe:35:5e:8e:29:d8:83:60:40:
         42:6e:c5:81:90:60:3d:1e:55:54:94:2b:93:fa:9a:ad:b1:96:
         5e:93:64:f4:d3:71:26:18:49:eb:fb:4d:1a:24:d4:7f:0d:ea:
         82:a7:9d:fc:87:8d:fa:85:a3:5f:89:bf:8f:6a:9b:29:57:4e:
         32:f2:05:d2:0f:40:cb:9c:c1:03:be:74:1e:b2:67:c4:56:55:
         5c:e9:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----