Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa
File:                     323830363a3432393a3a2f33322d3438203d3e20323732343035.roa (raw, json)
Hash identifier:          YpeGDE5rj1bJ2WFHjTpM8LSERk3JHhMXQFiTb8jI8lY=
Subject key identifier:   75:49:18:3D:1D:69:6F:16:8C:CC:2C:0D:E1:AB:B0:35:80:87:C6:4A
Certificate issuer:       /CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
Certificate serial:       3AC7B4AAE5A84A233C25F66459906EFB4D715CD0
Authority key identifier: EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa
Signing time:             Fri 23 Aug 2024 01:25:00 +0000
ROA not before:           Fri 23 Aug 2024 01:20:00 +0000
ROA not after:            Fri 22 Aug 2025 01:25:00 +0000
asID:                     272405
IP address blocks:        2806:429::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:b4:aa:e5:a8:4a:23:3c:25:f6:64:59:90:6e:fb:4d:71:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663
        Validity
            Not Before: Aug 23 01:20:00 2024 GMT
            Not After : Aug 22 01:25:00 2025 GMT
        Subject: CN=7549183D1D696F168CCC2C0DE1ABB0358087C64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:59:71:4f:24:df:cf:2b:84:4c:96:16:d7:
                    99:64:cf:16:bf:ce:c2:eb:c8:25:46:7e:a2:11:81:
                    f6:44:5b:b5:3e:e7:44:d5:59:51:0e:20:9a:d1:e7:
                    c1:ac:a6:b0:36:8c:67:0f:61:0b:1b:e4:b7:e6:c9:
                    32:3a:7d:43:d8:97:a4:b7:c3:42:82:48:56:fb:40:
                    c0:7b:b9:dd:13:39:22:bd:84:0a:37:bf:29:a6:20:
                    b8:eb:71:84:d6:1b:56:76:5e:49:2d:1d:21:a9:a5:
                    7b:c6:1a:2e:c4:7e:2c:9c:5f:52:56:c2:2d:0a:4f:
                    14:07:27:64:1f:75:fe:ed:97:80:24:e3:e6:26:91:
                    b5:ba:34:bc:46:a5:e6:7d:03:3b:77:03:21:6c:74:
                    cc:db:f6:df:07:6c:8b:ad:33:ff:b7:b2:f1:83:71:
                    1d:cc:29:17:6a:8a:1d:2b:4a:e2:e4:0e:8a:f1:52:
                    08:c8:90:0d:f9:e2:1c:d4:cb:5c:e1:7d:2a:28:81:
                    69:48:27:d9:d1:f8:c9:12:41:31:73:4c:64:c2:56:
                    fa:55:60:a6:a8:26:68:18:fd:4c:e7:91:2d:5c:bd:
                    2b:21:45:bb:70:11:8b:16:5f:38:2d:ae:c5:39:03:
                    e2:30:ab:5d:8d:71:53:0c:74:ab:a1:a5:a3:b8:ee:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:18:3D:1D:69:6F:16:8C:CC:2C:0D:E1:AB:B0:35:80:87:C6:4A
            X509v3 Authority Key Identifier:
                keyid:EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/323830363a3432393a3a2f33322d3438203d3e20323732343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:429::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:e4:4a:a2:3e:49:b9:1f:ba:cf:5e:27:33:9d:aa:9d:8c:
         e0:b5:55:07:03:f6:e6:65:82:3c:63:51:ab:ec:b7:11:e2:0b:
         de:7a:9b:12:36:a9:21:98:a3:af:3a:49:66:b5:70:e4:75:da:
         e1:df:79:49:00:ac:78:97:4b:be:79:e9:51:54:fc:f6:53:46:
         57:d4:50:73:1a:f5:0d:c5:f6:9f:04:2c:c5:d5:26:b4:4b:be:
         10:1b:40:7e:5c:fa:79:ec:07:df:31:fd:42:50:3b:7e:12:44:
         4c:35:42:fe:ed:1b:b8:df:59:4f:44:60:dd:4b:c8:1e:13:0a:
         f1:02:bb:de:de:5b:ec:1c:00:69:cf:d0:b6:cb:85:72:18:ec:
         25:8c:30:29:88:f5:ca:02:3a:61:ba:9c:54:22:4a:4f:3a:06:
         6f:df:c0:cd:ad:6c:8f:fb:a0:8e:04:85:ed:2c:72:2b:0b:03:
         16:4d:43:40:d9:55:cc:66:b2:ba:33:40:f2:f2:37:d1:76:c3:
         87:34:6d:3c:a9:37:48:21:ec:f2:bd:80:51:b0:4f:1e:b4:50:
         c0:12:a1:2b:35:e9:a9:86:fd:65:ce:13:ba:50:f6:52:1a:5f:
         35:b0:b1:59:7f:72:c3:a8:7a:a6:1d:36:d5:1e:ea:48:17:58:
         e0:9c:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----