Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
File:                     323830363a3363663a3a2f33322d3634203d3e20323730313236.roa (raw, json)
Hash identifier:          xMgItY8byLrxSbUjQ1LsJDJ9d1Y1VteEUTiDke3CDQw=
Subject key identifier:   D0:E4:EF:C1:58:DB:49:74:A6:8D:D7:9F:E0:58:C5:F8:B4:DF:47:AB
Certificate issuer:       /CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
Certificate serial:       558A60C7133CE7BC2DCE5CA04024B0608A7F10
Authority key identifier: 24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
Signing time:             Tue 05 Mar 2024 18:02:14 +0000
ROA not before:           Tue 05 Mar 2024 17:57:14 +0000
ROA not after:            Tue 04 Mar 2025 18:02:14 +0000
asID:                     270126
IP address blocks:        2806:3cf::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8a:60:c7:13:3c:e7:bc:2d:ce:5c:a0:40:24:b0:60:8a:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
        Validity
            Not Before: Mar  5 17:57:14 2024 GMT
            Not After : Mar  4 18:02:14 2025 GMT
        Subject: CN=D0E4EFC158DB4974A68DD79FE058C5F8B4DF47AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:0d:94:bf:62:b0:0d:95:04:c5:c0:93:91:
                    ad:fe:0b:e3:dc:f0:60:bb:fc:d5:d7:5f:e5:4c:db:
                    64:77:88:1b:59:e0:78:f9:cb:8f:45:43:0e:db:76:
                    6f:7d:b3:03:28:3b:f1:92:9f:00:18:33:5e:e8:10:
                    2d:59:a0:26:ac:6e:e0:99:8e:96:45:59:2e:ec:35:
                    97:ff:7c:fa:17:b9:61:ed:96:a3:f5:13:c7:ee:2d:
                    a4:40:a1:4f:ff:43:31:7b:7b:82:7c:66:45:51:91:
                    cf:1c:da:76:19:03:94:24:f4:6c:43:31:63:80:19:
                    dd:ab:26:25:bb:cb:50:69:c4:4b:eb:2a:45:f6:73:
                    cd:65:e1:e3:57:d6:85:fa:e9:c8:68:7c:d7:af:32:
                    32:db:b3:cb:aa:e4:7c:2f:62:49:05:09:23:c6:10:
                    bc:04:fe:cc:73:f7:23:24:c0:42:89:a3:43:b8:4c:
                    5a:39:7b:2a:f1:95:0a:b6:5a:4a:35:b4:31:02:83:
                    8b:d9:0b:b4:82:01:44:7c:b8:4a:3c:7e:0a:37:56:
                    5d:1f:da:f0:a2:c8:6d:a6:3a:5d:e1:03:ae:5e:b5:
                    13:63:f2:8a:75:16:11:17:4a:41:c0:70:05:5c:01:
                    9a:88:1d:c7:43:db:b9:2d:ec:d8:c2:37:e2:a8:fd:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:EF:C1:58:DB:49:74:A6:8D:D7:9F:E0:58:C5:F8:B4:DF:47:AB
            X509v3 Authority Key Identifier:
                keyid:24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:03:1a:5d:eb:44:85:55:76:e8:27:5b:c9:32:61:18:cc:34:
         85:62:eb:39:98:e3:f0:9e:ca:3f:79:d0:a4:39:94:0a:4e:57:
         b8:bb:7a:69:39:95:7c:35:6d:3c:9d:20:79:2c:b1:13:ed:08:
         ac:d7:ed:b1:c6:96:6f:ec:91:e2:f6:e4:ec:a7:ac:1e:c6:0f:
         d8:e5:a9:6f:2b:73:a3:51:60:e9:ef:c9:83:44:d2:b6:f1:af:
         be:91:ca:b0:ec:99:ff:ad:3f:18:5a:0d:29:dd:c9:10:f2:72:
         1f:32:27:23:b6:52:b1:ce:46:d8:68:92:36:ce:11:7d:d0:35:
         a3:de:81:77:30:03:0b:15:1d:eb:d9:75:4a:e1:46:7f:3f:43:
         d2:a0:8c:83:2a:aa:2a:c9:9d:15:f8:70:a3:93:7b:89:4d:85:
         0f:37:b9:ab:b2:38:65:61:10:65:bf:d3:90:75:2c:d0:41:a2:
         17:85:39:d5:66:11:cf:f5:96:5f:ac:50:e3:85:34:f8:7a:56:
         5b:82:f5:fb:ca:00:6d:a3:8d:d3:50:d9:de:4b:df:71:19:af:
         74:54:d7:e7:44:05:58:ab:72:c7:f6:73:b9:c4:83:71:54:15:
         6b:28:d3:7a:92:97:7d:20:d6:56:82:4e:7c:29:80:f3:09:04:
         cc:fe:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----