Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3334363a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          xgUgEzuEH+WBrOwAQ9CXgDhijkt6ArmnDZLl0Z4nQfg=
Subject key identifier:   BB:64:15:D4:B4:63:1B:5D:9B:9A:55:A7:44:3B:E5:52:74:96:16:46
Certificate issuer:       /CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
Certificate serial:       7216389A646B9DBF48D98855F49527E8AEDC1854
Authority key identifier: 27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 05 Mar 2024 17:41:26 +0000
ROA not before:           Tue 05 Mar 2024 17:36:26 +0000
ROA not after:            Tue 04 Mar 2025 17:41:26 +0000
asID:                     265523
IP address blocks:        2806:346::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:38:9a:64:6b:9d:bf:48:d9:88:55:f4:95:27:e8:ae:dc:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
        Validity
            Not Before: Mar  5 17:36:26 2024 GMT
            Not After : Mar  4 17:41:26 2025 GMT
        Subject: CN=BB6415D4B4631B5D9B9A55A7443BE55274961646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:c8:14:ba:6c:0a:77:91:94:a2:61:52:6d:
                    74:dd:2f:c1:38:f4:3c:e8:08:1f:3a:50:6e:ca:ab:
                    92:79:0d:09:ea:47:a0:be:5e:9f:a4:82:3d:fd:3f:
                    ac:8e:04:5f:54:6a:43:9c:fc:8b:0f:b0:92:a4:5f:
                    a1:08:41:a5:70:7d:41:92:1c:33:eb:71:a7:6a:dc:
                    ed:41:8d:e2:12:f9:49:07:45:d5:7b:35:ca:0b:cb:
                    7d:6b:44:e5:57:d5:c6:29:5a:e1:b6:cd:e2:a0:d0:
                    b6:47:3b:f4:8a:d8:bf:fc:39:95:5c:5b:05:e1:25:
                    64:c0:53:ba:4c:45:d6:24:56:e8:d3:48:f9:35:f6:
                    e5:50:7d:41:46:0e:42:ed:55:2a:ab:1f:23:02:0f:
                    f5:8c:b9:44:61:96:81:90:a2:9a:ba:ae:6a:06:f2:
                    79:e7:ba:9d:96:5d:ba:87:da:1b:f2:e8:ce:5d:af:
                    12:6c:52:15:4a:b8:7e:32:6c:3a:6c:bc:b6:cf:d1:
                    b3:85:1e:13:fb:ec:e0:0c:31:d3:80:c0:61:e8:be:
                    77:7a:57:9e:fb:b2:ad:cb:53:23:fd:47:bd:2b:28:
                    72:14:81:e7:2b:86:91:25:11:91:9e:5d:0f:83:ae:
                    bd:0f:a4:09:69:c1:fe:b8:68:f0:29:c3:fd:d6:2e:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:15:D4:B4:63:1B:5D:9B:9A:55:A7:44:3B:E5:52:74:96:16:46
            X509v3 Authority Key Identifier:
                keyid:27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:346::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:ce:19:fd:15:2c:d5:42:72:2e:b0:40:1a:a3:9b:ac:03:
         53:0c:84:8c:f7:db:a4:1c:65:4c:b2:25:d7:05:a2:af:9f:51:
         fc:32:e3:46:49:7a:ca:02:5c:aa:c4:4c:52:b7:b9:85:cc:16:
         d9:bd:85:39:a4:62:b1:a0:0a:dd:8d:c2:70:c2:48:e6:1f:5b:
         45:10:34:e5:f8:7e:b7:e0:20:95:f0:96:82:a1:d7:7e:0f:dd:
         b6:ec:4c:f3:75:bc:cd:ff:21:a8:b1:a1:b1:b9:60:30:3d:9b:
         42:42:ed:38:2c:7c:d6:41:3f:eb:52:0e:51:ad:1b:86:ed:86:
         5e:88:c5:45:24:43:e6:8d:f3:df:73:b5:a1:61:bf:09:44:c2:
         19:80:15:a0:d8:3f:04:24:e1:2b:9a:a0:ea:d2:42:ba:43:0d:
         23:b7:19:a9:de:68:76:fb:af:7d:be:90:8e:15:fe:86:57:78:
         32:a7:c7:e5:32:41:b7:ab:cc:37:db:be:e6:c9:40:42:4f:09:
         4d:2b:94:14:ab:f5:7b:25:02:07:4a:1e:9b:29:6d:90:22:a8:
         86:3d:f7:8b:87:f9:d7:f6:5c:82:67:4a:23:fa:77:93:32:e8:
         cf:00:f3:83:a3:8a:48:ce:1b:13:c4:30:43:ac:a3:82:e1:da:
         2d:bc:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----