Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa
File:                     323830363a3331653a3a2f34322d3432203d3e203238343233.roa (raw, json)
Hash identifier:          qxNMYRYKP/sOznextj+dFCi11fiTPcBG4sLnU5MlNyc=
Subject key identifier:   0D:96:21:88:8C:15:FE:81:E3:C6:70:C3:52:97:40:E5:F6:12:1F:68
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       5C4D8DA5CB576BBB56257622DFC5B2499F987432
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa
Signing time:             Sun 26 Jan 2025 01:50:00 +0000
ROA not before:           Sun 26 Jan 2025 01:45:00 +0000
ROA not after:            Sun 25 Jan 2026 01:50:00 +0000
asID:                     28423
IP address blocks:        2806:31e::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4d:8d:a5:cb:57:6b:bb:56:25:76:22:df:c5:b2:49:9f:98:74:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Jan 26 01:45:00 2025 GMT
            Not After : Jan 25 01:50:00 2026 GMT
        Subject: CN=0D9621888C15FE81E3C670C3529740E5F6121F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:da:7b:12:7d:3d:a5:76:91:a5:03:c2:0f:
                    b4:d4:44:ec:69:b5:02:45:dd:6a:62:11:68:d5:a1:
                    52:19:b2:85:04:8f:e2:0c:e4:e8:06:67:84:97:49:
                    0e:cb:ca:1d:87:fc:2e:dc:ff:21:2d:17:60:bb:31:
                    9f:3f:80:72:78:b0:12:c6:2c:bc:3a:61:e7:3f:b5:
                    c3:31:d9:2a:c6:c3:4e:ea:b4:4f:fd:73:72:71:47:
                    86:ef:86:7e:9b:84:f4:12:c9:13:2b:cf:5f:ab:e2:
                    6b:a8:e4:22:74:2f:ac:1f:a5:5d:a3:dd:34:6d:f9:
                    3c:c7:fc:e2:8d:d8:a3:55:ff:e8:a4:7a:51:eb:27:
                    d4:40:13:85:95:db:62:c8:5d:a7:37:77:55:64:3f:
                    0b:29:8b:ae:96:5b:33:22:c4:aa:19:65:d8:fd:00:
                    94:c5:a2:bd:24:6b:5c:b4:b0:de:3e:1f:12:0a:8e:
                    72:a8:21:c7:a9:ec:b2:7c:03:15:9f:d8:ec:95:5f:
                    b0:64:90:5b:2b:7d:cd:37:f3:ec:c2:b7:e2:7f:e2:
                    44:1f:7f:80:72:96:3e:4c:e3:5a:8c:1b:92:46:64:
                    93:2b:9c:e0:89:73:8e:74:39:6f:aa:64:65:99:58:
                    b5:e5:17:3f:e0:f2:2b:b3:a6:a3:31:86:05:08:09:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:21:88:8C:15:FE:81:E3:C6:70:C3:52:97:40:E5:F6:12:1F:68
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:31e::/42

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:ae:d3:e2:16:25:6f:6d:97:73:6e:75:0a:b5:43:a3:a8:
         39:a2:e7:fd:65:5b:0f:58:d1:d1:2d:e2:66:63:3e:11:e2:7f:
         39:0d:e6:17:c6:57:68:ae:92:eb:15:7a:5a:0f:dd:ab:b4:35:
         c9:f6:7e:72:ba:c9:4a:7c:b6:3c:1d:85:f6:c0:b0:80:de:88:
         32:91:a3:76:aa:be:ef:9a:9c:f0:92:c2:88:38:2e:fc:7e:4a:
         c4:ce:eb:24:1a:3c:5a:06:4c:6e:c0:3d:e5:2c:70:e0:1f:80:
         e4:49:ff:8e:27:0b:a4:b9:cc:2e:9d:5d:69:8d:66:37:9e:c1:
         6e:2d:6b:b4:6e:0c:fd:b6:3c:48:83:7b:6e:9c:d9:95:45:b6:
         b2:3f:8c:4e:6c:03:de:c2:d4:f9:21:99:59:62:c4:a9:7e:7b:
         7b:82:88:92:03:a9:02:1e:9d:5e:27:dd:0a:3f:bf:6a:75:16:
         f1:a6:de:37:f7:a6:4e:b7:dc:cf:8d:c7:6f:74:34:f9:c2:1c:
         22:32:15:ad:06:3e:7b:36:f9:26:59:c1:e7:36:cb:cc:5d:0f:
         70:0d:3c:2b:63:24:82:e8:5e:b1:f8:0d:d2:d9:2d:43:cd:06:
         f1:55:2d:05:03:93:43:71:b6:95:2d:08:47:62:38:31:2b:d3:
         63:2a:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----