Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa
File:                     323830363a3432373a3a2f33322d3332203d3e20323732343031.roa (raw, json)
Hash identifier:          zzhrAfr3EHT8zGHTrWv0YfhbD7Y2rPv2A3KQ2QrjJLs=
Subject key identifier:   9C:A3:AC:87:53:9F:5A:67:53:0E:3E:2B:2F:D1:D0:6C:70:33:18:BA
Certificate issuer:       /CN=DA5600F7492F4B1FEAF3C10AF2568FDB92A07365
Certificate serial:       620045D5E40354255ACD85F41C393DB1D9238A49
Authority key identifier: DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa
Signing time:             Tue 06 Aug 2024 10:50:00 +0000
ROA not before:           Tue 06 Aug 2024 10:45:00 +0000
ROA not after:            Tue 05 Aug 2025 10:50:00 +0000
asID:                     272401
IP address blocks:        2806:427::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:45:d5:e4:03:54:25:5a:cd:85:f4:1c:39:3d:b1:d9:23:8a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5600F7492F4B1FEAF3C10AF2568FDB92A07365
        Validity
            Not Before: Aug  6 10:45:00 2024 GMT
            Not After : Aug  5 10:50:00 2025 GMT
        Subject: CN=9CA3AC87539F5A67530E3E2B2FD1D06C703318BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:bc:2a:f0:ab:9a:8a:24:1b:b7:57:b7:41:
                    ce:57:c1:d2:4c:ce:d0:0a:e4:8b:79:1a:7b:ea:4e:
                    4e:83:f2:2a:4e:35:5b:1e:f6:8a:39:c9:31:0a:44:
                    ea:03:b6:51:db:4b:42:85:e8:d8:94:e1:de:1b:70:
                    ee:e7:f7:1a:f8:21:32:06:f7:fa:48:e4:35:9e:70:
                    07:3d:02:d5:bc:eb:3c:7f:45:10:9e:e3:4c:d2:96:
                    36:f2:35:b3:6a:6a:d1:e2:94:20:1b:1b:5a:22:02:
                    1e:da:cf:d8:2a:ff:18:86:0f:b5:b2:d6:fa:2c:c7:
                    cc:94:33:56:fc:1f:a7:6b:9c:43:c8:7c:0c:57:7c:
                    8f:31:47:4e:38:44:5b:5f:42:24:73:03:60:0c:2f:
                    e4:b2:29:df:f5:cf:93:0f:b2:89:52:01:78:13:0e:
                    01:22:91:4e:30:80:5a:7d:74:75:f8:50:94:77:ef:
                    99:7e:d4:f4:d1:a4:ea:18:03:64:14:d8:bf:3d:75:
                    22:02:6c:42:50:3d:31:d6:46:0b:7f:5e:66:04:43:
                    be:ea:dd:6d:5a:8c:49:bb:da:cd:27:50:0a:f3:ed:
                    85:9f:df:48:71:98:68:a5:1f:35:b0:b8:26:c2:2f:
                    d8:19:5e:ba:ef:f1:8f:b1:26:f3:52:95:5a:ea:d6:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:AC:87:53:9F:5A:67:53:0E:3E:2B:2F:D1:D0:6C:70:33:18:BA
            X509v3 Authority Key Identifier:
                keyid:DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/323830363a3432373a3a2f33322d3332203d3e20323732343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:427::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:03:ee:32:c0:48:16:16:53:1e:36:e4:13:cc:6d:ba:ee:
         be:59:9a:13:60:48:4e:98:70:01:9e:70:f9:ce:9b:11:ca:0a:
         dd:98:34:c3:00:24:70:56:1e:e3:30:20:e1:e8:17:11:54:3f:
         99:41:7a:41:9f:90:5b:69:f3:54:0c:51:73:94:ff:33:58:6b:
         d5:f5:5e:a7:2f:b0:d6:06:b7:27:12:c0:bc:c7:fb:61:1d:cb:
         85:b5:44:82:f6:1e:ef:33:cb:f1:53:a5:29:35:4a:2f:94:3b:
         d4:30:1e:70:13:b8:e8:66:00:ae:4e:94:b5:c0:f4:d3:ee:ad:
         d8:cb:a8:d4:3a:ea:7c:bc:99:2d:d9:64:2f:98:95:99:ff:73:
         07:dc:60:1b:72:ef:33:22:ba:c2:97:1c:d2:f3:f4:27:2a:0d:
         97:3d:11:a9:a9:38:5a:a3:41:30:6c:e6:da:6b:cf:6a:87:59:
         e7:ce:17:b8:51:1f:e1:63:e8:4b:42:db:9c:17:32:12:d2:61:
         8c:98:31:38:b7:5b:ef:5e:06:57:f1:03:d0:20:44:d0:c1:b9:
         7c:e9:ac:c6:3f:35:3a:49:53:30:00:ba:4a:01:5d:ce:2a:84:
         96:02:fc:c6:f7:dd:a1:26:16:a4:5d:2c:81:f3:cd:de:97:62:
         4a:5f:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----