Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa
File:                     323830363a3265363a3a2f33322d3334203d3e20323635353334.roa (raw, json)
Hash identifier:          Um4NxMVusywzlidAFVIvFnh9vgckRUvZuDG/6T1LvRA=
Subject key identifier:   0D:15:A0:85:CC:DA:E9:B3:13:8A:A6:60:FB:BB:E0:0D:06:AC:3F:BD
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       6B87A7E7DD068EBD88E8B69DB055C34F9248C9BC
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa
Signing time:             Tue 05 Mar 2024 17:42:30 +0000
ROA not before:           Tue 05 Mar 2024 17:37:30 +0000
ROA not after:            Tue 04 Mar 2025 17:42:30 +0000
asID:                     265534
IP address blocks:        2806:2e6::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:87:a7:e7:dd:06:8e:bd:88:e8:b6:9d:b0:55:c3:4f:92:48:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Mar  5 17:37:30 2024 GMT
            Not After : Mar  4 17:42:30 2025 GMT
        Subject: CN=0D15A085CCDAE9B3138AA660FBBBE00D06AC3FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:e8:4c:61:15:2b:e1:b8:9a:98:34:a3:e4:
                    7c:b9:3f:e5:a7:86:19:bc:7f:2b:89:47:cd:1b:19:
                    0e:7a:07:b9:63:a1:a7:d3:7d:98:5e:3f:41:f5:84:
                    a3:2c:d7:3b:5d:bf:08:ed:0b:da:11:8b:8d:c0:2a:
                    25:64:92:fa:31:44:f1:12:f1:3f:73:ed:9d:15:2a:
                    77:3d:80:06:56:ed:85:10:88:be:ac:56:a8:e5:ca:
                    30:02:58:e0:64:14:d9:79:79:fa:82:0a:f8:e5:13:
                    1f:8d:d2:53:70:50:3d:bc:c0:04:18:a5:d4:96:17:
                    2e:ea:dd:64:e3:81:45:e2:d6:51:47:02:9a:63:73:
                    fd:83:53:64:f1:a1:aa:5d:8e:f5:5d:69:25:13:f4:
                    e9:28:de:e6:a1:c1:a6:a8:ed:f2:40:33:be:e6:ee:
                    82:16:1c:a2:26:18:c9:de:ec:88:dd:08:b3:47:10:
                    07:25:41:49:c7:85:d9:f0:ae:79:07:c9:df:47:e6:
                    c2:d2:d5:c6:21:bf:d1:57:4d:2d:48:14:24:b2:53:
                    a4:ae:a5:e4:d1:72:88:d1:85:88:a1:ed:59:31:cd:
                    59:bf:16:f2:01:44:d0:a5:02:f7:74:d3:31:0d:86:
                    d8:df:0d:85:21:76:be:37:75:d6:30:6c:56:39:1b:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:A0:85:CC:DA:E9:B3:13:8A:A6:60:FB:BB:E0:0D:06:AC:3F:BD
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:bf:4a:27:c1:46:b4:f7:1c:06:0f:9c:73:69:f2:50:4e:
         2c:7b:c3:70:05:8b:a2:21:d7:87:34:3b:69:54:86:42:0f:e2:
         43:a1:4a:c6:88:f3:dc:d4:ce:c8:d5:b4:f0:2a:7f:c4:db:a7:
         6f:ef:40:98:38:d6:d9:c7:46:49:19:bc:ab:44:1c:1b:35:25:
         59:de:bf:1d:84:9a:07:11:de:1a:57:5b:24:bb:91:05:9b:85:
         ae:95:ce:22:27:06:52:83:5b:16:4b:20:83:05:6d:cd:6e:62:
         55:a4:5e:1e:e8:3c:29:ea:90:8e:4b:a7:81:a9:e8:7d:ae:17:
         ba:d8:f1:83:56:6c:d9:02:50:2c:9d:87:dd:4f:f2:90:15:06:
         7e:80:46:26:05:1c:5d:62:c7:a8:c6:46:7c:29:84:55:9a:68:
         01:5d:4f:42:4f:cb:e9:73:06:59:d4:54:86:ce:4b:8f:10:89:
         4f:60:10:bb:3a:c5:87:29:12:08:f7:f9:5f:17:af:2a:87:a9:
         cc:86:87:bd:7e:55:5c:f4:7c:77:04:d7:c3:9c:0f:5f:c1:78:
         c8:c6:cf:a8:2f:4b:7a:b9:9b:45:6d:77:89:5d:ea:ae:53:9c:
         cc:a9:c0:71:55:95:07:8e:2b:4c:73:c5:29:ef:27:37:f7:eb:
         4c:ca:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----