Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa
File:                     323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa (raw, json)
Hash identifier:          s9HOBKYdzShHDO3gyYyQndDNqyKXyVddyLDS/GgUYlc=
Subject key identifier:   F8:F2:5F:0F:93:3E:74:A2:DA:AA:13:49:D6:49:7A:82:93:8D:60:ED
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       68BC2827E6430A73D79DE8B939960C5117CB2162
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:09:51 +0000
ROA not before:           Tue 05 Mar 2024 18:04:51 +0000
ROA not after:            Tue 04 Mar 2025 18:09:51 +0000
asID:                     28458
IP address blocks:        2806:202:2::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bc:28:27:e6:43:0a:73:d7:9d:e8:b9:39:96:0c:51:17:cb:21:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Mar  5 18:04:51 2024 GMT
            Not After : Mar  4 18:09:51 2025 GMT
        Subject: CN=F8F25F0F933E74A2DAAA1349D6497A82938D60ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:c8:a7:32:e4:5f:71:5a:9c:01:64:c4:36:
                    81:da:76:ec:14:bf:46:c5:72:c9:43:37:da:3c:8f:
                    53:49:91:35:f6:fd:44:81:f3:e3:f5:e9:12:c1:f6:
                    7e:82:5d:ab:38:82:54:1f:fb:b0:38:f2:42:79:84:
                    0c:b2:52:7a:0d:83:ca:aa:88:6e:32:24:f1:82:01:
                    70:9d:ff:35:99:d2:54:72:a2:8b:39:39:13:99:81:
                    cd:54:bb:bb:5b:8b:01:11:7c:a8:1a:12:77:c1:9a:
                    70:c3:b6:0a:02:9a:df:b4:ff:c0:bc:20:97:95:5f:
                    e5:ca:0d:20:96:23:32:0c:10:dd:44:a5:45:6d:ed:
                    21:5e:ce:4d:e2:61:59:e5:86:01:37:4f:bf:e3:50:
                    7a:f3:b0:43:43:78:e5:31:5b:1f:62:ff:f8:6f:5a:
                    38:db:05:c2:3d:82:85:75:bf:e6:a1:86:69:f1:db:
                    87:ae:e1:12:26:1d:41:b0:c5:3e:5c:fa:41:de:e0:
                    97:35:4e:a6:d9:af:e0:78:ee:6d:f7:fc:65:39:44:
                    a8:ca:f3:69:85:d0:a9:3a:e4:f3:ea:77:4d:2d:8d:
                    2b:8b:4f:74:5b:6a:ef:1c:c8:fc:ed:1d:a3:1f:18:
                    a6:5d:ce:41:71:cb:21:eb:e6:26:80:9b:1f:78:7e:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:5F:0F:93:3E:74:A2:DA:AA:13:49:D6:49:7A:82:93:8D:60:ED
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a323a3a2f34372d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:9d:08:31:0d:b9:b4:84:7b:c2:91:c4:b3:6e:2d:92:6a:
         3d:cf:9d:73:7e:af:3a:e6:85:d2:1b:35:a7:f1:cc:be:16:95:
         cd:3c:e6:2a:29:d1:1e:4d:b2:a7:53:19:f3:59:ac:69:3e:db:
         c9:35:22:7d:ac:60:6d:70:8c:7b:29:bb:15:6a:6b:46:c9:01:
         ed:24:c1:b2:8d:cf:75:e5:ba:e5:5f:94:5c:4b:95:fa:06:d6:
         1c:a8:b7:7a:0a:88:20:72:d1:fa:23:38:7d:92:1d:de:8b:f3:
         21:af:c2:d8:cc:32:45:97:ca:fe:84:e7:a2:27:46:d4:15:51:
         0d:1b:79:8f:73:d6:53:ba:be:e4:6f:d4:1d:25:75:f0:74:1c:
         1d:7b:c5:28:d6:ad:21:b1:02:61:24:db:25:31:4c:07:c1:36:
         cb:27:78:c3:74:2e:79:ec:32:e7:d3:e0:fe:33:65:51:16:96:
         c2:1d:f1:aa:9c:06:ce:39:2c:9e:ff:09:d2:7a:26:63:a2:65:
         c7:cc:c7:30:36:74:fc:54:0f:04:84:45:0b:7b:4c:8d:d8:dc:
         a3:24:08:b3:74:b5:e6:c5:e6:61:6d:d0:9d:a2:78:61:25:f4:
         16:e7:03:1f:87:ba:8e:6a:74:bb:06:d5:9d:4b:2d:33:8d:36:
         78:d9:7d:c7
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUaLwoJ+ZDCnPXnei5OZYMURfLIWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJGMjNFNEFGQUFERTM3NDI1QjYxOTgyNkM4RTAwRTA3
RUUyNkJFRjAeFw0yNDAzMDUxODA0NTFaFw0yNTAzMDQxODA5NTFaMDMxMTAvBgNV
BAMTKEY4RjI1RjBGOTMzRTc0QTJEQUFBMTM0OUQ2NDk3QTgyOTM4RDYwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0MinMuRfcVqcAWTENoHaduwU
v0bFcslDN9o8j1NJkTX2/USB8+P16RLB9n6CXas4glQf+7A48kJ5hAyyUnoNg8qq
iG4yJPGCAXCd/zWZ0lRyoos5OROZgc1Uu7tbiwERfKgaEnfBmnDDtgoCmt+0/8C8
IJeVX+XKDSCWIzIMEN1EpUVt7SFezk3iYVnlhgE3T7/jUHrzsENDeOUxWx9i//hv
WjjbBcI9goV1v+ahhmnx24eu4RImHUGwxT5c+kHe4Jc1TqbZr+B47m33/GU5RKjK
82mF0Kk65PPqd00tjSuLT3Rbau8cyPztHaMfGKZdzkFxyyHr5iaAmx94fqHJAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQU+PJfD5M+dKLaqhNJ1kl6gpONYO0wHwYDVR0j
BBgwFoAUq/I+Svqt43QlthmCbI4A4H7ia+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QjUzQzc5NTBCQkU2NTZFRjdGMkVDODY1QUEwNENGOTFE
QzZBODNBOERBQjFBRjJEQUY0NTdGQjFGMERCNTYyLzAvQUJGMjNFNEFGQUFERTM3
NDI1QjYxOTgyNkM4RTAwRTA3RUUyNkJFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQkYyM0U0QUZBQURFMzc0MjVC
NjE5ODI2QzhFMDBFMDdFRTI2QkVGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUI1M0M3OTUwQkJFNjU2RUY3RjJFQzg2NUFBMDRDRjkxREM2QTgzQThE
QUIxQUYyREFGNDU3RkIxRjBEQjU2Mi8wLzMyMzgzMDM2M2EzMjMwMzIzYTMyM2Ez
YTJmMzQzNzJkMzQzODIwM2QzZTIwMzIzODM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASgGAgIA
AjANBgkqhkiG9w0BAQsFAAOCAQEAL8OdCDENubSEe8KRxLNuLZJqPc+dc36vOuaF
0hs1p/HMvhaVzTzmKinRHk2yp1MZ81msaT7byTUifaxgbXCMeym7FWprRskB7STB
so3PdeW65V+UXEuV+gbWHKi3egqIIHLR+iM4fZId3ovzIa/C2MwyRZfK/oTnoidG
1BVRDRt5j3PWU7q+5G/UHSV18HQcHXvFKNatIbECYSTbJTFMB8E2yyd4w3Queewy
59Pg/jNlURaWwh3xqpwGzjksnv8J0nomY6Jlx8zHMDZ0/FQPBIRFC3tMjdjcoyQI
s3S15sXmYW3QnaJ4YSX0FucDH4e6jmp0uwbVnUstM402eNl9xw==
-----END CERTIFICATE-----