Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa
File:                     323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa (raw, json)
Hash identifier:          2Hvs9LsuoV5mrW22KPaZOP9O/cxTwnyiLTrJrObNuhY=
Subject key identifier:   9A:5E:E7:6C:9B:4A:E4:90:9A:AC:1C:61:40:97:E3:49:D1:2A:93:EE
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       3666A93BFC22C106B2F9A877C27AFF5BEF47EB5D
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:09:51 +0000
ROA not before:           Tue 05 Mar 2024 18:04:51 +0000
ROA not after:            Tue 04 Mar 2025 18:09:51 +0000
asID:                     28458
IP address blocks:        2806:202:800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:66:a9:3b:fc:22:c1:06:b2:f9:a8:77:c2:7a:ff:5b:ef:47:eb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Mar  5 18:04:51 2024 GMT
            Not After : Mar  4 18:09:51 2025 GMT
        Subject: CN=9A5EE76C9B4AE4909AAC1C614097E349D12A93EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:03:e9:9a:aa:aa:73:1d:8e:77:3d:ce:e9:
                    b1:76:d2:69:3c:2d:fa:ba:d3:a3:16:2f:37:36:0f:
                    fd:13:c9:de:9c:cf:a7:ca:bb:0c:ac:f3:b8:7b:17:
                    11:c4:3c:9b:5a:d7:23:de:7b:79:2c:6f:f5:be:a8:
                    15:e5:39:c3:c0:5f:64:45:cd:33:e2:8b:82:df:c1:
                    1d:0b:15:dd:01:fb:74:12:27:83:3c:83:a0:34:51:
                    f3:51:4e:64:6d:b9:eb:7a:6d:d4:9f:1c:87:20:27:
                    83:10:70:41:a2:50:9c:cd:79:b2:44:8b:f7:9f:20:
                    a7:ec:eb:d9:0f:f1:a6:a7:a2:ed:e2:0a:fc:f2:49:
                    52:e0:a6:9e:41:b3:5d:e8:d0:7b:5b:e3:77:05:96:
                    e5:52:3c:0c:60:a6:10:c8:19:91:0a:7d:13:0f:cb:
                    fe:b0:57:a9:46:47:f6:42:9a:db:59:ad:b8:c0:5f:
                    d7:3b:cb:e9:e3:81:44:59:69:de:14:b2:53:11:9b:
                    56:11:79:b5:d5:0d:08:27:e7:8b:8e:0e:6d:aa:22:
                    5f:52:42:00:d0:42:05:b1:2d:9b:52:fa:eb:cc:31:
                    1f:81:d7:44:aa:f1:a4:78:9a:ed:de:e4:87:c6:53:
                    33:07:b5:cd:72:7f:14:fd:2d:ae:54:27:05:5f:d8:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:E7:6C:9B:4A:E4:90:9A:AC:1C:61:40:97:E3:49:D1:2A:93:EE
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:39:08:0f:bd:17:7c:da:00:43:67:32:fc:58:55:95:29:
         1c:0c:84:8e:cb:14:35:c6:33:fc:07:68:23:c8:26:5c:20:ce:
         03:e6:bd:91:41:e4:e3:ee:a1:04:12:3c:51:75:c7:11:26:7f:
         8e:c0:45:00:dc:72:7d:6a:dd:e0:84:fb:2a:c6:4e:b8:73:61:
         6e:ee:a4:35:2e:45:1a:d2:fd:67:5c:d3:f0:5e:61:52:e9:c5:
         20:53:4c:c7:e3:94:d1:1c:9d:d7:a5:ec:70:4a:c7:b6:88:1f:
         55:f9:98:89:cc:f5:2e:8c:c8:28:00:57:f5:ed:1a:49:9a:f0:
         30:92:f1:e4:ed:b0:ca:5a:59:33:f7:b2:5b:c5:68:7d:72:eb:
         13:50:02:5a:43:92:d1:ec:ff:f3:e5:39:8c:42:a2:bc:2d:1a:
         8c:43:e2:5f:ec:ca:94:fb:f1:08:94:c3:4d:02:b7:71:24:b0:
         fd:0c:4b:3c:9d:82:fd:91:28:43:41:d5:20:53:60:fb:fe:1a:
         43:19:c6:99:f3:46:f2:61:9a:a0:a7:93:89:33:20:95:3f:31:
         bb:c0:ac:20:41:04:15:5e:71:71:58:38:8d:c8:17:bb:8e:77:
         f7:b0:9c:72:40:24:e4:16:d6:17:4c:0d:0b:ba:d2:f2:d1:5d:
         ea:21:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----