Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
File:                     323830363a3230323a3a2f33322d3438203d3e203238343538.roa (raw, json)
Hash identifier:          99szFwqR7/r8rlUhEhCbmtKGZv+tRKK9HlItF4AyRA4=
Subject key identifier:   3A:E1:D4:77:E7:98:06:06:D7:9E:40:5A:31:35:8D:27:C4:23:92:B6
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       59D00F5E5DE0DD9AA13BCECBFE78562E568BEA2A
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:09:50 +0000
ROA not before:           Tue 05 Mar 2024 18:04:50 +0000
ROA not after:            Tue 04 Mar 2025 18:09:50 +0000
asID:                     28458
IP address blocks:        2806:202::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d0:0f:5e:5d:e0:dd:9a:a1:3b:ce:cb:fe:78:56:2e:56:8b:ea:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Mar  5 18:04:50 2024 GMT
            Not After : Mar  4 18:09:50 2025 GMT
        Subject: CN=3AE1D477E7980606D79E405A31358D27C42392B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:c1:8c:d9:aa:5f:83:c5:d7:86:52:cc:6c:
                    c7:d4:ae:b9:76:82:f2:a5:40:56:0b:17:90:22:9e:
                    a3:de:25:e9:c3:98:90:15:4e:a5:26:7d:aa:7f:2a:
                    86:05:77:eb:93:52:0e:bd:a9:5f:53:54:16:6c:78:
                    7a:19:e1:a2:15:54:6b:b2:99:15:61:1d:06:7f:c0:
                    8d:12:0c:e6:86:27:88:c1:01:5a:b4:9c:6c:09:b2:
                    64:b0:66:ad:bd:51:60:12:ab:12:96:32:fe:cc:ff:
                    89:ae:f7:3f:73:59:87:fd:dc:e5:b6:15:f7:01:d5:
                    25:70:c5:ae:d4:21:b3:91:45:59:85:07:8a:75:40:
                    f7:e1:16:54:69:8e:00:bc:b8:ef:eb:56:43:ec:97:
                    fb:c9:fe:94:f3:dc:19:65:57:56:7c:a3:0d:d3:1a:
                    76:bb:e4:c8:ef:2d:18:2c:96:e3:ad:c1:4c:6b:b4:
                    68:b8:42:2d:1d:04:e6:bc:ce:96:dc:7d:9f:89:7c:
                    67:9e:c4:79:d0:ba:de:b0:c3:7a:c6:71:ff:2b:e0:
                    dd:b4:5c:89:45:d7:3f:db:ab:71:7f:35:0f:0d:05:
                    fe:30:40:06:34:75:73:f3:64:f6:92:15:79:fc:98:
                    0b:6f:1e:e7:2b:d7:6c:95:16:f1:9d:fe:86:d8:62:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:D4:77:E7:98:06:06:D7:9E:40:5A:31:35:8D:27:C4:23:92:B6
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b7:ad:70:2a:d4:4f:7d:2a:87:87:cd:38:b2:97:2b:7b:e1:
         2d:d4:97:7a:1b:48:51:ab:a9:bd:31:da:bf:f9:0f:a1:99:48:
         ce:3a:ec:cd:6e:d5:44:f6:a0:92:d4:e9:34:86:26:94:4d:01:
         23:5f:9b:5b:c3:b1:64:1a:56:37:05:a7:ca:56:33:b8:80:5f:
         21:e5:ab:5b:27:d6:99:19:85:4d:91:26:5c:6e:45:46:67:e5:
         75:88:42:82:ce:0d:1b:3d:06:05:bd:39:5d:33:bc:a8:ec:35:
         47:6e:4a:1b:37:34:58:82:18:d0:fd:c2:5a:71:96:85:4b:4f:
         a2:31:09:40:eb:d0:20:63:d0:59:9b:8d:72:ca:e1:0c:37:ed:
         bc:14:26:78:2f:16:84:f7:39:a9:30:72:55:47:55:f6:86:b7:
         13:9e:75:33:0c:39:78:8e:45:98:cb:d8:82:d4:eb:bf:8d:4a:
         91:75:b9:69:10:80:a3:b4:91:b0:74:92:55:80:5d:34:1b:34:
         d4:54:d4:dc:eb:11:58:f0:46:ff:e6:25:12:c3:57:0f:8d:74:
         e8:b2:81:bf:ee:96:e8:ac:1d:eb:42:99:f6:e5:ce:db:f0:c6:
         f0:4c:08:f7:be:de:5c:d9:d0:73:31:9e:ed:41:c8:f4:a3:bb:
         6f:bd:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----