Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa
File:                     323830363a3334333a3a2f33322d3438203d3e20323635353932.roa (raw, json)
Hash identifier:          7G2emWEQWCJ/jQik33X/8zfHv3OfABZaRhE7fKMU9TQ=
Subject key identifier:   8E:50:65:B9:82:C5:C0:32:64:4D:AD:13:E8:CB:FF:D5:C8:09:28:6D
Certificate issuer:       /CN=206CAFF7CB6060056D90A0062ACF9A4217F9EB8B
Certificate serial:       0D1757B099F3EB60C098F6B2258688B1F9C04235
Authority key identifier: 20:6C:AF:F7:CB:60:60:05:6D:90:A0:06:2A:CF:9A:42:17:F9:EB:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa
Signing time:             Tue 05 Mar 2024 17:59:42 +0000
ROA not before:           Tue 05 Mar 2024 17:54:42 +0000
ROA not after:            Tue 04 Mar 2025 17:59:42 +0000
asID:                     265592
IP address blocks:        2806:343::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:17:57:b0:99:f3:eb:60:c0:98:f6:b2:25:86:88:b1:f9:c0:42:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206CAFF7CB6060056D90A0062ACF9A4217F9EB8B
        Validity
            Not Before: Mar  5 17:54:42 2024 GMT
            Not After : Mar  4 17:59:42 2025 GMT
        Subject: CN=8E5065B982C5C032644DAD13E8CBFFD5C809286D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:a4:3b:2c:c5:e9:ad:b2:10:c6:60:97:f4:
                    9e:30:78:f8:fa:6e:7a:67:9c:48:3c:ce:a7:09:dc:
                    64:e0:35:f3:05:e2:7c:d8:7f:bd:1a:c7:c2:b9:eb:
                    a9:37:55:33:2a:3a:9a:dd:a9:81:58:68:55:e8:0a:
                    e5:7d:14:95:db:7f:7a:a2:d5:35:f5:8c:96:56:33:
                    05:d6:cd:87:ed:cf:9a:89:50:70:6b:c4:94:c7:89:
                    aa:07:45:06:8b:eb:08:42:a2:b1:ee:a6:8e:d0:76:
                    f7:f5:59:ca:8b:cc:f2:6f:7f:e6:3f:0b:c7:57:fc:
                    a4:3b:e8:7c:54:f9:13:7e:fb:c5:7b:0e:c9:b8:6a:
                    d3:d6:20:55:c9:2f:c3:20:b1:b6:b3:b5:23:6f:7b:
                    23:a9:03:9a:ba:6f:65:53:24:46:42:f8:25:b9:26:
                    47:a2:c7:25:82:1a:ac:09:ca:e4:75:4c:ef:16:19:
                    d4:66:f9:48:5f:2c:dc:58:e6:10:cb:73:77:31:43:
                    18:46:f1:79:25:13:30:03:47:80:1d:df:66:cc:dc:
                    70:4c:b9:ff:e9:64:c4:81:b4:86:e0:fa:4c:09:17:
                    9a:92:ed:f7:bd:cb:64:4b:d0:25:a1:e6:b7:3c:0f:
                    3c:93:d1:3b:a0:00:1b:26:34:ec:61:7e:0f:e6:01:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:50:65:B9:82:C5:C0:32:64:4D:AD:13:E8:CB:FF:D5:C8:09:28:6D
            X509v3 Authority Key Identifier:
                keyid:20:6C:AF:F7:CB:60:60:05:6D:90:A0:06:2A:CF:9A:42:17:F9:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/206CAFF7CB6060056D90A0062ACF9A4217F9EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A46F1D590F4A5D4652CBBDFE339436E8DD7D18ABC15559FD6A6FEDF794444775/0/323830363a3334333a3a2f33322d3438203d3e20323635353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:343::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:a8:67:76:f5:b0:f6:65:29:50:e8:29:f0:de:b2:b9:23:
         7f:53:67:4c:d0:d0:68:10:01:27:fa:a6:ba:ec:d2:08:b3:c0:
         66:71:85:95:b1:18:b9:ca:70:31:87:04:88:c4:f5:f5:0f:0f:
         ad:bb:2f:04:84:49:a4:c1:41:74:f2:e1:60:5b:1b:40:61:c9:
         62:3f:8a:92:7f:b4:4d:bb:23:7b:f6:b3:4d:05:55:5e:79:5f:
         18:41:b6:07:c2:76:cf:50:00:bc:53:d0:35:31:75:cd:ce:b3:
         e2:a6:fa:5c:14:55:2f:d3:8c:77:75:af:4a:71:77:f4:41:2a:
         3c:1b:8c:09:a5:24:a3:7b:c3:66:2a:74:a9:0c:c0:be:4b:93:
         b4:2d:64:eb:b0:b9:c1:fe:3d:51:3c:48:e5:c9:41:5b:5e:9f:
         c7:b6:f4:19:65:60:20:d2:d0:5c:c0:fa:60:64:60:21:fa:fc:
         49:7e:7d:99:65:79:68:09:91:2a:c0:60:2c:9f:76:ea:48:c0:
         20:c6:93:fc:66:93:c6:dc:c5:82:fa:e3:3c:62:9d:9a:5d:7c:
         86:47:cd:49:85:7a:56:32:98:24:5b:db:23:a8:b0:a7:76:b4:
         49:d5:03:ff:cd:e7:47:c3:3c:b9:fb:a3:88:a7:a5:5c:20:3f:
         f1:07:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----