Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa
File:                     323830363a3331313a3a2f33322d3332203d3e20323635353334.roa (raw, json)
Hash identifier:          LLZaqj4Zhr27ya2ygUVv1pmuSZnIewcCtvK5BL1ZGPs=
Subject key identifier:   3E:17:D6:7C:9C:0A:58:67:01:43:39:35:6F:9A:BB:84:36:08:D2:40
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       658FE3C25BD5BB8BFC1FC070EA62346442D54F61
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa
Signing time:             Tue 05 Mar 2024 18:01:22 +0000
ROA not before:           Tue 05 Mar 2024 17:56:22 +0000
ROA not after:            Tue 04 Mar 2025 18:01:22 +0000
asID:                     265534
IP address blocks:        2806:311::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8f:e3:c2:5b:d5:bb:8b:fc:1f:c0:70:ea:62:34:64:42:d5:4f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Mar  5 17:56:22 2024 GMT
            Not After : Mar  4 18:01:22 2025 GMT
        Subject: CN=3E17D67C9C0A5867014339356F9ABB843608D240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:21:bd:f7:9d:36:2a:55:44:73:b4:91:56:
                    50:e5:41:c4:1d:3b:3b:2f:f8:0a:79:db:bf:1c:33:
                    cb:2a:16:50:53:be:48:d0:f2:8b:9c:4f:65:53:ea:
                    05:4b:a7:ff:f3:8a:07:04:f4:c5:35:da:98:4f:52:
                    38:0a:d4:8e:28:2e:5d:3f:7a:34:8d:a3:4b:66:14:
                    af:d6:fe:d7:a1:9f:53:37:4a:53:0a:2e:7e:ec:cd:
                    9a:48:35:19:f6:a1:26:7e:a7:28:07:e1:d1:00:44:
                    57:f0:23:b4:0a:2b:5e:b9:0e:75:bd:a3:fb:34:1e:
                    fe:21:ab:f5:32:08:ac:e0:82:f9:f9:36:38:b6:ae:
                    28:b4:6f:2a:5c:47:77:43:82:d7:da:a2:db:8f:4f:
                    68:03:2d:bd:71:75:83:cd:49:61:e0:d5:bb:d0:e0:
                    07:f9:c1:51:3b:32:bb:f5:bb:f0:fc:7a:74:54:ee:
                    c7:0b:2b:98:52:c5:d3:6d:c4:a6:ba:70:fb:0a:b1:
                    4f:69:d8:c6:c6:3b:55:b2:59:71:3f:cf:45:79:f0:
                    0e:f3:16:b2:74:7a:c1:d7:e8:be:52:e3:f8:3a:a1:
                    de:a7:be:30:c7:b9:c7:c4:69:e3:3c:54:e9:51:b1:
                    47:05:b2:18:cf:83:cb:9d:74:3b:11:7d:88:b9:c4:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:17:D6:7C:9C:0A:58:67:01:43:39:35:6F:9A:BB:84:36:08:D2:40
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/323830363a3331313a3a2f33322d3332203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:9c:0a:29:70:fe:74:6d:c1:b9:8a:a7:58:1c:64:f2:7a:
         bc:fd:9f:15:54:2c:f4:72:ab:e0:7a:4e:ea:3b:a9:f4:5e:e2:
         41:9a:48:eb:a0:ce:36:f9:83:1a:f5:3d:d2:80:95:4e:68:18:
         1b:06:98:15:b2:64:ca:cd:b3:8e:47:ab:e8:89:c4:03:f7:bc:
         37:14:82:df:6d:c9:1a:7e:1e:cf:cc:15:ec:ba:c7:0a:6f:27:
         95:ac:f7:a0:c6:c8:69:e8:7e:03:e3:c9:0f:b0:2d:0d:96:c2:
         9c:a5:0e:40:50:9c:e3:eb:d8:79:cd:5b:04:b1:22:40:65:fb:
         fa:f5:13:fe:3c:44:2e:b1:26:c7:a0:ad:55:4b:a3:7e:e1:30:
         04:8e:61:15:46:0a:10:b6:a0:c3:4d:b4:50:80:06:4f:cb:45:
         f3:78:78:5a:38:b8:f7:ae:d2:3d:3f:39:77:90:09:3f:98:16:
         c8:40:68:89:76:88:da:f3:27:38:f3:f9:a8:c5:c9:33:15:e9:
         fa:5f:75:59:91:30:b7:fd:75:5b:2c:b0:0d:73:8b:82:f0:53:
         ea:7e:ae:6f:39:2f:ac:23:e2:4b:ba:69:f2:d4:d4:d3:63:07:
         6b:c4:98:ce:4f:7b:8e:d7:6a:3d:b4:86:15:85:de:99:f3:ed:
         35:ea:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----