Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa
File:                     323830363a3336363a3a2f33322d3332203d3e203238343335.roa (raw, json)
Hash identifier:          13ArR/6GJRhaHseL/1auoxvp23K/wjIrXsa3kFFsTIE=
Subject key identifier:   0A:43:2F:1F:A7:70:34:30:F5:60:06:4F:4F:80:12:FC:A5:8D:16:90
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       5BA3555A6BA4BC40885947A03D0274DC3C462720
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa
Signing time:             Tue 05 Mar 2024 18:12:44 +0000
ROA not before:           Tue 05 Mar 2024 18:07:44 +0000
ROA not after:            Tue 04 Mar 2025 18:12:44 +0000
asID:                     28435
IP address blocks:        2806:366::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a3:55:5a:6b:a4:bc:40:88:59:47:a0:3d:02:74:dc:3c:46:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Mar  5 18:07:44 2024 GMT
            Not After : Mar  4 18:12:44 2025 GMT
        Subject: CN=0A432F1FA7703430F560064F4F8012FCA58D1690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:7d:c3:d8:0c:76:c7:b6:b4:7d:2f:71:9b:
                    c9:00:b8:7f:82:29:44:d1:b8:9c:9b:21:1b:d2:0e:
                    97:e5:13:47:bc:6d:22:9f:d0:36:35:bc:a0:41:85:
                    d8:bf:62:ad:ed:b2:89:0f:5e:9a:02:93:a9:9b:66:
                    1d:19:98:d7:46:c1:ab:2a:c5:b9:0b:bc:e0:41:f7:
                    9f:97:56:d6:77:51:66:f1:b5:2b:91:2e:71:75:60:
                    f9:b6:62:cc:fe:e9:f0:93:66:9a:98:4b:84:d1:ad:
                    22:df:f1:18:aa:e5:60:56:0c:8a:c9:04:4f:8e:a5:
                    76:00:5c:95:c5:94:ff:c8:84:11:52:13:5c:aa:ff:
                    ff:cf:ef:ae:cd:da:12:16:5b:c2:44:b9:3f:5a:3b:
                    51:9e:0e:19:b8:e7:5c:65:57:41:57:82:d8:d7:f5:
                    ae:c7:e8:f9:d9:74:d6:06:62:8b:ed:d7:29:03:2e:
                    d6:16:49:6f:5d:d5:0d:9a:b7:22:6d:e0:f2:00:63:
                    37:71:29:a4:70:ae:a2:ec:de:ed:2e:a1:35:de:b0:
                    a5:6a:ea:26:8e:08:78:76:c0:81:ea:3d:62:f1:97:
                    9d:73:80:c0:1e:68:57:66:c2:f9:ca:78:f6:88:44:
                    05:0e:8a:0d:e9:51:f9:aa:93:34:ff:84:49:e8:3a:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:43:2F:1F:A7:70:34:30:F5:60:06:4F:4F:80:12:FC:A5:8D:16:90
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/323830363a3336363a3a2f33322d3332203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:0d:05:b9:7c:27:47:b1:43:71:ab:35:46:cf:4b:2b:d0:
         81:7f:c5:15:11:39:8e:8f:86:51:48:f6:f2:03:4d:f8:3f:3e:
         ca:de:8a:55:ad:ce:4d:f2:4b:bf:41:8f:e7:ff:86:c2:f8:2e:
         bd:81:1a:8d:0f:73:f9:5c:77:e9:e7:c8:93:34:1b:0a:a5:04:
         da:c0:9e:88:f6:c1:2c:f5:ce:5b:60:0b:e9:81:26:5d:bf:54:
         f0:c7:07:c5:67:3b:0b:ad:07:07:32:4c:bf:7a:30:aa:e9:ce:
         cd:74:f7:b1:bc:20:c5:fc:91:65:81:5e:c4:b5:21:1d:a0:c2:
         c2:a6:5a:27:10:5f:78:a5:5e:9c:96:e2:a5:9c:96:af:15:8f:
         a6:06:04:32:b5:c6:51:2e:5e:cd:f3:e7:df:1b:3e:5b:4e:52:
         b0:5a:8b:6d:bc:49:30:4c:b9:db:eb:69:9a:fb:e6:6b:f7:0a:
         e1:18:88:f6:20:fe:f0:06:e8:9d:f2:c1:04:bd:74:76:50:18:
         53:3b:8f:37:77:f1:29:2c:ae:5a:59:02:7f:6d:be:51:3b:b6:
         12:71:93:ea:a2:7f:da:04:92:3b:6d:43:49:48:a9:4a:2f:62:
         7e:a9:da:70:88:b6:59:dd:8b:20:09:4d:1c:e0:1f:66:3a:72:
         73:64:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----