Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3238363a3a2f33322d3438203d3e20323635353234.roa
File:                     323830363a3238363a3a2f33322d3438203d3e20323635353234.roa (raw, json)
Hash identifier:          WdGSdja1C3W5cwxzVPCjDbUyBnsvh9nJ1VLEytiDjko=
Subject key identifier:   CB:C2:F2:E2:3D:31:AA:5A:66:1E:FF:35:F6:7C:CD:2A:7F:12:F6:0D
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       1042A4AB135E8D8FED02D79BA42CA2A09FF40119
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3238363a3a2f33322d3438203d3e20323635353234.roa
Signing time:             Wed 06 Mar 2024 06:55:02 +0000
ROA not before:           Wed 06 Mar 2024 06:50:02 +0000
ROA not after:            Wed 05 Mar 2025 06:55:02 +0000
asID:                     265524
IP address blocks:        2806:286::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:42:a4:ab:13:5e:8d:8f:ed:02:d7:9b:a4:2c:a2:a0:9f:f4:01:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar  6 06:50:02 2024 GMT
            Not After : Mar  5 06:55:02 2025 GMT
        Subject: CN=CBC2F2E23D31AA5A661EFF35F67CCD2A7F12F60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:94:e5:d6:65:e2:06:dc:3d:44:1d:9a:bd:
                    3e:26:e6:7d:56:3e:f4:02:f3:c3:f5:67:87:ec:ef:
                    a0:e0:8a:4f:79:d8:d7:45:ae:b9:ca:0f:c5:a5:2f:
                    cd:c9:d4:cb:b2:7b:cc:4a:4a:91:5f:b7:80:cd:c8:
                    78:fa:88:a3:d6:66:5f:68:ba:4b:38:a2:88:14:fc:
                    42:a3:04:83:94:81:2f:69:22:48:c9:18:83:c6:55:
                    e8:ee:a0:27:f4:b3:30:f2:39:e8:d7:a7:3e:4e:b0:
                    82:53:3f:d5:9c:f7:42:3b:02:3f:4e:8f:c3:75:c5:
                    52:cb:01:17:17:5a:49:ae:08:d4:0a:da:61:1c:1a:
                    0c:cd:47:6d:b2:7b:8b:be:ff:0e:4c:90:f3:1b:af:
                    73:80:f4:50:31:36:46:6f:1c:8d:dd:fc:cf:18:47:
                    22:27:81:f2:81:41:8a:c1:98:d3:ac:a5:8a:55:91:
                    d1:64:1a:11:eb:a6:a7:e0:c0:fe:10:59:8c:e8:8c:
                    24:a8:83:dc:75:92:5b:3a:06:db:c0:eb:7c:ba:99:
                    70:db:15:ea:20:91:f3:c2:b4:54:a4:03:87:4c:3b:
                    87:91:07:e5:fd:c4:03:9a:c3:d3:43:46:37:72:10:
                    a8:ab:f0:3b:a4:0a:5b:11:60:28:0f:ea:0b:ae:51:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:F2:E2:3D:31:AA:5A:66:1E:FF:35:F6:7C:CD:2A:7F:12:F6:0D
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3238363a3a2f33322d3438203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:286::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:e4:33:d3:14:82:ef:22:8e:76:d9:94:4d:b4:8a:ef:ec:
         f1:84:e0:85:27:9b:f8:61:26:6d:8b:32:2d:ea:f7:a9:25:2f:
         ce:b0:ed:8f:6e:5c:e2:48:71:5e:c6:44:9f:e0:96:32:7e:ef:
         fe:92:34:d7:1b:dc:91:4c:ef:36:35:97:b2:2e:ca:e8:dd:c1:
         ad:a2:e1:70:6a:5e:84:81:0e:b9:f6:a1:90:17:45:52:76:6e:
         6d:5c:b2:e0:94:88:5a:6f:a6:e3:85:be:67:ec:34:fe:1d:0a:
         02:ee:8a:47:9d:5b:8c:a4:82:4c:46:61:0f:86:da:7f:88:bb:
         72:3f:db:ac:bb:e8:af:b5:8e:4e:dd:b0:e5:1e:be:38:d2:d4:
         24:9f:e2:7b:7b:3e:2a:39:d0:25:86:3e:8b:88:06:4e:3d:0d:
         1b:09:20:71:8f:f1:88:52:11:55:f1:65:09:c1:c9:19:b7:fc:
         88:ac:d3:3f:df:8a:bb:c3:59:79:c5:75:17:b3:f9:ea:e4:83:
         70:b9:74:35:67:67:ab:a6:c1:c2:4f:39:40:63:9b:8a:cb:27:
         92:71:67:26:8b:6c:39:ed:7d:a0:13:52:03:31:14:0b:38:75:
         d1:c3:20:50:f8:f0:e3:67:2b:fd:7e:46:84:c8:86:32:4b:9e:
         35:d1:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----