Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3265623a3a2f33322d3438203d3e20323635353234.roa
File:                     323830363a3265623a3a2f33322d3438203d3e20323635353234.roa (raw, json)
Hash identifier:          Xfqyz8GRMWbsH32foP4rHqjVVG8QO0TjJ7xWT3ceO5E=
Subject key identifier:   8B:99:47:1A:1F:98:47:0A:99:CF:49:ED:68:58:AA:C1:42:87:CB:16
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       1538F31D11ED7CE3C25B09810C6D6738C3D3D385
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3265623a3a2f33322d3438203d3e20323635353234.roa
Signing time:             Wed 06 Mar 2024 06:55:01 +0000
ROA not before:           Wed 06 Mar 2024 06:50:01 +0000
ROA not after:            Wed 05 Mar 2025 06:55:01 +0000
asID:                     265524
IP address blocks:        2806:2eb::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:f3:1d:11:ed:7c:e3:c2:5b:09:81:0c:6d:67:38:c3:d3:d3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar  6 06:50:01 2024 GMT
            Not After : Mar  5 06:55:01 2025 GMT
        Subject: CN=8B99471A1F98470A99CF49ED6858AAC14287CB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:53:5b:1d:20:4f:be:07:ea:da:f6:a3:e1:
                    f5:6e:9a:ec:50:a4:c4:10:61:f8:8d:a9:c4:16:48:
                    33:20:a1:53:26:be:e5:7d:88:59:11:b2:e8:c0:58:
                    92:25:d3:ac:b6:81:16:d8:ff:b5:39:b7:6e:45:a9:
                    17:6c:34:1c:96:b4:1e:96:fb:b1:5b:3b:3c:a6:8d:
                    0d:ea:e9:ab:a1:dd:ed:3d:8c:79:b3:56:51:37:e0:
                    3c:b0:c9:b0:9f:c5:cb:2e:fc:18:67:e4:ba:27:ce:
                    06:a1:09:43:93:a7:8c:8b:d1:96:bc:ff:8e:9c:b7:
                    a8:82:10:ee:4e:1a:f6:85:18:37:f3:8d:da:24:fd:
                    79:33:5d:c4:50:58:c9:f1:77:4a:fb:e9:3b:5a:70:
                    d4:4f:36:41:95:97:7f:84:b2:55:75:5b:32:84:4d:
                    cd:50:f7:ce:f5:35:ad:80:e0:55:79:b5:b6:8a:f1:
                    9a:14:91:d2:1c:75:66:90:03:0a:38:94:65:7a:d4:
                    35:db:f7:a4:f9:66:96:39:f1:ee:16:74:41:70:93:
                    38:fc:1d:f8:6d:03:de:8b:08:0b:64:df:e4:be:40:
                    95:1a:b2:b3:13:3b:7e:60:14:fc:eb:35:2f:61:4d:
                    b7:bb:a5:88:fd:82:8f:90:2b:b8:ee:38:d3:e0:d0:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:47:1A:1F:98:47:0A:99:CF:49:ED:68:58:AA:C1:42:87:CB:16
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/323830363a3265623a3a2f33322d3438203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2eb::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:e0:6b:54:cd:2f:5d:18:06:a9:ec:80:c1:cd:56:75:9c:
         38:ba:fa:26:c9:14:22:df:19:a4:6c:35:ec:2f:af:4d:2a:0d:
         03:8a:9f:8f:ec:59:6c:3c:32:bd:8e:6c:58:1a:b2:a7:cd:d7:
         4f:ab:f1:0f:7d:22:67:ec:d4:d4:fc:e9:d5:0f:b5:49:f6:3e:
         2c:f5:10:ac:83:df:52:7d:87:4e:15:d2:13:03:b3:38:73:6b:
         7f:da:48:b0:d6:f8:cd:22:01:9c:db:5c:ca:0f:c7:81:28:9e:
         88:62:0f:80:a0:be:fd:e5:cd:d4:e4:a6:24:54:4c:e2:35:d5:
         e3:e8:19:3e:a8:c6:60:f0:88:be:11:4e:5d:d3:2b:63:ab:5b:
         ce:17:f2:f1:f5:f1:21:4b:61:e2:78:9a:22:2c:b0:33:7f:31:
         bc:cc:08:aa:97:e2:af:ae:51:5c:27:b3:54:bc:ec:c0:96:cd:
         10:8c:cc:c7:39:03:52:45:22:59:89:ea:e1:ce:17:20:a4:ac:
         69:79:53:bd:4d:58:ee:ea:5f:45:66:ac:76:71:5b:03:73:8f:
         b8:2f:de:61:c0:01:15:50:40:51:43:a7:87:93:9f:8d:54:4d:
         d9:66:f9:a7:26:8b:a0:26:af:65:83:ea:84:f8:1c:5b:21:af:
         ef:ed:80:eb
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFTjzHRHtfOPCWwmBDG1nOMPT04UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwMUEwOTZDNTlEQzNBMjdFNTE0QzgxNjNBNTIxNUI4
RjcyNjI5QTAeFw0yNDAzMDYwNjUwMDFaFw0yNTAzMDUwNjU1MDFaMDMxMTAvBgNV
BAMTKDhCOTk0NzFBMUY5ODQ3MEE5OUNGNDlFRDY4NThBQUMxNDI4N0NCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+lNbHSBPvgfq2vaj4fVumuxQ
pMQQYfiNqcQWSDMgoVMmvuV9iFkRsujAWJIl06y2gRbY/7U5t25FqRdsNByWtB6W
+7FbOzymjQ3q6auh3e09jHmzVlE34DywybCfxcsu/Bhn5LonzgahCUOTp4yL0Za8
/46ct6iCEO5OGvaFGDfzjdok/XkzXcRQWMnxd0r76TtacNRPNkGVl3+EslV1WzKE
Tc1Q9871Na2A4FV5tbaK8ZoUkdIcdWaQAwo4lGV61DXb96T5ZpY58e4WdEFwkzj8
HfhtA96LCAtk3+S+QJUasrMTO35gFPzrNS9hTbe7pYj9go+QK7juONPg0INJAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUi5lHGh+YRwqZz0ntaFiqwUKHyxYwHwYDVR0j
BBgwFoAUKQGglsWdw6J+UUyBY6UhW49yYpowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzMxRDE2MDhERjg0NDYxRDhENjg5MkJGODI0RjQ3MzEx
Q0REM0JEMEM4QkQ4OUE0REZFOEQ2NkI5QzFGOEE0LzAvMjkwMUEwOTZDNTlEQzNB
MjdFNTE0QzgxNjNBNTIxNUI4RjcyNjI5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTAxQTA5NkM1OURDM0EyN0U1
MTRDODE2M0E1MjE1QjhGNzI2MjlBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzczMUQxNjA4REY4NDQ2MUQ4RDY4OTJCRjgyNEY0NzMxMUNERDNCRDBD
OEJEODlBNERGRThENjZCOUMxRjhBNC8wLzMyMzgzMDM2M2EzMjY1NjIzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzUzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgLrMA0G
CSqGSIb3DQEBCwUAA4IBAQAk9uBrVM0vXRgGqeyAwc1WdZw4uvomyRQi3xmkbDXs
L69NKg0Dip+P7FlsPDK9jmxYGrKnzddPq/EPfSJn7NTU/OnVD7VJ9j4s9RCsg99S
fYdOFdITA7M4c2t/2kiw1vjNIgGc21zKD8eBKJ6IYg+AoL795c3U5KYkVEziNdXj
6Bk+qMZg8Ii+EU5d0ytjq1vOF/Lx9fEhS2HieJoiLLAzfzG8zAiql+KvrlFcJ7NU
vOzAls0QjMzHOQNSRSJZierhzhcgpKxpeVO9TVju6l9FZqx2cVsDc4+4L95hwAEV
UEBRQ6eHk5+NVE3ZZvmnJougJq9lg+qE+BxbIa/v7YDr
-----END CERTIFICATE-----