Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa
File:                     323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier:          ErzBB1WGP+/VEUed9+d1CnDUWT8jZCVqEIyF1Puw0Vs=
Subject key identifier:   F3:7E:FF:72:C2:B9:BD:B0:70:F0:71:18:C5:CC:94:3E:54:ED:F8:96
Certificate issuer:       /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial:       744714561CCF1EDFA83045512B21B674F52CD974
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa
Signing time:             Mon 29 Apr 2024 17:30:02 +0000
ROA not before:           Mon 29 Apr 2024 17:25:02 +0000
ROA not after:            Mon 28 Apr 2025 17:30:02 +0000
asID:                     270165
IP address blocks:        2806:3eb:f000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:14:56:1c:cf:1e:df:a8:30:45:51:2b:21:b6:74:f5:2c:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
        Validity
            Not Before: Apr 29 17:25:02 2024 GMT
            Not After : Apr 28 17:30:02 2025 GMT
        Subject: CN=F37EFF72C2B9BDB070F07118C5CC943E54EDF896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:60:b6:e9:b6:5f:ab:58:13:fc:68:02:a5:
                    63:97:6f:97:c1:5f:e7:65:63:be:00:cf:98:ae:51:
                    b8:ec:b3:5b:c2:27:fc:39:e6:0e:cd:12:f8:d9:73:
                    01:e4:99:a4:9b:f6:2a:95:bb:38:0a:ec:a5:08:3d:
                    a0:93:d8:f8:8f:02:19:4c:54:7a:79:80:96:36:af:
                    c8:47:07:63:1f:4a:d5:63:b8:1b:05:09:26:2d:7d:
                    61:d6:65:b1:a6:d3:84:0a:ed:af:92:88:e8:01:4c:
                    15:c1:2b:31:50:69:e8:3e:8c:91:8a:24:dc:59:bb:
                    10:2f:fa:26:82:80:3b:54:79:05:46:f7:60:c0:66:
                    e4:e2:8c:dd:70:dc:2a:28:ce:c9:38:a2:0a:0e:bb:
                    01:d3:4f:23:25:30:99:f1:03:96:a1:75:1b:1a:0e:
                    bb:74:69:1b:30:8a:86:e0:00:5c:1a:97:3f:63:9a:
                    9f:d7:be:55:a5:2c:fd:ce:16:99:13:06:61:70:cc:
                    78:dd:d9:de:f8:0e:38:0c:cb:e2:59:85:51:f4:c7:
                    b5:f9:92:e5:a4:4f:4a:9b:a8:69:77:bd:ec:75:db:
                    99:52:c6:63:84:07:9d:d0:d2:e1:45:ce:b3:f2:dd:
                    ec:df:88:85:6e:d1:5b:5c:6d:dc:2e:53:b0:87:c0:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:FF:72:C2:B9:BD:B0:70:F0:71:18:C5:CC:94:3E:54:ED:F8:96
            X509v3 Authority Key Identifier:
                keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a663030303a3a2f33392d3339203d3e20323730313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3eb:f000::/39

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:ba:ec:e5:10:b8:2e:36:55:b1:ea:77:5b:5d:c8:fd:b2:
         09:99:ec:c5:db:50:5d:fc:79:eb:63:4a:bd:d0:60:84:c9:5c:
         25:ee:45:39:af:c5:ff:20:b4:80:23:f8:fd:7e:31:d4:4e:4b:
         ec:17:bd:8a:e0:3e:81:a7:e1:08:5b:4b:1d:f1:04:33:67:09:
         83:18:ee:2f:ed:84:db:3a:c2:d7:f8:99:8f:e8:fa:ed:ac:e1:
         7d:4c:f0:6d:1d:27:f3:da:38:1b:d7:7b:43:3e:b8:f4:3b:80:
         7f:a1:49:50:d3:4e:b8:5b:98:fc:dd:56:d9:7a:3c:2c:8a:b3:
         d4:d4:db:7a:33:5c:9b:0b:f2:c6:1e:d3:e1:69:9d:25:a8:0d:
         ac:62:f4:f6:db:1e:e5:9d:4e:1b:4d:81:da:c4:6b:06:7d:3f:
         c8:1b:9d:cb:5b:c6:ed:a0:e8:85:08:43:a9:42:a2:f4:1b:af:
         ca:b6:40:30:99:09:03:99:e5:27:8d:8f:fd:ca:27:9d:dd:bb:
         f3:de:aa:9b:08:bb:ed:cd:f4:a0:0d:ea:c2:67:cf:43:fd:3d:
         1f:4e:7c:63:67:b5:ad:b4:b0:17:83:c4:e6:0b:7d:eb:3d:69:
         c5:48:6e:92:74:f3:e5:56:76:f8:2e:fc:ec:32:eb:a5:f9:a3:
         83:27:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----