Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa
File:                     323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa (raw, json)
Hash identifier:          BpTmiBUn5u1AVyWfbDyly0g9vUcZWNDqgOSduGNQJbk=
Subject key identifier:   F4:BD:71:3B:56:6E:39:60:D4:78:1D:EC:60:92:12:62:79:5D:30:E4
Certificate issuer:       /CN=ACF001143928ED105048A1EE877591E821D8006F
Certificate serial:       062173CADD0D56F3E12C680B49DB705CD0FD77C4
Authority key identifier: AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa
Signing time:             Tue 05 Mar 2024 17:57:25 +0000
ROA not before:           Tue 05 Mar 2024 17:52:25 +0000
ROA not after:            Tue 04 Mar 2025 17:57:25 +0000
asID:                     270126
IP address blocks:        2806:402:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:21:73:ca:dd:0d:56:f3:e1:2c:68:0b:49:db:70:5c:d0:fd:77:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF001143928ED105048A1EE877591E821D8006F
        Validity
            Not Before: Mar  5 17:52:25 2024 GMT
            Not After : Mar  4 17:57:25 2025 GMT
        Subject: CN=F4BD713B566E3960D4781DEC60921262795D30E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:39:df:5f:fe:0b:57:df:ab:9c:35:64:88:
                    d1:60:2f:a7:e4:d3:24:fb:bd:b3:91:2e:57:68:32:
                    16:55:0c:9a:2b:f6:7d:1c:89:0c:ab:6b:c1:a8:af:
                    69:3e:41:27:1b:83:46:83:99:96:79:87:d0:08:45:
                    4e:e4:28:a3:c4:76:2a:dd:4e:8d:5d:32:2c:87:8a:
                    c4:ed:a2:68:68:bb:08:f5:57:3f:78:50:5a:45:15:
                    2b:84:42:75:11:2a:8a:bf:54:a7:9f:e7:88:8e:cb:
                    19:38:c5:64:84:04:e5:c2:87:f5:13:6a:0e:23:df:
                    17:26:d0:8f:b0:bd:64:fd:b9:22:e8:47:31:9e:f3:
                    a4:f2:41:8d:c7:09:68:de:94:8d:6b:02:8c:bf:9d:
                    7f:2b:b9:67:46:f5:d3:fa:8c:6c:28:fe:bb:28:6e:
                    42:ad:7a:d8:b0:c4:d4:dd:89:b7:48:53:08:3d:25:
                    99:5d:78:1d:2a:43:7d:3f:7c:1a:a0:32:ec:22:75:
                    7d:9b:6d:43:fe:fb:6b:7f:f9:42:df:6f:c7:25:52:
                    57:46:10:08:83:8d:97:7b:1e:15:7d:24:f3:9e:65:
                    c5:ed:b3:3c:7f:77:88:8f:3b:52:4f:4d:3a:18:63:
                    81:38:1e:13:9a:e7:f5:ec:46:5a:40:8a:cf:59:8d:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:71:3B:56:6E:39:60:D4:78:1D:EC:60:92:12:62:79:5D:30:E4
            X509v3 Authority Key Identifier:
                keyid:AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:02:c3:7f:f2:47:c4:bd:48:fb:97:7e:50:76:7c:9a:b1:f7:
         ca:d1:fc:3b:91:49:f5:c7:23:bf:9c:af:82:b2:5e:29:5d:b6:
         0a:56:ea:e7:94:48:61:06:64:57:7d:6f:fb:b1:cb:f2:a9:c3:
         81:4c:78:a6:b4:3c:a0:66:da:83:b7:c8:48:53:83:7b:31:b0:
         8d:31:29:db:c7:dd:66:73:c9:57:b8:5a:6e:01:07:28:a4:72:
         fa:10:b6:e7:b7:8d:47:6d:08:5e:b7:b0:4c:a8:aa:cd:d9:e8:
         d3:eb:c8:5b:a3:31:dd:30:bb:4d:51:9d:13:9e:0f:87:dd:62:
         1d:72:1e:e4:d7:3a:a2:6b:05:48:f3:20:2a:f4:39:3e:09:2e:
         00:9a:51:dd:29:0c:e6:71:4b:07:ae:45:8c:8d:52:df:90:1b:
         87:63:3a:13:de:b0:fe:87:83:8b:9b:eb:25:fd:d9:f1:93:6e:
         70:d1:5e:0b:64:5d:03:f5:4b:de:a9:f1:60:38:35:0d:69:8c:
         74:90:b1:06:85:c9:83:24:9f:d2:5b:d3:49:50:49:29:66:6b:
         0e:f4:7f:ef:02:3c:61:32:36:bc:96:30:b5:18:ba:b3:5d:98:
         d4:3e:4e:c4:05:65:ff:d0:5c:a1:74:3f:0c:54:e2:0a:de:44:
         11:7d:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----