Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa
File:                     323830363a3330663a3a2f33322d3438203d3e20323635353631.roa (raw, json)
Hash identifier:          VHa0wCEST3dq45+BS8D2Afz7i05LlF5zUDcq2P//f6Y=
Subject key identifier:   D1:38:F8:49:35:C1:04:DA:51:46:43:E3:A0:47:1D:2D:C8:D9:C9:91
Certificate issuer:       /CN=B766171E94B1BFFD247503064521180F9BB7304D
Certificate serial:       6900A8418F3DE98932047C8FD47696DC4D700BC8
Authority key identifier: B7:66:17:1E:94:B1:BF:FD:24:75:03:06:45:21:18:0F:9B:B7:30:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B766171E94B1BFFD247503064521180F9BB7304D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa
Signing time:             Tue 05 Mar 2024 17:49:19 +0000
ROA not before:           Tue 05 Mar 2024 17:44:19 +0000
ROA not after:            Tue 04 Mar 2025 17:49:19 +0000
asID:                     265561
IP address blocks:        2806:30f::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:a8:41:8f:3d:e9:89:32:04:7c:8f:d4:76:96:dc:4d:70:0b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B766171E94B1BFFD247503064521180F9BB7304D
        Validity
            Not Before: Mar  5 17:44:19 2024 GMT
            Not After : Mar  4 17:49:19 2025 GMT
        Subject: CN=D138F84935C104DA514643E3A0471D2DC8D9C991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:1b:a8:89:bb:9e:e2:b1:84:94:62:0d:a4:
                    b0:ef:11:44:04:eb:b3:71:6d:3e:ff:90:7e:bd:c2:
                    90:3c:70:04:5a:16:52:6c:99:f6:c8:12:31:b2:5d:
                    98:7e:a6:15:89:73:1f:10:1d:bb:4d:d8:74:e7:05:
                    8e:b2:ba:6d:55:c2:d7:e0:9f:39:e4:47:d9:46:e3:
                    1a:dd:a3:ae:8b:6b:99:2e:30:5e:f5:0d:2b:72:f6:
                    2f:9e:95:f4:ef:a1:50:49:88:00:88:ae:b3:1c:ab:
                    6b:6c:3c:fa:93:cc:7d:c7:55:d5:07:c9:2d:c9:24:
                    de:38:50:68:17:ff:55:30:d5:a9:f6:95:06:5d:0b:
                    3f:3a:8d:d5:79:3f:9f:5e:bf:da:c3:4d:10:c8:03:
                    a8:33:c1:59:d8:a0:9e:43:ff:a3:a1:ab:65:b9:f2:
                    3e:b1:a2:3b:e5:e4:8a:eb:91:a3:ab:ee:b2:b5:67:
                    64:8b:d2:a7:eb:a9:82:13:ba:6a:08:1c:64:be:a3:
                    83:fb:96:f1:59:95:8f:a6:83:53:ea:97:c0:88:78:
                    a2:aa:df:60:7e:2d:34:27:f9:30:e1:d4:37:f9:8c:
                    62:87:fe:a6:1d:54:7b:80:05:c3:ad:2c:28:4f:16:
                    7b:4d:ed:3b:d7:06:10:42:32:b0:29:eb:ba:61:c7:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:F8:49:35:C1:04:DA:51:46:43:E3:A0:47:1D:2D:C8:D9:C9:91
            X509v3 Authority Key Identifier:
                keyid:B7:66:17:1E:94:B1:BF:FD:24:75:03:06:45:21:18:0F:9B:B7:30:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/B766171E94B1BFFD247503064521180F9BB7304D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B766171E94B1BFFD247503064521180F9BB7304D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9804E5C3552385ABCEAC1D787B5A2D63A6BC76D731DDAFAFB490E6382114143/0/323830363a3330663a3a2f33322d3438203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30f::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:c0:61:b9:63:d6:e2:1d:05:9c:cb:19:b6:99:13:7e:4f:
         05:7b:07:c5:16:1b:c2:04:88:05:7e:d6:f2:a0:5d:fe:aa:e0:
         2d:b7:27:ad:30:bf:f9:25:c3:4b:7d:f8:19:b1:74:65:ac:98:
         05:1d:ad:98:eb:be:26:af:7a:96:65:fa:3b:cf:5a:21:cc:e9:
         52:a4:66:69:04:5e:fd:95:c8:ec:0d:85:4f:f2:1b:a9:48:44:
         9a:f5:f3:30:1a:7a:4b:b2:75:c6:fa:fb:e3:7e:7c:8b:26:a8:
         40:b2:a8:52:be:9f:2f:b5:32:e5:5b:00:57:70:57:2a:37:0e:
         85:c7:27:5e:1b:10:49:3d:39:2e:9e:f0:f5:b0:6b:6e:46:0e:
         e3:00:4c:0e:52:4a:07:8a:48:8a:e2:30:6d:7e:92:3e:6b:71:
         15:9d:2a:b1:6d:fa:9c:6a:1c:db:79:e0:07:84:a5:e0:57:65:
         d0:f9:b3:24:38:3a:d4:86:50:20:ea:88:ab:fd:20:97:c6:d6:
         f2:4b:ab:96:38:22:47:a1:90:db:1b:c5:88:db:e5:64:6f:a2:
         da:f6:df:6b:53:b6:64:3a:60:27:54:b5:e4:fe:1c:ac:43:4b:
         da:68:cd:5d:2b:82:e2:a4:b2:0d:fa:5a:bf:c2:60:e7:f7:59:
         d5:58:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----