Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f33322d3438203d3e20323730313230.roa
File:                     323830363a3362663a3a2f33322d3438203d3e20323730313230.roa (raw, json)
Hash identifier:          l6iyF2PztMkraafsNOo+ICC+rlIsx7X2BWl9Nj/oz0k=
Subject key identifier:   82:89:16:29:5B:3F:CE:10:EE:87:8A:63:80:AE:95:D1:3F:35:A0:2A
Certificate issuer:       /CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
Certificate serial:       0CED77A46FF6D1B35EC0B09D73BD9B866A635421
Authority key identifier: FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f33322d3438203d3e20323730313230.roa
Signing time:             Tue 05 Mar 2024 18:13:50 +0000
ROA not before:           Tue 05 Mar 2024 18:08:50 +0000
ROA not after:            Tue 04 Mar 2025 18:13:50 +0000
asID:                     270120
IP address blocks:        2806:3bf::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:77:a4:6f:f6:d1:b3:5e:c0:b0:9d:73:bd:9b:86:6a:63:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
        Validity
            Not Before: Mar  5 18:08:50 2024 GMT
            Not After : Mar  4 18:13:50 2025 GMT
        Subject: CN=828916295B3FCE10EE878A6380AE95D13F35A02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:1e:c0:5a:18:e4:13:b1:8a:c7:79:8f:5c:
                    92:c4:f2:31:23:d7:d9:95:60:3d:e6:28:ea:3e:64:
                    bd:ab:5f:35:2a:29:65:34:0a:8a:0a:62:52:25:52:
                    a6:b4:84:6e:56:fc:21:96:64:64:e1:9b:33:f8:78:
                    ce:18:e4:84:17:74:f7:df:65:20:d5:65:8a:c6:dd:
                    7a:86:b3:18:13:b8:4b:e6:71:94:8e:35:d2:aa:db:
                    21:72:9a:d7:b5:a5:10:16:13:61:64:95:01:8d:a9:
                    98:8c:67:37:ac:4c:0e:93:c4:7b:33:2b:f9:7a:d1:
                    61:e5:bc:62:f2:53:63:c1:b3:54:bf:14:56:ee:e9:
                    05:5d:2c:e8:e7:68:fb:a6:75:95:30:1f:e6:de:56:
                    10:8b:c6:ff:49:72:df:eb:50:3f:01:a0:01:54:eb:
                    4b:7b:49:87:74:8d:24:90:e5:59:0f:49:34:d4:2d:
                    f6:0e:d5:75:0e:0f:10:d9:73:3b:75:98:29:be:b6:
                    dc:fd:f5:d9:e7:7b:fd:81:42:35:31:d0:78:9f:10:
                    2b:99:05:e4:cb:42:12:26:94:29:73:d0:8a:b1:a8:
                    82:11:16:08:89:69:70:1b:66:90:bd:17:ff:5f:1c:
                    94:0c:2b:ac:75:7d:f9:cc:2b:27:29:8e:44:af:00:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:16:29:5B:3F:CE:10:EE:87:8A:63:80:AE:95:D1:3F:35:A0:2A
            X509v3 Authority Key Identifier:
                keyid:FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/323830363a3362663a3a2f33322d3438203d3e20323730313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3bf::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:53:84:65:48:b3:69:6f:de:1d:bb:ed:79:32:87:0a:e1:
         31:ee:36:67:6a:95:08:83:6f:65:4e:53:c4:92:f4:7d:70:81:
         3f:a0:bf:13:4c:b9:83:f7:49:e9:7f:be:5c:8b:94:00:7d:43:
         52:8e:f4:6e:6c:5c:f1:5b:dc:82:3f:44:d7:2d:bb:fe:8f:06:
         2a:94:3e:96:cc:10:3a:a7:7d:fd:d7:81:93:4c:89:65:b0:b5:
         0d:4c:ba:57:46:30:78:08:3b:56:7e:86:06:d6:76:e6:40:f5:
         34:e2:09:a0:2e:80:01:4e:0e:55:d3:58:03:db:f7:2e:41:12:
         eb:11:ef:aa:3e:8e:53:b8:2b:bb:e1:cf:f4:85:73:f0:12:2e:
         c7:6f:36:73:a3:59:13:6d:be:ed:52:57:cf:13:07:cd:bf:cc:
         f1:2e:64:00:48:8b:72:7d:1d:dd:8e:22:d9:3b:11:57:0c:0c:
         44:a3:e3:eb:47:2b:9f:77:a0:8b:b0:26:3b:b4:a7:02:d5:ad:
         54:0f:85:23:14:f9:f0:18:5e:5c:30:cf:5a:82:3f:f0:fa:a4:
         b0:5a:e3:f9:5f:88:47:db:7f:f5:52:07:92:1a:19:b3:75:d4:
         a1:af:fe:56:c9:46:02:ba:03:0d:08:3a:d1:e2:5a:16:22:46:
         17:3f:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----