Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3966313a3a2f34382d3438203d3e203138373334.roa
File:                     323830363a3261303a3966313a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          SWRmbi/sjBZsQdwyuGeN1ed/+RQf8CICTSDeERGAD0I=
Subject key identifier:   99:46:AC:98:D6:A1:E1:54:2C:7A:B2:88:5D:2B:87:9B:81:5F:CF:FE
Certificate issuer:       /CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
Certificate serial:       4D93BC528A2627CF276C866775B63B362F79B35F
Authority key identifier: 53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3966313a3a2f34382d3438203d3e203138373334.roa
Signing time:             Thu 12 Sep 2024 11:45:04 +0000
ROA not before:           Thu 12 Sep 2024 11:40:04 +0000
ROA not after:            Thu 11 Sep 2025 11:45:04 +0000
asID:                     18734
IP address blocks:        2806:2a0:9f1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:bc:52:8a:26:27:cf:27:6c:86:67:75:b6:3b:36:2f:79:b3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53838B8B8EC8587C073DCD451958509AA0A94F5A
        Validity
            Not Before: Sep 12 11:40:04 2024 GMT
            Not After : Sep 11 11:45:04 2025 GMT
        Subject: CN=9946AC98D6A1E1542C7AB2885D2B879B815FCFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:89:42:c5:44:24:28:f3:10:47:05:9c:27:
                    f1:02:4f:50:d2:17:93:7a:e3:be:01:e7:2f:1d:db:
                    00:0f:7f:f5:31:61:06:31:36:31:d7:c3:52:bf:7f:
                    90:b9:fe:32:0b:14:d6:10:f0:bb:34:85:9c:e0:66:
                    67:8c:a1:9b:d7:92:ed:d0:e3:62:91:a3:ea:53:60:
                    0d:75:bb:7b:9d:2f:1e:06:d2:10:7d:52:66:98:ab:
                    e6:64:69:b8:a6:a8:1d:0c:ae:de:48:c5:b5:4f:8a:
                    51:58:66:6c:dc:bf:69:a7:85:f5:49:fd:e3:97:61:
                    19:6f:5d:81:14:33:2a:e4:69:ac:09:2b:6a:1a:c9:
                    77:f6:e3:d8:38:5b:a5:55:c0:25:6d:19:48:06:f2:
                    da:ed:59:d8:fa:d0:da:53:91:94:9d:40:d1:e0:15:
                    ea:02:e8:6a:c5:59:06:12:28:bb:b0:7f:e9:db:7f:
                    3f:a3:fc:16:ad:6a:5e:20:aa:b3:5d:29:32:10:6c:
                    51:e9:47:11:45:89:d0:56:d7:a1:4e:10:4c:5c:ab:
                    94:e1:bf:fd:fe:eb:fa:a6:4d:00:1d:e2:fb:83:18:
                    98:af:94:ee:39:d3:88:b5:85:4d:c4:b7:af:b9:1b:
                    32:eb:9c:f3:e8:e3:e0:cd:98:ea:35:a4:ec:29:3a:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:46:AC:98:D6:A1:E1:54:2C:7A:B2:88:5D:2B:87:9B:81:5F:CF:FE
            X509v3 Authority Key Identifier:
                keyid:53:83:8B:8B:8E:C8:58:7C:07:3D:CD:45:19:58:50:9A:A0:A9:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53838B8B8EC8587C073DCD451958509AA0A94F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F55DDCCE5CB185B22B6F8E41FFBC76C56A809BFC662290F72CDB554395541495/0/323830363a3261303a3966313a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2a0:9f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:cf:fa:9a:84:6a:09:c6:f7:73:2f:d7:22:cc:3e:77:b6:
         e8:f1:ab:cc:07:ca:c1:e8:7f:32:d5:9c:ff:c7:c8:73:71:41:
         11:24:05:94:bd:9e:90:4c:db:50:c2:44:b7:2b:d3:14:d3:95:
         7f:7c:ff:49:83:1e:d0:77:2b:b5:04:5c:40:61:52:d1:45:9a:
         18:8f:ba:22:57:09:a7:f7:99:5e:6c:ea:60:b8:f6:b5:d2:d5:
         42:41:0b:d9:dd:65:f9:36:4b:82:92:4e:82:61:ff:b3:0c:c4:
         7c:94:d4:c3:7e:03:31:ac:0a:07:c0:a1:7f:a5:61:a6:e9:9b:
         99:5b:c4:1b:c1:1a:45:17:86:12:f8:69:5c:d1:73:f4:94:02:
         3a:13:0b:8f:63:de:fd:bb:e1:06:d5:6c:b1:af:82:f7:ee:0e:
         fc:86:78:09:a3:d7:a9:e8:c2:36:b2:84:bd:be:9c:a2:6b:52:
         14:a7:3b:b3:6f:9e:75:73:73:9c:8f:3d:a8:96:28:7d:77:b8:
         d7:4c:f3:70:62:e7:0f:f1:a0:e0:de:02:82:04:1c:37:63:60:
         1d:2e:b1:d3:dd:0b:24:65:26:32:b4:e0:78:8a:d3:89:d8:26:
         80:e0:a2:14:0c:d9:e9:c4:28:6d:19:25:08:b6:62:76:a9:f4:
         e7:00:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----