Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/323830303a6335303a3a2f33322d3634203d3e203532333639.roa
File:                     323830303a6335303a3a2f33322d3634203d3e203532333639.roa (raw, json)
Hash identifier:          caGBMy0IrXri/vSv9tnuwznhgrM11ZCQSQUKFikPbho=
Subject key identifier:   FB:7E:84:2F:40:46:77:F0:13:07:FA:11:B1:E8:96:42:58:DF:58:56
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       455F1715CF7B1771398BBC4048DAB6CD4C7C7306
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/323830303a6335303a3a2f33322d3634203d3e203532333639.roa
Signing time:             Tue 05 Mar 2024 18:22:26 +0000
ROA not before:           Tue 05 Mar 2024 18:17:26 +0000
ROA not after:            Tue 04 Mar 2025 18:22:26 +0000
asID:                     52369
IP address blocks:        2800:c50::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5f:17:15:cf:7b:17:71:39:8b:bc:40:48:da:b6:cd:4c:7c:73:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  5 18:17:26 2024 GMT
            Not After : Mar  4 18:22:26 2025 GMT
        Subject: CN=FB7E842F404677F01307FA11B1E8964258DF5856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:f3:1a:5f:20:a1:86:1a:e0:e2:93:a5:e7:
                    37:6f:4b:54:54:b2:e4:bf:4d:9d:31:f7:b7:56:b7:
                    18:d6:fe:6b:1f:11:2a:a6:af:d5:3e:53:2e:ce:c7:
                    89:75:f7:24:2f:d9:2b:cd:9a:1f:b3:10:7c:d1:ef:
                    05:9d:8d:4c:a0:8f:27:31:fe:4a:92:13:9a:86:7b:
                    dc:2a:f4:cf:a5:ec:b3:3c:30:9e:7d:6b:a0:9c:1a:
                    4d:6b:53:b1:2a:e4:c3:7a:42:45:e7:2a:4e:b7:b2:
                    c2:7f:41:e3:2d:58:fc:bc:78:e1:25:de:fe:ee:3c:
                    ca:1e:1d:33:77:0c:eb:54:28:30:89:2f:9a:15:2e:
                    38:94:7c:20:25:05:14:bf:1d:d2:0c:78:c0:0a:2c:
                    18:91:c5:c1:7b:e0:9b:90:92:40:67:30:22:c8:20:
                    55:d1:c1:08:77:8a:32:fc:49:15:16:df:fe:d7:8a:
                    88:b5:34:44:d7:94:8e:29:55:b7:ae:23:19:04:d9:
                    3a:f4:0d:d1:fe:5e:77:8a:d3:13:12:69:88:55:b1:
                    63:88:a2:b1:bc:2e:9d:56:fc:67:0b:78:cc:11:f4:
                    a0:cc:67:d7:75:49:4a:d9:97:a8:c9:a7:d8:f8:a1:
                    30:10:1f:df:84:9d:26:0d:9b:3f:69:7c:7b:5e:a7:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:84:2F:40:46:77:F0:13:07:FA:11:B1:E8:96:42:58:DF:58:56
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/323830303a6335303a3a2f33322d3634203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:45:92:29:ee:f7:63:3e:34:53:c8:66:a5:40:12:bf:d7:19:
         dd:29:53:85:31:84:0a:11:15:53:3f:66:b3:54:9e:95:7f:e1:
         8c:66:c5:be:8a:86:d7:e4:ad:24:41:c5:03:a9:2d:3d:55:b4:
         ee:ba:89:37:18:bf:9d:3b:6d:53:de:42:e4:fa:b0:e1:78:c4:
         27:b9:1c:fd:68:d7:b8:ee:50:eb:9d:4c:61:1c:b6:0f:fc:1f:
         39:a1:93:66:60:d5:42:68:7e:21:d3:0f:fd:ef:87:31:b7:49:
         ce:20:ef:8f:ac:c4:bb:d4:86:4b:20:fe:9c:86:66:bc:12:e5:
         5b:db:17:74:91:ed:2c:fa:7b:ed:37:04:24:06:f5:e9:12:c4:
         7d:9f:34:74:e4:b8:6e:e0:ac:bd:dd:ff:59:20:6c:18:9d:c8:
         c8:f5:33:97:37:35:12:66:a9:60:35:60:8a:6b:7e:c8:d0:a6:
         b5:d1:4f:cc:14:c6:d9:90:c9:60:54:cc:0e:c3:02:a7:82:23:
         4e:31:13:de:9e:90:b9:9f:2e:ca:40:2d:3b:16:5e:64:ef:65:
         6b:47:b2:b3:23:5f:10:29:eb:4a:4c:b8:04:f9:31:dd:db:e7:
         fe:2a:77:dc:80:96:63:97:22:3b:23:20:48:65:58:1e:4c:60:
         9c:ef:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----