Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
File:                     323830333a6335303a3a2f33322d3332203d3e20323733313339.roa (raw, json)
Hash identifier:          d+ZAfW03QAKu0qEs7Z5swSZGlarpjQgIuNP2S3QRSEg=
Subject key identifier:   9D:7A:E4:45:4E:E5:98:72:ED:1E:16:40:BC:30:56:B2:12:43:75:10
Certificate issuer:       /CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
Certificate serial:       7E87C599E378A72F93B81E997282F8A6F1F13949
Authority key identifier: 16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa
Signing time:             Thu 09 May 2024 14:50:00 +0000
ROA not before:           Thu 09 May 2024 14:45:00 +0000
ROA not after:            Thu 08 May 2025 14:50:00 +0000
asID:                     273139
IP address blocks:        2803:c50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:c5:99:e3:78:a7:2f:93:b8:1e:99:72:82:f8:a6:f1:f1:39:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9
        Validity
            Not Before: May  9 14:45:00 2024 GMT
            Not After : May  8 14:50:00 2025 GMT
        Subject: CN=9D7AE4454EE59872ED1E1640BC3056B212437510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:41:85:8d:64:4a:c7:dd:3b:29:99:b5:44:
                    f2:20:0f:ab:7f:71:25:c4:a2:93:36:9d:f3:70:3a:
                    65:c4:b6:cb:71:8d:6e:db:b6:89:45:59:0b:9c:ac:
                    a2:9e:92:19:e8:74:39:79:b3:de:90:be:87:de:76:
                    4e:4b:cf:cf:45:4f:34:b1:6a:d0:24:8f:63:60:49:
                    34:77:ba:84:18:6b:68:0c:5a:ff:a1:9b:b6:45:09:
                    2b:c6:a0:96:fb:9c:0e:c3:53:0c:f6:70:15:ef:76:
                    fd:79:f8:82:aa:e7:79:87:8e:77:53:04:3d:62:a2:
                    f5:cd:ae:32:75:0c:c0:76:39:55:c0:d8:68:6e:36:
                    09:0f:c0:72:40:4a:36:14:93:2d:13:6f:97:8a:ff:
                    d8:7b:90:67:9c:2e:47:99:e2:16:7b:70:1f:b7:8b:
                    c0:1b:e1:34:24:03:0c:9e:76:b3:dc:24:6c:32:f3:
                    ac:6a:98:47:b2:09:41:04:2b:7a:11:6f:17:41:20:
                    4e:7f:6f:95:03:75:f2:51:7a:71:f6:81:1d:03:c5:
                    8a:63:b1:9a:db:8b:27:d7:46:b0:6f:a4:e1:50:1d:
                    79:7a:2f:d1:f4:14:9d:87:ac:ee:8f:fb:3b:f6:96:
                    07:4f:e7:0b:8f:cd:7e:3a:5d:51:b6:12:2d:b5:99:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:E4:45:4E:E5:98:72:ED:1E:16:40:BC:30:56:B2:12:43:75:10
            X509v3 Authority Key Identifier:
                keyid:16:25:68:E5:3E:E1:CC:63:AF:A6:BB:CE:7B:AD:8F:CB:84:8C:DD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/162568E53EE1CC63AFA6BBCE7BAD8FCB848CDDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A8AE7E005EA7678BCD934EB423029DD0D1F0B2A2F52D690F8D0C0600A6C9E61/0/323830333a6335303a3a2f33322d3332203d3e20323733313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:92:fb:3d:2d:1d:97:74:34:2a:e0:c5:d5:16:eb:3c:24:
         31:6d:0e:fb:63:74:68:ac:8e:e0:d5:07:56:4b:3b:32:f6:7a:
         39:4e:e1:2a:75:d8:9f:6b:a3:83:5c:46:9c:66:76:30:e7:cb:
         ee:13:08:85:f9:d7:04:91:eb:49:e8:49:bd:63:e0:5c:20:53:
         cc:0d:10:38:93:51:c6:69:06:80:e8:73:9b:4c:80:52:e5:59:
         c2:ac:8f:44:a4:db:61:5b:78:a3:eb:30:5a:00:02:12:1b:88:
         d1:af:bf:e6:d3:f8:06:60:03:7b:6f:ff:8c:46:ec:7d:29:4b:
         00:f9:b2:ae:76:e9:35:49:b5:23:3d:f4:06:8a:ba:7c:a8:27:
         fb:b5:16:6e:7e:9b:3f:af:f8:ed:34:a2:92:2e:78:9d:94:73:
         bd:36:cc:8d:2b:b9:42:20:4e:c0:41:9b:67:73:ba:59:29:cc:
         be:50:ef:d2:97:b5:50:e9:32:19:f0:67:58:22:93:63:16:d6:
         bf:74:d8:19:f7:d1:e4:d7:5e:15:7e:96:d4:71:91:a1:74:20:
         fe:d8:c3:d1:87:2b:66:d0:22:95:d2:15:89:5e:4a:e3:2b:b0:
         10:16:26:74:63:80:19:aa:9b:5d:62:f5:49:74:f5:67:fc:04:
         54:6e:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----