Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e203136363239.roa
File:                     3136362e37352e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          UHFVI98ltKULs1lETlZUSXAF16DAMMznYX+W3jHmmAg=
Subject key identifier:   8F:A2:7B:2A:0B:4E:B9:CF:1D:54:C7:16:82:EB:CF:8B:E9:93:E2:93
Certificate issuer:       /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial:       6A642F3A1B6A566A78C91FE52BF2C9C501DE4513
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:00:59 +0000
ROA not before:           Tue 05 Mar 2024 17:55:59 +0000
ROA not after:            Tue 04 Mar 2025 18:00:59 +0000
asID:                     16629
IP address blocks:        166.75.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:64:2f:3a:1b:6a:56:6a:78:c9:1f:e5:2b:f2:c9:c5:01:de:45:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
        Validity
            Not Before: Mar  5 17:55:59 2024 GMT
            Not After : Mar  4 18:00:59 2025 GMT
        Subject: CN=8FA27B2A0B4EB9CF1D54C71682EBCF8BE993E293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:ba:d7:7b:78:36:e1:17:a2:81:68:22:65:
                    09:88:cd:80:7f:ab:d5:99:5b:36:3d:cb:09:b5:21:
                    84:5b:2e:e4:dd:fe:b0:62:c8:02:77:a8:20:13:50:
                    31:24:03:47:e1:4d:ca:51:42:6d:6c:82:e3:d0:31:
                    3b:93:96:ab:bf:63:d3:c0:f2:e9:2a:eb:69:cb:ac:
                    7d:f9:27:63:42:53:62:6a:c9:77:d6:8f:af:96:85:
                    59:fa:9d:88:33:7c:32:0a:61:fd:33:52:f1:78:0a:
                    e2:e1:c6:f8:cc:ce:c6:b7:f6:e4:c0:39:e0:4d:7f:
                    d7:cc:1b:ad:e2:01:c4:38:9a:88:21:c4:9a:1d:15:
                    b4:58:f9:ce:44:9d:f0:49:cf:f7:fd:c1:4a:19:45:
                    7f:29:c5:4b:28:e2:f5:00:a9:49:e2:99:05:19:ae:
                    48:ce:38:7f:16:04:40:88:61:00:d5:f3:01:55:cf:
                    e5:68:e5:64:dc:74:50:a1:48:13:bd:a5:42:a7:a2:
                    42:b4:23:4e:7d:30:30:91:b0:5f:2f:56:2a:de:e7:
                    cd:63:ea:0c:26:8b:8d:35:b5:f7:fb:43:6e:37:5d:
                    4a:89:15:06:1f:4e:62:da:3f:f6:3b:7d:cd:e0:d7:
                    8e:1f:03:47:c0:44:08:fc:96:8b:82:eb:f9:24:83:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:7B:2A:0B:4E:B9:CF:1D:54:C7:16:82:EB:CF:8B:E9:93:E2:93
            X509v3 Authority Key Identifier:
                keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:bc:dd:14:94:23:40:0a:1a:c2:97:a2:46:e4:ff:ac:61:
         9a:f8:ac:3a:37:f5:c0:9d:9c:6a:75:37:ed:c4:b0:b9:fa:b2:
         89:44:92:0b:99:2a:4e:61:1f:f4:93:63:f5:95:be:31:48:37:
         c9:65:76:fc:b6:01:10:b1:40:68:a3:a8:22:dc:73:1c:c9:c9:
         49:a2:b8:b7:34:fd:70:6a:0a:14:7b:24:2b:c1:0c:eb:fa:4a:
         bb:ff:b4:f3:f4:d1:9d:23:1a:9c:4f:64:36:c6:7b:69:3f:47:
         51:5e:8c:20:c0:d3:3a:f3:d1:af:2c:0e:94:55:16:1e:dd:4f:
         ae:15:c1:8f:54:15:3c:0d:d0:95:d7:4e:e8:b5:2b:51:a7:8e:
         77:5d:b4:b4:53:1e:b7:9a:6c:45:52:38:58:af:f5:b6:65:f0:
         f2:42:1a:37:bd:b3:95:f5:06:52:23:94:0d:bc:7f:52:5a:fd:
         d0:f7:48:d0:a6:fc:fe:a5:02:14:dc:90:78:b9:b8:5c:81:e7:
         70:77:6d:ae:4c:57:93:6f:27:ec:fc:ea:87:02:ef:85:68:ac:
         ce:52:37:e4:f4:ec:a5:f9:2a:29:a6:f7:47:71:e7:82:a6:e9:
         71:28:b1:ae:65:38:57:ce:6a:f6:5e:44:4e:2a:26:a4:ad:01:
         ae:c8:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----