Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F50DEB68F7A7E81133874B915DCE2845AC9CF32957AE1FF8FDC26962D8791E75/0/323830333a363064303a3a2f33322d3438203d3e20323733393636.roa
File:                     323830333a363064303a3a2f33322d3438203d3e20323733393636.roa (raw, json)
Hash identifier:          AhZXW67mLx6LjdZhc6OPUn/cpk/OWImLY/z7pmGirKM=
Subject key identifier:   7E:E7:02:13:13:5C:15:E5:C5:CF:EC:41:51:25:76:FA:E8:79:16:6D
Certificate issuer:       /CN=168B807E1EAD9B2CC7CDA65721507D6D396F4700
Certificate serial:       2DD460AB80B428B04C1C656994B17777793E5A86
Authority key identifier: 16:8B:80:7E:1E:AD:9B:2C:C7:CD:A6:57:21:50:7D:6D:39:6F:47:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/168B807E1EAD9B2CC7CDA65721507D6D396F4700.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F50DEB68F7A7E81133874B915DCE2845AC9CF32957AE1FF8FDC26962D8791E75/0/323830333a363064303a3a2f33322d3438203d3e20323733393636.roa
Signing time:             Mon 28 Oct 2024 16:40:00 +0000
ROA not before:           Mon 28 Oct 2024 16:35:00 +0000
ROA not after:            Mon 27 Oct 2025 16:40:00 +0000
asID:                     273966
IP address blocks:        2803:60d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d4:60:ab:80:b4:28:b0:4c:1c:65:69:94:b1:77:77:79:3e:5a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168B807E1EAD9B2CC7CDA65721507D6D396F4700
        Validity
            Not Before: Oct 28 16:35:00 2024 GMT
            Not After : Oct 27 16:40:00 2025 GMT
        Subject: CN=7EE70213135C15E5C5CFEC41512576FAE879166D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:c5:9c:40:65:0a:99:46:db:9c:83:d4:56:
                    37:a1:34:ff:9c:16:e2:41:f5:e6:a4:cd:26:8e:8c:
                    2f:9d:09:1d:20:29:74:48:b0:bc:fd:2e:03:5c:d8:
                    0f:28:d7:0e:7d:a2:a1:c9:02:1a:57:8c:d3:c9:7c:
                    9a:12:b2:17:0f:d5:55:c7:ab:fc:04:ac:7e:94:fc:
                    38:f0:dd:5c:d6:f1:9c:15:df:cf:21:39:7f:66:76:
                    61:9c:a4:f5:36:fc:12:ca:df:68:c5:e8:ff:12:12:
                    50:cd:7b:b0:5e:0f:0f:ed:e2:fd:45:4d:35:09:b4:
                    93:64:e6:8e:3e:c7:9e:16:1f:3f:df:47:c6:94:d3:
                    32:b2:39:18:8f:44:59:6a:48:b9:fd:6a:ac:72:c2:
                    15:f3:f7:81:44:ef:79:8d:5c:67:93:41:63:ec:d8:
                    4a:c5:9b:1b:cb:39:d8:51:e2:ee:30:05:af:71:98:
                    26:54:ce:ee:0f:c9:6f:33:4e:4d:88:31:b1:b9:74:
                    15:4a:4f:b4:66:ae:b7:f7:d6:5f:e5:bf:3b:b7:c3:
                    5d:a5:85:cb:57:bf:0d:a4:34:db:d7:cf:4c:6e:f4:
                    1a:36:31:6f:fe:3f:43:f2:93:b5:cc:e8:c6:68:9f:
                    df:36:9b:81:21:19:6c:04:69:31:d2:35:04:29:fc:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:02:13:13:5C:15:E5:C5:CF:EC:41:51:25:76:FA:E8:79:16:6D
            X509v3 Authority Key Identifier:
                keyid:16:8B:80:7E:1E:AD:9B:2C:C7:CD:A6:57:21:50:7D:6D:39:6F:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F50DEB68F7A7E81133874B915DCE2845AC9CF32957AE1FF8FDC26962D8791E75/0/168B807E1EAD9B2CC7CDA65721507D6D396F4700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/168B807E1EAD9B2CC7CDA65721507D6D396F4700.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F50DEB68F7A7E81133874B915DCE2845AC9CF32957AE1FF8FDC26962D8791E75/0/323830333a363064303a3a2f33322d3438203d3e20323733393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:31:7b:ea:b5:3f:30:04:e2:b9:03:a8:e8:4e:44:58:2f:2e:
         48:cc:7e:62:92:f4:d3:02:5f:88:43:e5:fe:f0:fc:bb:9a:94:
         6e:c9:05:70:11:78:ec:17:9f:58:95:79:89:2d:cb:dc:1a:5e:
         d3:24:c6:9d:18:90:af:53:1f:13:5f:79:82:7d:1b:88:a1:1a:
         88:2a:1d:b4:2c:fb:54:df:65:a8:2a:44:26:b4:90:01:17:34:
         cd:ee:8a:22:8d:1a:82:81:0f:8f:c4:03:f3:66:ad:3e:55:7e:
         9e:ff:d1:11:e6:d8:be:8e:ee:28:81:23:61:4c:8c:e6:2f:49:
         67:a5:fe:c9:2d:8f:27:f1:93:86:80:34:71:31:4a:ae:dd:92:
         18:ff:b1:fd:d9:7a:cd:07:3e:d3:a0:ab:f1:05:0d:38:f5:be:
         de:4e:72:12:74:e9:a1:da:71:cd:e7:3e:3d:56:a1:c0:62:7a:
         4b:ca:c8:3f:d3:92:9f:52:7b:df:84:61:65:cd:13:5a:19:74:
         62:ba:b0:db:be:d0:7c:e2:f4:ee:6a:cc:b5:98:e3:15:79:6a:
         65:49:af:b9:5c:62:8e:47:62:28:9e:8f:43:0e:0c:bd:15:0d:
         21:9c:4f:71:26:fd:26:c7:89:ed:2d:90:5f:05:37:69:e4:5a:
         87:88:cd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----