Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323733313333.roa
File:                     323830333a353065303a3a2f33322d3438203d3e20323733313333.roa (raw, json)
Hash identifier:          AvUWamZ43h05q2nnjMV8VkI/tVhU00T2hscd7WFjXzg=
Subject key identifier:   5A:08:3D:00:04:84:66:9D:7A:2A:51:6C:E7:32:96:5E:B2:8D:22:B0
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       07086A1588A630ADBC6E4058A4E2D33DE3D6702E
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323733313333.roa
Signing time:             Tue 30 Apr 2024 17:00:00 +0000
ROA not before:           Tue 30 Apr 2024 16:55:00 +0000
ROA not after:            Tue 29 Apr 2025 17:00:00 +0000
asID:                     273133
IP address blocks:        2803:50e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:6a:15:88:a6:30:ad:bc:6e:40:58:a4:e2:d3:3d:e3:d6:70:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Apr 30 16:55:00 2024 GMT
            Not After : Apr 29 17:00:00 2025 GMT
        Subject: CN=5A083D000484669D7A2A516CE732965EB28D22B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:15:cb:59:f8:2d:31:4e:25:0b:35:a3:74:
                    5e:ff:3f:2c:f3:1a:14:a3:47:57:fd:70:46:86:92:
                    8d:ef:9f:d2:ca:6e:1c:98:d4:1c:b9:7a:7a:b8:ff:
                    6a:c2:3b:ca:0c:74:2d:ff:c3:cf:40:32:b8:29:b7:
                    e2:4e:77:77:98:9e:64:23:e3:b3:15:34:ca:79:db:
                    0a:77:83:04:13:66:f1:1f:a9:ee:7c:64:73:b9:9a:
                    f9:43:b5:ed:ca:ed:b3:52:eb:a1:25:3b:90:d3:0b:
                    b9:39:8f:5e:ef:7c:ba:f8:83:e7:85:4e:3f:62:e9:
                    eb:cf:90:01:23:b3:a0:7f:ee:c2:0d:6b:58:84:83:
                    46:dc:66:9e:72:ec:43:e8:49:19:63:7d:e6:55:7e:
                    40:1a:83:80:61:94:96:41:39:44:68:e2:c8:0b:52:
                    90:dc:dd:4d:88:14:88:82:24:71:e9:0d:01:69:a9:
                    77:85:54:7c:c5:97:cb:a8:72:9d:56:25:45:1c:c2:
                    5e:93:64:ec:f9:c9:e8:df:49:05:9a:3d:4d:37:3d:
                    5f:55:c1:34:30:45:10:9f:6f:af:81:f1:6b:8f:a1:
                    5f:26:49:2a:03:7c:b6:2a:25:bc:57:bd:b5:8f:f3:
                    1c:69:cf:d7:37:84:77:68:f7:17:4c:ec:bc:b0:08:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:3D:00:04:84:66:9D:7A:2A:51:6C:E7:32:96:5E:B2:8D:22:B0
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:be:ab:0e:20:41:3f:07:59:93:51:94:09:99:86:6c:97:eb:
         be:be:5e:94:3f:43:4a:d7:de:8f:32:a7:b9:c4:1b:7d:c6:00:
         e6:dc:a7:db:13:22:d6:80:64:e4:f5:ca:6c:21:82:aa:c7:72:
         3a:ff:9b:f1:03:70:3b:41:b8:f2:fd:4c:17:80:49:8f:3e:17:
         d0:32:b0:20:e9:dd:0c:12:e6:5d:b3:dc:67:f6:1d:b8:99:c9:
         7b:ed:f4:dc:cd:cd:92:6b:8f:eb:5f:7e:64:42:fe:1c:9c:65:
         3d:8b:aa:fa:dd:71:e0:25:24:fc:8f:df:60:a1:50:05:86:5b:
         d9:8d:33:89:56:44:fb:24:3b:b3:3c:48:c3:75:c9:a3:92:cf:
         1c:29:eb:53:49:17:e8:a2:6b:ce:91:82:e4:0f:4c:f0:25:83:
         f8:e4:74:6a:16:3d:b4:a1:50:46:d9:45:ea:ec:67:71:af:9e:
         a7:5b:ef:36:ec:da:57:e5:38:eb:4e:80:5b:10:9d:4c:14:16:
         f3:6d:12:cc:62:f5:11:f3:8b:29:33:37:a9:0d:4b:87:fb:11:
         5e:c5:4a:82:d3:5f:5b:55:5c:bf:7d:64:38:b7:64:8d:28:c6:
         2a:94:01:af:0c:39:03:1c:32:79:84:31:fd:07:79:8a:08:eb:
         c4:1d:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----