Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          pZIBjxzxfTlDClHoYgdDUbprZM9Vtw/iAArQTJ2chBk=
Subject key identifier:   B1:50:8D:15:6E:3F:96:C8:D2:53:B0:19:C6:2B:1C:91:BF:62:93:A5
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       62CF2377031A8346D087FF9E11FEB46EAC9DB1A1
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:03 +0000
ROA not before:           Tue 05 Mar 2024 17:59:03 +0000
ROA not after:            Tue 04 Mar 2025 18:04:03 +0000
asID:                     273072
IP address blocks:        2803:cf90:1200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cf:23:77:03:1a:83:46:d0:87:ff:9e:11:fe:b4:6e:ac:9d:b1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:03 2024 GMT
            Not After : Mar  4 18:04:03 2025 GMT
        Subject: CN=B1508D156E3F96C8D253B019C62B1C91BF6293A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:9b:c4:39:23:5c:94:9b:f4:90:ac:e4:e6:
                    b9:ec:1b:47:b8:a9:a6:9f:c0:92:73:e6:30:d7:e4:
                    d9:34:af:a9:ec:77:e8:19:d6:5b:a2:f9:6a:06:1c:
                    7f:65:49:5a:69:78:ca:b1:c9:88:10:76:48:53:79:
                    de:5c:37:11:9a:7e:56:c8:c8:58:ac:ea:d7:77:c3:
                    07:3b:e3:76:ad:13:23:6a:f9:8a:a3:09:ff:db:06:
                    41:7d:f9:86:f1:59:a7:b7:bb:21:c6:0f:84:e3:46:
                    ae:37:e8:28:ac:f6:69:39:dd:19:d1:3a:90:43:d4:
                    df:cf:3a:3b:3e:aa:33:24:d8:ad:95:ef:e6:26:a8:
                    fb:e0:6f:24:ea:d4:e2:6a:82:02:83:ad:08:28:8a:
                    28:40:90:9e:fb:fa:80:a3:f7:8d:cb:ed:ed:7f:d8:
                    0a:91:c6:35:4a:ed:67:a7:30:27:20:e9:a7:12:5c:
                    06:21:5d:d8:c4:67:65:3a:b0:ba:ed:62:83:fc:5c:
                    d6:6d:21:c1:f8:47:b8:d9:1d:1a:b8:36:7e:e2:ee:
                    71:97:c9:ad:fe:5e:1a:84:2b:2d:9d:7e:50:4e:8e:
                    02:65:c9:ee:09:28:e1:3d:29:cb:4e:a6:00:14:fc:
                    f1:e9:95:09:8b:b7:94:4e:e0:cd:92:77:4b:8a:0d:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:8D:15:6E:3F:96:C8:D2:53:B0:19:C6:2B:1C:91:BF:62:93:A5
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313230303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:34:5f:1d:b9:26:7e:da:a2:15:6c:5e:8f:e8:8e:99:b3:6e:
         7b:5a:ab:b3:53:84:fb:04:95:80:0a:83:d1:4b:01:02:fb:5a:
         4b:43:16:30:fa:4b:49:a5:b9:dc:a5:67:bf:f5:fe:00:db:a0:
         80:4d:cb:96:f6:89:bf:a5:87:72:c8:80:2f:83:10:18:66:50:
         e4:57:2c:e2:41:38:07:cb:f0:fa:83:cf:22:0a:e2:4a:e4:85:
         17:3a:83:20:53:a3:41:ab:d5:c1:71:5c:0e:e8:eb:f6:3f:72:
         5d:ef:64:8b:9c:49:02:2f:d8:aa:77:af:77:91:df:ec:c4:a5:
         02:90:0a:84:98:94:94:bd:ac:f8:ef:89:70:9b:75:6f:bb:c7:
         cd:9e:93:c7:40:01:74:51:1d:1a:0d:2f:77:e2:40:ee:bd:95:
         c3:18:86:ea:dc:46:c5:4c:56:0e:41:8f:b1:0a:40:a5:d9:65:
         0a:14:10:27:5c:d1:f9:35:bc:f5:16:93:26:95:7d:f7:3b:37:
         a1:cb:28:e2:94:79:16:71:a1:88:a4:6a:61:98:a3:a4:3e:7f:
         82:95:84:1f:2a:1b:39:94:64:98:26:51:2d:a0:b5:7f:dd:bd:
         6c:5e:32:d0:48:db:40:2a:d3:76:39:a6:ea:fe:70:14:f9:e4:
         8e:85:15:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----