Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          sUOr32UK3uG4G0Z/38zJv+sG9aOUxT4Xz5sSObscPqI=
Subject key identifier:   D8:49:0D:08:D5:6D:24:40:9A:81:4B:9B:EB:80:7C:88:04:4F:CA:68
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       292FB22A1C3316D4B26CDABE92F45FF4B9333F71
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:18 +0000
ROA not before:           Tue 05 Mar 2024 17:59:18 +0000
ROA not after:            Tue 04 Mar 2025 18:04:18 +0000
asID:                     273072
IP address blocks:        2803:cf90:1800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:b2:2a:1c:33:16:d4:b2:6c:da:be:92:f4:5f:f4:b9:33:3f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:18 2024 GMT
            Not After : Mar  4 18:04:18 2025 GMT
        Subject: CN=D8490D08D56D24409A814B9BEB807C88044FCA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:d4:ee:0f:77:4d:6d:d1:7e:48:a5:15:b4:
                    51:87:8c:ab:e4:a1:49:18:6c:92:3e:e0:bc:50:b3:
                    3e:43:f0:1f:69:14:b1:10:05:58:54:2e:8c:8c:bd:
                    dc:1e:9e:16:00:b6:b9:ab:5b:ff:6c:d3:23:0f:3f:
                    90:30:d3:79:2c:8d:e0:6e:0f:1e:3c:06:7e:f2:f9:
                    aa:e9:2b:f3:49:fc:77:72:f9:8f:35:c3:96:16:2e:
                    21:ad:12:bf:e1:a8:35:2d:b7:4c:bf:8d:6d:06:4d:
                    c2:49:fb:5f:4b:63:74:9e:2a:66:57:67:2d:79:08:
                    26:14:be:2b:e6:a3:21:c8:54:a1:54:20:93:69:40:
                    48:24:26:3d:fd:83:78:3a:b5:3a:e2:f5:b3:c8:c9:
                    b8:2b:e5:c0:e4:92:ce:0a:59:e5:4c:f5:1d:bc:68:
                    42:d9:1b:1e:ce:ab:af:53:1d:33:d4:af:2d:44:2a:
                    4f:54:b8:93:8b:59:45:ce:b4:86:e8:a3:17:65:3f:
                    2b:f7:2a:3d:ac:f2:0a:f1:99:c9:42:cc:6d:c2:07:
                    6a:30:00:60:93:1e:cc:b7:d4:d4:02:dd:b3:d1:6b:
                    c1:b4:f9:8c:a6:66:68:53:36:f6:bc:67:ba:34:ea:
                    1f:2b:c8:bb:f5:9f:b8:3a:f8:ac:9c:c9:9d:19:b1:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:49:0D:08:D5:6D:24:40:9A:81:4B:9B:EB:80:7C:88:04:4F:CA:68
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:fd:62:48:32:77:be:65:81:cf:83:4a:ae:30:0a:7c:79:
         e3:2e:df:cf:2b:ab:a7:b9:3b:34:3c:12:7e:c4:56:f3:85:59:
         30:36:3f:cd:28:d6:34:fd:5d:a0:20:85:3f:dd:0b:7d:dc:53:
         90:6e:65:51:da:db:85:c6:13:5c:9e:0d:ea:80:9f:7e:b0:60:
         b7:86:ac:83:54:fa:39:d3:ab:e8:4b:68:42:1c:85:06:42:ac:
         0c:e5:e4:f8:29:d4:0e:0f:2b:37:15:6f:9a:f8:50:26:4a:00:
         16:6e:c0:35:9c:e8:fc:59:6d:b0:b4:c5:35:b4:5a:fd:36:7b:
         b8:a5:e6:36:dd:e5:a5:7e:53:93:85:d5:8a:c9:99:89:83:c3:
         9a:46:03:03:ff:24:4d:ad:8b:4a:06:38:41:74:68:af:e7:b4:
         ea:0b:a9:e3:78:c0:e2:65:28:b2:df:d6:3f:27:18:80:54:7c:
         98:23:b2:f2:84:b0:96:d8:61:e1:33:0e:b4:4e:3f:5e:d1:74:
         53:63:a2:42:b3:ba:ca:33:b5:f6:d2:d2:32:f5:7a:46:a4:61:
         17:f3:2d:b7:61:f5:68:d2:b8:22:25:9c:67:41:26:25:df:df:
         5c:ec:fb:5b:ed:ae:40:47:a9:f6:62:e1:37:d0:14:eb:b7:72:
         5b:39:c4:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----