Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          axKr6sCpQ+bi5Twz7nC3DoLuavgKR2qDt/0t4m0qvSQ=
Subject key identifier:   01:4D:8C:A5:F3:F3:36:AB:7A:60:F7:D5:BE:40:4E:59:75:52:B1:5F
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       44B61D3259BC6F50AA2B54C98FEACBA7D005B3DA
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:13 +0000
ROA not before:           Tue 05 Mar 2024 17:59:13 +0000
ROA not after:            Tue 04 Mar 2025 18:04:13 +0000
asID:                     273072
IP address blocks:        2803:cf90:300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b6:1d:32:59:bc:6f:50:aa:2b:54:c9:8f:ea:cb:a7:d0:05:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:13 2024 GMT
            Not After : Mar  4 18:04:13 2025 GMT
        Subject: CN=014D8CA5F3F336AB7A60F7D5BE404E597552B15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:eb:31:d4:9b:f6:a2:a6:d3:b8:b2:1c:2f:
                    91:80:32:be:cb:66:7d:56:0b:b4:3c:3a:00:13:e7:
                    42:f0:57:4c:58:9d:cb:99:d5:d7:fb:3c:b6:2f:0f:
                    82:a5:49:09:40:9a:a7:f2:87:3f:85:11:3f:e9:c9:
                    fb:9f:ee:8a:02:f3:02:70:a6:b9:f9:d4:bb:4c:ca:
                    c1:04:be:c6:98:48:5b:69:ad:c8:c3:35:7c:58:3f:
                    60:e0:5b:fb:5e:2b:91:3d:ba:30:41:d7:54:68:03:
                    4b:0a:3b:e4:32:e9:24:1d:bd:36:2e:fd:0c:08:aa:
                    1f:04:c4:a8:6b:79:0f:b9:f3:04:cb:2a:59:03:b2:
                    f2:9f:29:99:25:85:e7:67:cc:47:b5:84:50:7b:dd:
                    dd:25:d3:23:a8:82:9c:89:65:53:b5:18:44:8b:f0:
                    43:94:1c:de:dd:5c:f3:2d:30:01:d3:0b:1f:67:ce:
                    42:11:40:a4:64:e3:2f:2a:6f:34:b6:c8:00:94:76:
                    71:ac:03:46:39:2f:b8:d9:ee:65:fd:8d:43:c5:df:
                    0a:23:6e:62:94:aa:7d:fb:f0:22:6e:84:89:02:1b:
                    a3:4f:9e:2f:94:c9:58:28:79:af:4b:21:21:31:ea:
                    28:0f:98:1d:01:52:01:9e:62:2d:2d:02:bd:2b:bc:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:8C:A5:F3:F3:36:AB:7A:60:F7:D5:BE:40:4E:59:75:52:B1:5F
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:40:4c:cf:f4:60:63:59:6e:a6:30:d8:db:67:e5:80:66:
         3f:06:b0:87:b1:21:31:45:87:6b:2c:ec:da:3a:75:84:50:c8:
         7c:02:66:75:f4:75:e3:f5:e5:17:5e:f0:c9:70:61:a1:32:88:
         5f:ab:ac:f4:b5:19:f2:24:fd:2b:f4:27:e5:78:0a:56:ba:a7:
         d9:02:48:66:75:e8:d7:42:4e:75:5b:20:9a:23:f6:4a:c7:9e:
         8e:a2:6c:56:a5:3a:d4:2c:71:bf:4d:e3:96:8c:33:09:3a:75:
         6f:01:71:46:f1:29:40:8d:73:69:18:6a:b0:fd:4c:5d:fa:0b:
         36:5b:e6:7e:e9:2b:37:4d:6a:a5:b1:d0:26:50:e1:62:ec:b2:
         18:0e:b5:a8:70:5c:c1:52:03:95:5b:0f:9a:f6:c5:f6:d0:b6:
         9a:e0:54:fb:93:e4:1b:1b:2b:fa:63:bd:71:3e:fa:11:4d:5f:
         b9:d8:62:18:68:b4:a8:63:20:cb:b1:b4:63:c6:cd:da:40:f0:
         f6:75:73:d0:a9:03:04:0f:23:b1:6c:03:c8:02:52:ab:0c:29:
         ed:a4:34:c8:9d:af:0c:81:07:4b:31:20:5c:7b:42:9a:82:e7:
         a9:93:ee:9e:34:56:3d:5f:06:38:a5:90:2e:35:5d:3d:50:a4:
         3e:bc:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----