Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          bDIrPuXEEPjoPf9lpctsqNSfd1o1TSfGLKT4M4CEXVY=
Subject key identifier:   32:5A:9A:AC:6D:3B:82:B6:B2:7D:DF:73:AA:21:8C:1C:4E:42:0B:07
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7FA31EC0ED4BA4654A58CB68789665B419C47A4E
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:02 +0000
ROA not before:           Tue 05 Mar 2024 17:59:02 +0000
ROA not after:            Tue 04 Mar 2025 18:04:02 +0000
asID:                     273072
IP address blocks:        2803:cf90:3900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:1e:c0:ed:4b:a4:65:4a:58:cb:68:78:96:65:b4:19:c4:7a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:02 2024 GMT
            Not After : Mar  4 18:04:02 2025 GMT
        Subject: CN=325A9AAC6D3B82B6B27DDF73AA218C1C4E420B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:4c:d7:bb:73:6d:50:6d:ad:33:6c:c0:2d:
                    af:3d:d8:76:36:88:30:db:2b:b8:50:9c:6f:ac:c2:
                    50:5a:45:26:13:96:cf:ba:2b:65:ce:11:85:ba:2b:
                    b0:2f:73:b0:2f:a5:69:3d:24:01:d9:63:c7:d6:c0:
                    20:bb:d6:12:b4:2a:b0:09:4c:b0:ff:a1:0b:51:4f:
                    f4:12:23:e5:62:60:79:a1:20:ec:24:0f:7c:45:3c:
                    8a:d3:25:9e:e4:c1:91:5b:18:55:b1:46:a8:a2:0c:
                    e6:a9:cb:37:09:75:07:cf:ef:da:64:74:13:2d:d5:
                    d9:f6:be:9b:ac:b7:b2:c9:e6:75:d0:af:f1:42:f0:
                    18:44:6b:42:52:58:c6:11:7d:f7:21:2e:7a:51:25:
                    4f:d4:b2:5e:ec:03:74:13:76:35:8d:5b:02:6a:0c:
                    ab:48:44:62:72:2c:e6:28:a3:f8:6c:98:93:51:35:
                    82:a7:a7:e3:eb:c7:cd:26:03:0a:38:24:a4:af:10:
                    1f:49:22:0e:91:f4:ea:fd:f1:4d:f7:d7:48:82:82:
                    16:e9:45:6b:25:00:0c:9f:6a:83:76:dc:9e:a7:28:
                    b4:cb:b3:9b:a6:c1:48:e3:ee:b6:d8:6b:b9:e5:95:
                    a4:8a:83:c7:e2:cf:68:67:e9:f3:59:d7:c7:98:48:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:9A:AC:6D:3B:82:B6:B2:7D:DF:73:AA:21:8C:1C:4E:42:0B:07
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333930303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:94:77:e5:c7:7e:f1:ea:a4:ba:5a:1f:52:05:07:0a:50:
         67:7a:d9:2f:cf:a5:26:cb:e5:6d:53:38:6a:19:e3:9a:c9:e9:
         5d:5b:93:78:75:88:5f:b1:69:10:47:0a:a0:40:33:7b:74:92:
         40:c0:b5:6b:d1:7b:6d:c0:35:3b:ce:9d:e8:fd:19:d4:7a:e7:
         84:ed:42:c1:6f:d5:0f:73:4c:d2:79:4f:4b:ef:1c:ed:ca:9a:
         b0:bd:dd:af:3c:23:31:09:a5:3c:92:a5:30:60:ef:78:55:fa:
         7f:06:93:92:41:d3:82:9d:b1:3c:39:a2:6d:a7:91:11:79:ca:
         2e:94:71:58:a0:e0:3d:b7:1f:ba:e8:5a:24:5d:43:5e:1d:ec:
         79:f3:b3:d4:74:ec:ff:1c:8e:6d:c1:d3:39:11:f5:63:2e:12:
         95:61:f5:95:ed:5d:15:d2:8a:49:46:37:65:22:89:36:99:22:
         dc:aa:9e:c2:13:2b:80:e1:ea:6a:aa:86:0f:18:0b:95:d1:9a:
         eb:84:1f:e3:cd:bb:5b:60:1d:4b:54:6b:6f:8c:5c:c2:25:f4:
         12:94:6a:3a:d5:a2:13:00:17:aa:bb:8d:3c:f9:67:45:9a:5c:
         5d:11:ea:ff:07:bc:7a:34:77:52:a9:77:82:67:1a:95:ff:59:
         7f:ab:c0:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----