Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          MdLBViow0SulaWgXjj+5FH97zslhjSaoq+mgKkgY4Xw=
Subject key identifier:   44:83:4E:2B:66:79:01:9D:72:97:91:24:A7:4B:86:4D:8E:3D:4C:8C
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       121D92002550B307D16CB7519AE4A822BCDAB97C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:00 +0000
ROA not before:           Tue 05 Mar 2024 17:59:00 +0000
ROA not after:            Tue 04 Mar 2025 18:04:00 +0000
asID:                     273072
IP address blocks:        2803:cf90:3c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:92:00:25:50:b3:07:d1:6c:b7:51:9a:e4:a8:22:bc:da:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:00 2024 GMT
            Not After : Mar  4 18:04:00 2025 GMT
        Subject: CN=44834E2B6679019D72979124A74B864D8E3D4C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:5c:22:30:21:b6:e0:cf:6d:8f:e2:cb:e7:
                    29:1f:cf:be:aa:94:ef:02:2e:68:08:c3:00:28:89:
                    bc:08:29:d6:8d:25:47:31:83:6f:68:71:f8:3a:40:
                    8c:cb:b8:6c:ca:7a:fb:31:a0:63:04:5c:56:91:2a:
                    7b:ef:5f:16:1a:c6:32:81:06:a0:07:8e:e1:cc:1b:
                    3c:0d:d1:ec:c3:98:fc:4a:de:78:32:8c:4c:67:6e:
                    5c:e6:d5:af:2c:52:33:fd:e7:90:f6:8d:6a:e6:6b:
                    1f:66:d4:8f:ea:8a:79:da:05:03:7f:ae:f5:d4:a0:
                    2b:56:36:d4:88:88:b2:92:c1:6c:48:63:0c:a1:98:
                    c1:04:0f:04:3f:d3:ae:7f:c2:1a:d8:b1:4d:ea:66:
                    0e:b6:de:7a:53:c5:1f:05:73:13:00:95:00:2a:d5:
                    8f:6f:46:17:19:53:d3:b8:8d:dd:06:91:c6:5f:43:
                    c9:67:e0:a6:cb:6a:62:96:a5:5b:15:c8:35:06:71:
                    ae:2b:88:ce:b0:18:d7:03:39:de:6a:18:83:eb:85:
                    62:82:f2:ee:de:b8:c4:3b:40:77:5f:a8:54:4a:8e:
                    8e:34:5a:6c:41:e4:86:ea:f3:df:c0:0d:c3:74:e0:
                    f2:83:da:9f:fd:89:96:e4:bd:e8:0c:90:a3:e9:a0:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:83:4E:2B:66:79:01:9D:72:97:91:24:A7:4B:86:4D:8E:3D:4C:8C
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:c9:33:c1:89:4d:32:14:cf:ca:76:fa:21:4c:2e:bf:43:
         3d:1c:8f:3a:d3:7d:f4:1e:24:80:62:21:eb:b8:b8:ca:8e:b4:
         19:78:2c:61:ac:1c:7f:1c:2e:0d:21:b3:d0:9b:ae:ff:af:86:
         74:a5:6d:3a:5f:c0:95:fb:c5:5e:8a:aa:39:15:f5:1c:d6:d0:
         68:26:08:1f:ca:10:66:ab:c0:16:d2:20:d6:06:31:4d:7f:30:
         6e:50:cd:c3:5b:bf:6c:ab:f9:61:17:25:5b:e1:ef:48:bf:63:
         82:5a:19:eb:72:bd:65:0f:51:89:2f:ef:47:3e:b0:2a:da:f1:
         01:a9:10:49:bd:49:d8:20:96:64:51:1f:a8:66:ff:66:ab:88:
         5f:e3:bd:99:dc:5d:df:e2:b5:48:76:1a:d1:de:a7:79:ec:7c:
         43:a4:48:cb:5a:28:77:a0:92:4a:63:4d:30:09:b2:41:dd:f2:
         73:f5:66:6e:6f:c2:38:20:0a:24:44:e6:1b:a0:17:8b:27:a1:
         69:e7:47:86:0a:16:74:e5:42:e5:52:6d:aa:3d:00:15:47:f9:
         08:05:4d:2e:4a:45:e0:8e:8d:c8:b0:69:b3:ca:f3:49:22:75:
         f9:36:b3:5c:ba:15:4b:1a:8c:1c:94:94:5d:b5:82:7d:e9:8b:
         d6:c6:9d:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----