Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          MufNarW2ymZhqsOHQgT91DFmmzYgLuN73qd2x1xYQyk=
Subject key identifier:   D6:DC:74:BF:9E:E7:87:16:AB:4B:7C:89:76:FD:E8:2B:0A:26:8F:A9
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       08AFC03BB4A877DE193FE47CBD7E23FE8D4472D6
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:08 +0000
ROA not before:           Tue 05 Mar 2024 17:59:08 +0000
ROA not after:            Tue 04 Mar 2025 18:04:08 +0000
asID:                     273072
IP address blocks:        2803:cf90:4100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:af:c0:3b:b4:a8:77:de:19:3f:e4:7c:bd:7e:23:fe:8d:44:72:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:08 2024 GMT
            Not After : Mar  4 18:04:08 2025 GMT
        Subject: CN=D6DC74BF9EE78716AB4B7C8976FDE82B0A268FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:aa:27:1d:46:d4:cd:43:55:29:7c:a0:7e:
                    4b:1a:44:c9:19:71:43:08:86:3e:e0:a0:b9:fb:da:
                    c8:a2:da:c0:8d:20:6e:21:8b:4e:cf:ce:b2:7a:a7:
                    93:82:d9:4b:cd:71:3e:c5:84:2b:0d:a7:8b:59:eb:
                    28:0d:a2:94:f3:7d:e6:6b:7d:58:a3:10:8f:d9:aa:
                    29:cb:81:92:47:03:8d:94:a4:8a:92:f9:a0:e4:a3:
                    ab:bc:f1:63:ee:ff:47:92:18:68:5b:83:61:33:3d:
                    e4:9a:ea:cd:60:59:b8:99:f3:75:c7:b4:a8:24:9f:
                    b3:0b:e4:4c:15:bf:9c:69:0b:6b:27:45:f8:e9:21:
                    e5:40:18:1d:df:93:ee:35:b8:54:08:1d:88:91:a9:
                    8a:23:97:2d:fd:69:1d:c5:6e:3f:41:8e:3b:d9:5e:
                    e2:e6:fb:85:57:af:40:5d:62:94:73:34:38:aa:d8:
                    ec:cd:ac:39:0d:9f:51:29:2f:72:39:f7:52:d4:99:
                    53:f4:fc:e8:34:ed:b5:ba:1d:0d:16:b4:36:c3:16:
                    4f:d2:05:1f:38:25:cf:b5:70:b4:7b:48:40:b3:67:
                    bf:3d:bf:18:cd:80:52:8d:b9:ca:cd:88:c0:48:28:
                    90:6f:42:ef:43:42:41:9b:6f:c9:cb:45:8e:41:cc:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DC:74:BF:9E:E7:87:16:AB:4B:7C:89:76:FD:E8:2B:0A:26:8F:A9
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:01:93:8c:f5:b6:4d:ca:36:ed:2f:52:6f:85:ac:a7:fe:fe:
         66:45:a5:e7:eb:0f:10:13:0a:ba:89:32:52:0c:08:74:e2:70:
         d2:59:ed:b5:bd:b9:7e:b8:d2:45:df:67:f3:8a:7e:27:58:5f:
         59:59:6c:72:4c:ce:74:ec:85:67:3e:50:46:94:90:20:36:df:
         07:cd:a6:d4:de:af:b4:29:9c:a9:a7:c6:40:85:5e:b2:1d:e7:
         69:5e:4a:6a:5b:a8:7f:cd:78:c2:0e:12:3e:94:f0:86:e9:5e:
         78:d9:20:e3:1d:7f:0a:1c:dc:ed:4d:93:5d:28:df:b6:0f:ec:
         2b:38:bf:bd:99:cc:bd:9d:8e:0a:57:e0:48:78:a0:c2:21:cf:
         bd:10:22:4c:9a:89:62:e8:9e:be:f8:83:68:26:4d:36:31:8e:
         3e:d9:df:59:bd:55:c6:f1:2d:a5:c5:9e:bc:af:40:a9:06:43:
         4e:ba:0d:2d:b4:ec:43:6d:e3:3c:cd:d2:cf:f1:bf:15:e0:1f:
         8d:19:32:60:11:3e:2d:80:e1:23:58:4a:f2:16:48:08:91:93:
         c7:d6:dd:93:8e:55:24:40:f1:3a:2b:30:ff:a0:41:20:67:2c:
         21:90:de:19:29:b2:1d:86:df:0e:e2:84:2d:4f:90:8d:8e:b9:
         4f:77:9a:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----