Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          VhaEwWBeB61VENJXp0xL/pWnAIcQhao7YiJPZT4jmb4=
Subject key identifier:   E0:5F:99:81:B3:9D:E6:CA:B0:60:56:B7:93:2D:DF:21:6D:21:39:FD
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       61BAE0327ED904ABF1C595389EFC8AAB1BD38F96
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:02 +0000
ROA not before:           Tue 05 Mar 2024 17:59:02 +0000
ROA not after:            Tue 04 Mar 2025 18:04:02 +0000
asID:                     273072
IP address blocks:        2803:cf90:4600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ba:e0:32:7e:d9:04:ab:f1:c5:95:38:9e:fc:8a:ab:1b:d3:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:02 2024 GMT
            Not After : Mar  4 18:04:02 2025 GMT
        Subject: CN=E05F9981B39DE6CAB06056B7932DDF216D2139FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:71:9f:dd:f7:be:e4:21:b6:f2:59:62:9d:
                    e9:ea:57:84:76:99:f9:33:b1:99:e2:c2:29:58:25:
                    55:5c:2d:7f:ec:63:5c:4e:24:12:4d:26:6c:6b:70:
                    f8:43:bc:95:61:c9:d4:59:c3:94:58:5f:30:6a:1e:
                    c0:d1:8f:97:e9:9c:28:e4:a9:93:37:54:ea:7d:e6:
                    2d:ff:c9:5e:9a:62:68:23:b6:15:b7:9e:53:34:58:
                    fb:ea:4a:6b:27:87:e4:8b:5d:ba:84:ef:47:86:6c:
                    09:3a:9a:05:6e:24:15:51:88:46:6e:09:f8:92:bc:
                    15:d4:f5:dd:a0:d2:6c:0f:db:1a:24:28:68:d6:5f:
                    c9:02:4d:38:d9:81:28:65:ac:36:eb:b3:a5:4d:2d:
                    6f:72:ee:a3:c8:d7:4d:97:a0:cc:7e:30:b6:d6:d4:
                    a3:94:d2:e5:97:14:8e:14:3b:c5:a8:48:0f:c7:21:
                    07:25:7b:65:14:bd:29:82:5b:d3:c9:ca:d8:1b:d7:
                    4c:b0:7f:2e:cd:58:0e:14:de:1f:59:11:95:c2:a6:
                    9e:7b:5e:b0:8b:55:de:a5:10:17:27:07:16:2d:a4:
                    1a:0e:fc:75:39:a9:46:0a:92:a1:bd:1f:43:fb:e8:
                    09:9f:7d:4f:c5:96:f0:f2:3d:58:5f:80:69:72:28:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5F:99:81:B3:9D:E6:CA:B0:60:56:B7:93:2D:DF:21:6D:21:39:FD
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:60:6b:c6:69:62:9f:56:2e:48:b0:13:a6:05:7d:d7:53:
         fc:e8:e5:f8:26:c2:a3:4b:9c:2d:fd:51:af:65:ea:fa:31:ea:
         d4:50:30:00:3f:da:dc:7a:3b:cf:25:19:01:94:d5:87:27:f2:
         7b:91:f1:56:b4:64:1a:f0:8a:ac:75:85:6c:1f:c6:20:b5:19:
         ba:0a:0d:bc:d3:e0:b9:4f:71:22:8a:bb:9c:b6:e4:87:26:52:
         b8:7f:86:65:b6:03:c3:41:c6:83:5b:06:43:b0:75:67:55:8e:
         86:6e:7b:f0:8c:75:44:c0:9e:57:e1:6e:94:6b:fa:a2:49:68:
         6e:e6:5b:3d:d9:42:53:7f:4a:59:8f:0c:4f:08:e5:df:2e:9e:
         92:71:3d:e4:f9:74:9c:14:84:b0:68:55:09:73:f6:7d:77:86:
         ba:22:c5:8d:41:a2:21:59:07:99:6c:d3:db:d4:3f:bf:45:be:
         a5:02:6f:a9:f6:ad:28:29:ac:e9:dc:f2:6a:09:46:80:ba:24:
         1e:57:0e:3d:27:20:c3:b2:b9:05:0d:16:37:20:90:82:d6:c1:
         f9:26:77:74:d4:a8:20:4e:65:a8:b4:0c:1e:71:f3:05:c9:6b:
         01:d1:a6:d0:1a:97:87:7f:b1:ba:13:4e:14:97:39:8e:18:fe:
         6e:c7:36:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----