Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          1VLYiQp6r/adpzfmMaRTLXo+UuK5ssknNgHfAYn1wzk=
Subject key identifier:   61:8B:66:11:31:D2:1C:2F:89:21:0D:89:7D:D4:2E:B3:67:8D:1A:17
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       515DD7D08E1E187988F5DE85DCDF4717B4CD0F05
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:10 +0000
ROA not before:           Tue 05 Mar 2024 17:59:10 +0000
ROA not after:            Tue 04 Mar 2025 18:04:10 +0000
asID:                     273072
IP address blocks:        2803:cf90:4800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:d7:d0:8e:1e:18:79:88:f5:de:85:dc:df:47:17:b4:cd:0f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:10 2024 GMT
            Not After : Mar  4 18:04:10 2025 GMT
        Subject: CN=618B661131D21C2F89210D897DD42EB3678D1A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:27:e4:e6:d2:c3:75:bf:46:b5:30:23:8e:
                    28:09:ee:9b:4a:e8:39:82:ee:b5:f5:bf:a8:a6:05:
                    25:3b:8b:5d:66:f2:2c:06:c4:3d:f5:42:2a:c5:eb:
                    8e:5c:5e:d5:d6:41:67:0d:44:dc:7f:0f:b8:83:f4:
                    2d:99:cc:fa:94:5a:1c:3b:fb:1b:f9:f0:ba:07:2a:
                    9b:37:65:60:65:c7:72:ac:d9:c6:b6:9d:ef:b0:a6:
                    4f:70:64:59:b4:ea:4d:9d:20:d9:a1:ec:09:70:88:
                    fc:fc:d5:ac:1b:51:3f:40:66:78:d5:a3:08:3d:63:
                    c7:23:25:f1:7b:b6:04:77:00:66:df:0e:80:a3:83:
                    2f:a5:55:2d:86:51:23:3f:1d:b7:2d:36:e4:b3:ae:
                    94:81:9f:5e:18:3f:92:15:09:8e:b4:3b:23:8f:6a:
                    1a:27:c7:e8:48:fb:4d:3a:20:97:ed:c4:3c:66:f9:
                    21:67:13:27:36:cb:8d:47:36:04:18:5e:87:5d:c3:
                    ec:1b:a0:d8:d2:a1:49:14:8c:6f:13:d0:f8:62:c1:
                    a8:47:9e:c2:4a:f2:35:e2:d3:f0:fe:39:b2:66:76:
                    4c:ec:d5:df:ae:4a:87:1e:5a:86:37:74:e2:c2:ad:
                    ca:7f:f9:c5:7f:d6:0a:2c:70:a4:fe:d8:20:70:3d:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:66:11:31:D2:1C:2F:89:21:0D:89:7D:D4:2E:B3:67:8D:1A:17
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:58:86:8a:7a:fe:2b:2b:ca:e7:96:bd:4e:62:76:79:dd:60:
         0a:da:aa:d7:1d:42:d7:75:c1:ec:7f:4a:ef:82:41:b0:22:83:
         8c:ac:8c:46:25:94:df:11:3e:f8:40:ef:d0:05:02:c1:bd:71:
         e4:20:ad:ba:f9:47:68:f3:c7:53:c3:f1:f7:bc:b9:9c:86:bf:
         d3:ce:28:68:ea:73:35:5c:51:8c:b5:d4:d4:b3:a5:78:1c:24:
         aa:a3:18:f5:87:60:00:12:43:f6:ab:ed:10:47:a5:81:cb:e7:
         75:8d:cb:d3:0e:40:ae:c0:42:47:61:09:e6:e4:23:78:fa:6e:
         18:0f:61:e5:1b:cb:69:7c:53:9b:c4:43:16:d5:7c:42:a2:a0:
         8c:34:74:61:b6:3b:2e:4f:71:b3:67:4c:e9:f5:71:a0:d0:0d:
         f3:32:b7:39:20:22:ae:dc:cd:16:f3:c9:29:74:a5:19:1a:3d:
         93:d0:b2:18:c2:40:7f:c5:a0:8b:a4:39:64:2f:bb:f5:3a:bf:
         2c:e2:78:a4:71:9c:e7:86:3f:54:29:eb:13:bf:10:e2:76:e4:
         3c:42:3b:1a:90:69:7f:2a:b4:b8:bb:a6:c3:25:0d:7f:7a:01:
         4d:b9:27:08:41:8e:c8:0a:bd:bd:5a:2f:35:5b:c4:0e:a3:18:
         3a:4f:a5:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----