Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          oMjqAlWpLKgfMylHMZCInKUw0OWsILxyHZo2MgG67zE=
Subject key identifier:   52:76:96:BE:95:1E:26:6E:73:B0:E0:1B:C1:EF:39:1F:BB:74:A3:30
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7E1302BF442BF2F32EB2679BD963019F9DBEEC49
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     273072
IP address blocks:        2803:cf90:500::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:13:02:bf:44:2b:f2:f3:2e:b2:67:9b:d9:63:01:9f:9d:be:ec:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=527696BE951E266E73B0E01BC1EF391FBB74A330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:d8:35:55:ed:ee:fa:28:e8:e7:45:16:95:
                    f8:35:1a:dd:4d:24:20:7b:96:b5:f5:41:37:b5:df:
                    89:10:b8:0f:0d:a1:d8:15:f3:13:59:51:9a:c7:f1:
                    b0:80:31:42:bd:ab:be:9c:7c:2e:ff:ec:13:33:fc:
                    2e:f8:36:30:cf:c3:e7:2e:7a:d1:ac:25:d0:ae:0b:
                    07:53:0a:0c:9b:84:a7:cb:a6:9d:60:10:b3:04:29:
                    b6:cd:73:3c:57:a8:c8:29:0b:23:8f:1b:79:e2:e6:
                    91:a2:f1:e4:c1:d6:1a:52:a4:ae:78:9d:78:89:d8:
                    19:30:ad:8e:85:7c:3f:68:8e:aa:7d:16:b3:0e:76:
                    a7:16:e9:f4:77:0f:35:17:38:04:85:c7:59:07:87:
                    b5:2e:6a:a9:c8:fe:51:c2:be:47:59:86:22:4a:bf:
                    df:78:cf:b7:7d:0b:ea:8f:2e:ca:fc:b4:5b:94:95:
                    5e:2e:1c:a0:9a:cc:c0:06:af:d1:ac:8a:4e:9d:b3:
                    5e:6d:fe:6c:47:58:56:6e:97:4f:6c:eb:96:ab:62:
                    bb:d0:a0:5b:17:a4:6b:be:c5:81:c8:80:12:61:2e:
                    c9:bf:3e:be:5b:d6:71:ed:a7:94:f1:41:3c:8d:68:
                    91:24:46:85:3a:72:a6:00:4b:cf:4d:40:ac:f4:fd:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:76:96:BE:95:1E:26:6E:73:B0:E0:1B:C1:EF:39:1F:BB:74:A3:30
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:82:9b:06:28:0f:e5:b4:22:b2:6a:81:be:f4:d9:7c:6c:c4:
         28:ac:82:06:76:8f:42:f1:e2:a7:8a:81:9f:e1:3c:b6:26:02:
         20:e6:ec:0c:12:85:fd:21:e2:2e:28:e0:f8:a9:85:9c:16:f5:
         a3:9b:14:d3:02:72:44:85:e4:bd:16:2b:62:46:36:6a:d5:a9:
         8c:4d:2c:bd:ad:6a:bb:d0:81:70:0e:6f:82:b1:3c:7b:74:d8:
         bb:13:3f:c6:77:2f:92:18:1a:e0:44:5d:72:03:19:e2:f9:e9:
         f4:b3:3c:59:0a:8d:c4:0d:1e:96:2b:de:79:f2:fb:e9:7d:fb:
         51:bc:1d:85:63:ab:43:10:dc:78:e1:66:d6:80:08:f1:cc:e7:
         95:b4:47:13:42:33:ad:35:b8:6f:8c:14:16:19:2a:08:4e:af:
         87:15:3b:f9:16:5f:2a:04:ed:50:21:48:5a:13:92:34:a2:4b:
         a4:2f:33:45:91:4c:59:13:b4:12:fe:30:42:09:5b:31:52:61:
         7d:75:e8:f4:26:3f:3a:de:7e:f3:43:b6:35:6e:9b:e7:a6:4a:
         15:56:e6:e9:c9:b0:af:2d:bb:57:0d:36:6f:9e:93:b7:a4:f7:
         96:3f:5e:61:ce:3b:47:7c:f8:77:b7:e7:24:6f:28:93:44:91:
         67:5b:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----