Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          qtHT//JVDI3U7MO/sRkJqiHGiCrm8UbtbTznCLfGa6A=
Subject key identifier:   C4:5D:3D:7E:08:E4:6C:23:24:20:3F:B8:83:28:60:00:DB:02:CB:2E
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       29EE1BFAF97E8132AC87F8C34B5081C54F0B2823
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:21 +0000
ROA not before:           Tue 05 Mar 2024 17:59:21 +0000
ROA not after:            Tue 04 Mar 2025 18:04:21 +0000
asID:                     273072
IP address blocks:        2803:cf90:600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ee:1b:fa:f9:7e:81:32:ac:87:f8:c3:4b:50:81:c5:4f:0b:28:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:21 2024 GMT
            Not After : Mar  4 18:04:21 2025 GMT
        Subject: CN=C45D3D7E08E46C2324203FB883286000DB02CB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:5b:f2:67:0d:89:a7:89:7b:d2:b0:c4:07:
                    4c:4b:dd:f4:7c:d0:f1:2e:63:29:db:65:2b:e4:c4:
                    43:6c:42:20:11:1d:6f:56:bc:c8:28:2d:71:1e:7a:
                    02:b7:af:17:e7:16:8f:bd:8c:71:2e:f7:69:59:a2:
                    e4:4a:ab:e4:a0:e2:a5:f1:84:7b:ae:7e:31:dd:ea:
                    47:16:8a:88:fe:49:1d:f5:d8:42:84:72:a5:49:d7:
                    2d:ae:f2:61:82:70:ef:5d:bf:b2:be:42:e2:83:35:
                    4f:d2:cf:3f:e7:20:bd:8d:a2:83:16:c7:5e:8c:e1:
                    b4:e0:ca:33:f9:de:98:45:81:02:5d:ae:72:c3:10:
                    02:90:cd:ed:5d:4d:09:9e:82:c6:a0:90:dd:12:8a:
                    16:4c:82:3e:17:92:a2:96:9a:50:17:ca:8a:63:26:
                    51:39:26:cf:6f:29:f9:36:75:73:cf:98:ab:74:c5:
                    8d:03:68:21:80:d3:d3:67:57:3c:66:1b:96:d0:d4:
                    92:9b:79:5c:d6:e8:4f:fd:ae:aa:53:b5:13:f6:2f:
                    c2:9b:85:17:0e:e0:8d:5d:61:30:1f:fb:d1:4c:64:
                    64:f0:1c:a9:8f:4b:a3:55:83:f5:91:aa:2d:41:6b:
                    0d:60:18:35:7a:91:be:39:e6:7f:99:18:27:1a:02:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5D:3D:7E:08:E4:6C:23:24:20:3F:B8:83:28:60:00:DB:02:CB:2E
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:58:06:fb:69:25:89:21:a4:23:61:32:db:89:34:b4:5c:8c:
         64:cb:60:91:cf:7e:ed:79:5d:0c:f8:eb:49:e8:e9:74:e7:96:
         49:f7:ab:e9:d2:6b:ef:ca:b9:7a:e1:4f:ee:9c:23:d9:ad:43:
         ba:ab:36:ff:20:11:31:71:a8:95:07:88:17:03:7a:a1:38:12:
         0f:e5:7e:40:55:c5:54:65:4e:1f:86:da:07:8d:79:9e:c9:a0:
         0c:05:5b:e3:e1:65:c9:9d:f8:de:d6:ee:79:3a:e4:29:02:21:
         d8:e8:3f:46:77:9a:ab:5c:ef:05:df:27:d5:ba:2c:ed:f1:e3:
         38:02:46:db:cb:23:09:7d:93:8e:3e:ed:29:01:39:d0:f4:07:
         64:e5:88:db:e6:1c:37:bc:40:64:8b:cf:89:9a:8c:95:28:e1:
         3e:ed:77:5b:a2:0f:a9:87:42:0d:66:43:87:a7:ee:11:02:e2:
         14:d4:fb:72:32:8f:2d:d2:9e:d5:a0:63:61:95:80:56:6c:b3:
         1c:2f:b7:4b:78:6a:8f:af:69:2d:cb:05:c7:2a:5c:01:8b:13:
         e2:39:f5:4d:21:1d:82:f2:02:35:23:c0:4b:f5:d9:ab:d5:01:
         62:e3:5e:d4:7a:7c:8c:1a:1b:fd:29:87:b9:d0:b9:49:8a:ec:
         11:91:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----