Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          FuiJglSzs2g4b/8rGXEt7tt2sEn4O0EZpSiO8pSv9dQ=
Subject key identifier:   DA:EC:06:91:93:AC:19:08:D6:D0:AA:19:2C:B7:EA:21:70:4F:0D:CD
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       61DC276E298283FFA1F19F78D3ABACF17F0FD2DF
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:21 +0000
ROA not before:           Tue 05 Mar 2024 17:59:21 +0000
ROA not after:            Tue 04 Mar 2025 18:04:21 +0000
asID:                     273072
IP address blocks:        2803:cf90:a00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dc:27:6e:29:82:83:ff:a1:f1:9f:78:d3:ab:ac:f1:7f:0f:d2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:21 2024 GMT
            Not After : Mar  4 18:04:21 2025 GMT
        Subject: CN=DAEC069193AC1908D6D0AA192CB7EA21704F0DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:f9:75:18:b0:64:51:44:67:e2:b2:4e:49:
                    5d:f1:40:77:48:53:35:c4:f2:23:78:06:38:c2:e6:
                    ce:6f:ee:15:d2:48:46:f6:e8:c3:2b:54:94:07:75:
                    91:6a:02:c1:4c:27:ba:e3:78:07:1f:a4:6b:43:b1:
                    66:ee:76:66:2b:ef:e5:2c:11:91:72:4b:dd:fb:44:
                    8d:df:f6:4f:2e:69:b0:f2:a5:8a:eb:1c:90:41:fa:
                    b0:d1:77:39:ce:30:a2:8a:81:c3:b6:14:88:4d:d7:
                    f4:c5:37:e9:03:c9:4f:5e:79:60:a3:37:09:e9:38:
                    da:69:26:f6:c4:8c:aa:b6:de:c7:31:bc:df:ce:73:
                    3b:a2:2c:c6:0a:15:7d:64:5d:50:e9:9e:c2:df:86:
                    f6:15:6b:5a:4d:08:49:6e:ff:93:13:aa:9a:23:61:
                    58:a1:c5:b1:8a:86:02:ae:f4:d0:ff:7f:56:0a:28:
                    fe:da:9e:bd:b9:50:36:fa:e5:20:58:83:dc:60:77:
                    57:4b:c2:8b:c5:07:97:84:f8:82:76:ca:9e:ed:c6:
                    2c:6e:13:73:e8:43:26:7e:e3:09:da:e8:a5:35:c0:
                    8c:22:3e:1c:44:86:f8:96:a5:f5:5e:ac:1f:02:e4:
                    16:d9:4b:80:07:d7:30:be:02:81:e1:21:fe:1b:b4:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:06:91:93:AC:19:08:D6:D0:AA:19:2C:B7:EA:21:70:4F:0D:CD
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:3c:bd:85:bc:8f:a1:67:d5:df:7b:6c:8c:f0:4f:8e:1c:
         80:60:06:f1:59:12:d0:74:4b:7d:bd:38:fc:e1:a4:b1:34:2b:
         82:c2:ac:54:91:a2:ef:dc:cc:ee:3c:5e:43:ee:87:b1:4b:98:
         53:ba:58:66:d9:e6:75:f7:60:ef:ce:c2:70:44:1e:cc:42:6a:
         51:ed:83:f0:60:84:16:29:89:f1:a4:7b:de:a7:91:d8:7c:9d:
         c4:f1:93:95:14:21:c5:97:66:fd:5b:51:98:a9:47:32:ca:b3:
         93:a9:59:af:09:33:0c:06:c6:99:50:99:ed:3f:c8:4f:01:a3:
         c2:ab:ef:5d:a9:9f:8b:3d:ab:89:e3:5b:26:b4:73:30:f3:6d:
         48:8b:86:4b:b6:09:13:57:f6:6d:3a:7b:7e:ae:49:24:e1:1a:
         ce:6f:98:3d:59:fe:1e:aa:4a:4e:29:85:f5:a6:0e:cc:8d:94:
         f5:53:a7:da:30:2c:fc:21:7a:52:af:6e:a0:20:3d:7c:4c:d8:
         5b:af:63:3c:ed:0c:15:0b:4b:a6:4b:69:80:8b:0c:e1:77:53:
         d8:6e:34:e5:8e:05:a2:be:12:41:75:92:dc:44:a8:fe:55:55:
         c4:b9:93:49:05:1a:55:d0:95:9b:45:ad:25:2d:39:6a:1c:13:
         85:d7:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----