Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          a5L1IkhkxhjGoq3R25ZBnckIYtc0X+JPn+DP44Uzc74=
Subject key identifier:   1B:14:75:85:1D:2C:C8:8E:90:60:84:38:AF:81:7D:8F:D3:F7:2A:04
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       2019CF726D7A2788A15E1BAD7D9BE4681D916AF8
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:12 +0000
ROA not before:           Tue 05 Mar 2024 17:59:12 +0000
ROA not after:            Tue 04 Mar 2025 18:04:12 +0000
asID:                     273072
IP address blocks:        2803:cf90:c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:19:cf:72:6d:7a:27:88:a1:5e:1b:ad:7d:9b:e4:68:1d:91:6a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:12 2024 GMT
            Not After : Mar  4 18:04:12 2025 GMT
        Subject: CN=1B1475851D2CC88E90608438AF817D8FD3F72A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:dc:e8:b0:5c:7b:db:d6:0f:d5:13:11:cd:
                    99:e8:60:ba:d9:77:e6:b9:37:40:61:b3:62:29:cf:
                    05:78:36:d7:87:d3:3c:50:93:1a:50:2b:a0:42:78:
                    ef:e6:1a:41:37:4b:98:63:32:95:d5:e2:1b:6d:4d:
                    cb:94:cf:26:f0:55:a1:e8:8a:ec:c2:fb:bf:8f:f2:
                    96:56:a4:49:4d:7e:de:c4:40:12:53:f9:07:0e:e3:
                    df:3c:d7:cf:79:a5:5d:0d:2b:90:da:44:97:6a:b1:
                    ec:f0:bd:8b:ce:06:a9:a7:07:f4:0e:23:41:e6:03:
                    6b:0a:8c:c2:3d:f9:52:0a:7c:cb:6e:cb:5a:f2:39:
                    81:b8:ee:00:a9:73:91:83:0f:a7:75:d5:01:b6:05:
                    e8:ca:38:ac:86:0a:2b:49:86:9f:2f:03:cc:1e:49:
                    a4:0a:5b:9a:35:c7:67:de:96:56:8a:1e:c3:4c:b6:
                    e6:6e:fb:3c:23:27:4d:f8:30:54:f8:ff:f8:2c:a5:
                    95:b2:3e:4f:58:df:bc:06:df:3a:9a:5a:aa:01:26:
                    8a:09:6c:38:65:86:6d:86:ed:a8:82:16:23:8c:dd:
                    a0:de:7d:8a:69:cc:d8:3c:d8:fd:b9:af:9c:cc:68:
                    49:ad:63:6a:c1:5a:e5:54:3a:e3:57:0c:ba:43:0d:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:75:85:1D:2C:C8:8E:90:60:84:38:AF:81:7D:8F:D3:F7:2A:04
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:7c:70:aa:16:89:e4:ea:7e:b4:fb:07:7e:0d:e7:f3:43:
         12:2e:2e:27:41:3c:b6:70:31:5e:0e:18:bd:6f:b3:48:22:02:
         c8:33:c9:db:ef:3c:b0:dc:ac:7c:e6:db:ea:5a:fe:b1:5b:1b:
         a4:f7:ab:fe:1b:da:46:0f:f1:36:30:12:26:d2:06:a0:f5:91:
         28:ce:e8:30:ef:78:b6:4a:47:2e:bf:5d:80:52:11:f7:59:1c:
         6e:12:91:b5:e3:9e:5b:0e:a2:c0:41:56:e2:3d:f8:1d:2b:d7:
         25:ca:64:49:55:2a:06:54:1a:8a:69:c0:9f:b6:05:1b:78:86:
         d4:d6:a3:1b:eb:ab:53:a0:91:72:eb:7d:96:49:15:de:42:4d:
         46:5e:03:b1:71:4f:8f:37:52:0c:7f:a7:2a:99:1e:18:e3:0d:
         5f:fd:fd:d4:a9:18:9e:5d:05:2e:3b:b3:a4:27:8a:e0:63:ce:
         08:8a:a3:1d:91:48:82:50:d7:bd:87:68:30:27:2f:8b:bf:b3:
         40:1d:ce:49:2e:8e:9d:83:44:24:e2:bb:7d:cb:d2:d6:40:67:
         58:9e:91:39:fd:47:b3:11:e9:cd:78:ab:b9:3b:c6:37:aa:ac:
         18:39:83:41:87:fe:58:d3:56:fc:86:ce:f0:dd:bf:76:7c:26:
         fa:68:b8:f9
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIBnPcm16J4ihXhutfZvkaB2RavgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MTJaFw0yNTAzMDQxODA0MTJaMDMxMTAvBgNV
BAMTKDFCMTQ3NTg1MUQyQ0M4OEU5MDYwODQzOEFGODE3RDhGRDNGNzJBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN9zosFx729YP1RMRzZnoYLrZ
d+a5N0Bhs2IpzwV4NteH0zxQkxpQK6BCeO/mGkE3S5hjMpXV4httTcuUzybwVaHo
iuzC+7+P8pZWpElNft7EQBJT+QcO49881895pV0NK5DaRJdqsezwvYvOBqmnB/QO
I0HmA2sKjMI9+VIKfMtuy1ryOYG47gCpc5GDD6d11QG2BejKOKyGCitJhp8vA8we
SaQKW5o1x2fellaKHsNMtuZu+zwjJ034MFT4//gspZWyPk9Y37wG3zqaWqoBJooJ
bDhlhm2G7aiCFiOM3aDefYppzNg82P25r5zMaEmtY2rBWuVUOuNXDLpDDSUXAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUGxR1hR0syI6QYIQ4r4F9j9P3KgQwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhNjMz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPPkAwwDQYJKoZIhvcNAQELBQADggEBAEvzfHCqFonk6n60+wd+DefzQxIu
LidBPLZwMV4OGL1vs0giAsgzydvvPLDcrHzm2+pa/rFbG6T3q/4b2kYP8TYwEibS
BqD1kSjO6DDveLZKRy6/XYBSEfdZHG4SkbXjnlsOosBBVuI9+B0r1yXKZElVKgZU
GoppwJ+2BRt4htTWoxvrq1OgkXLrfZZJFd5CTUZeA7FxT483Ugx/pyqZHhjjDV/9
/dSpGJ5dBS47s6QniuBjzgiKox2RSIJQ172HaDAnL4u/s0Adzkkujp2DRCTiu33L
0tZAZ1iekTn9R7MR6c14q7k7xjeqrBg5g0GH/ljTVvyGzvDdv3Z8JvpouPk=
-----END CERTIFICATE-----