Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Vb7gzEdCsPQ/i8/O9DPeAdIPAoNM6tJnD6IPL7FoCA0=
Subject key identifier:   3B:19:D6:E4:D8:7B:77:79:A9:6B:DE:F4:46:FD:A5:A1:CC:8D:AB:10
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       49628FD4F265FF84353253A5A48A2A3F6975D924
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:15 +0000
ROA not before:           Tue 05 Mar 2024 17:59:15 +0000
ROA not after:            Tue 04 Mar 2025 18:04:15 +0000
asID:                     273072
IP address blocks:        2803:cf90:d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:8f:d4:f2:65:ff:84:35:32:53:a5:a4:8a:2a:3f:69:75:d9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:15 2024 GMT
            Not After : Mar  4 18:04:15 2025 GMT
        Subject: CN=3B19D6E4D87B7779A96BDEF446FDA5A1CC8DAB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:c7:fc:59:c2:09:39:c2:f9:67:73:f7:0b:
                    76:a2:10:de:e8:60:3f:28:50:8f:d4:d9:c3:32:7b:
                    94:19:18:a5:1b:13:4e:26:e4:58:d0:dd:6e:7e:33:
                    16:2a:5d:ca:80:7f:e9:7e:62:a2:37:4b:58:24:97:
                    e2:5a:e3:f3:09:16:29:08:19:f1:70:c1:27:ea:4e:
                    59:11:05:3e:d8:d1:4b:ad:0a:38:66:0e:0e:e3:53:
                    f2:02:65:55:e4:e0:ec:57:f5:5c:39:2f:b0:e0:19:
                    66:28:2e:90:e8:12:43:d3:7f:d2:0a:78:71:bd:d9:
                    a7:bb:bf:93:48:7a:fd:93:16:d5:7a:f7:85:5d:33:
                    f7:81:e5:ae:87:8b:02:db:6c:1d:04:47:63:76:c4:
                    07:75:64:3b:8f:2f:86:ab:7c:be:ae:85:d6:59:f5:
                    38:14:cf:8c:49:a9:10:69:ec:a2:2c:62:46:d7:10:
                    c0:11:19:b6:6b:7e:ae:74:1d:22:21:4c:fa:09:f0:
                    ea:75:d6:8c:5b:ba:fe:8c:db:40:36:fb:61:65:de:
                    49:29:47:2f:97:e1:67:94:0e:b7:99:90:0a:88:45:
                    9c:fb:fc:eb:71:b7:90:83:e1:12:db:8a:19:4a:27:
                    b8:c0:58:3d:de:7e:2e:6b:68:74:0c:79:fa:19:3b:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:D6:E4:D8:7B:77:79:A9:6B:DE:F4:46:FD:A5:A1:CC:8D:AB:10
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:b3:26:d0:ba:93:02:e4:e5:76:1b:6b:aa:c0:cd:1e:2e:2b:
         cf:95:f3:e7:c6:76:80:5b:ef:06:08:46:16:54:ac:36:59:63:
         28:8c:18:7e:4f:f9:ee:2a:55:ea:05:f3:69:ce:13:31:b9:2b:
         04:dc:24:67:9d:15:87:47:b5:1d:98:d5:4f:4d:aa:f5:0d:88:
         db:94:99:ea:6f:23:b9:73:54:ed:8b:0f:a0:cd:44:f1:e2:0b:
         99:9c:a5:b0:cf:98:95:26:be:2b:13:36:14:80:50:c3:b4:7e:
         ab:0d:c4:f8:cf:68:62:70:ca:6c:41:b3:fb:3f:02:79:65:bd:
         f7:9b:b4:b4:6d:81:73:24:f5:9b:f0:2a:ba:c9:bd:08:c2:de:
         73:94:aa:d8:94:d9:30:d6:bd:8d:b9:e0:88:b8:db:da:6f:37:
         4a:34:57:78:39:f3:44:25:20:cf:f8:00:ca:89:64:50:f7:48:
         dd:91:9f:8b:5b:bd:be:ca:63:19:8a:ca:c7:f8:5a:61:7f:73:
         bf:65:fb:8d:b1:1b:c3:22:69:b0:18:b9:1a:6f:47:bd:d3:49:
         89:05:c9:d8:3a:14:c3:39:9b:ef:2e:8d:ce:37:cf:bf:6f:d8:
         92:c6:86:8a:f6:24:ed:4a:e6:e5:55:b8:b0:d6:ee:96:04:06:
         31:70:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----