Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          aRBlVEpDhJ7mqaHYrLooLN9lHqWHHXSgAZaodnfa/Z8=
Subject key identifier:   5C:0A:01:8E:C7:48:5C:3B:7C:04:EB:A8:3A:51:4C:B5:01:CF:67:7A
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6FFC03455CB461E3129C6408951E6879AA0744A1
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:20 +0000
ROA not before:           Tue 04 Feb 2025 19:52:20 +0000
ROA not after:            Tue 03 Feb 2026 19:57:20 +0000
asID:                     273072
IP address blocks:        2803:cf90:2f00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:03:45:5c:b4:61:e3:12:9c:64:08:95:1e:68:79:aa:07:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:20 2025 GMT
            Not After : Feb  3 19:57:20 2026 GMT
        Subject: CN=5C0A018EC7485C3B7C04EBA83A514CB501CF677A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:3f:f5:8e:d9:28:00:cd:63:da:30:98:f1:
                    13:f5:81:f2:6e:2a:64:16:62:6d:dd:f0:62:42:7a:
                    94:e5:23:17:1a:5a:b6:f2:ed:8c:90:13:a8:33:4e:
                    90:33:1d:21:09:37:96:30:d0:4e:f0:fc:b9:d5:77:
                    00:b8:36:18:4f:55:a5:33:5f:3b:c4:41:0c:85:cd:
                    57:7a:a9:78:eb:76:74:5f:0f:82:4b:f5:9a:0b:5d:
                    ed:3e:f8:03:89:f2:77:dc:3b:bb:75:46:88:84:9e:
                    1f:f6:bc:c7:8d:b9:f1:da:d0:9d:be:3a:1e:1c:eb:
                    e6:cc:93:25:72:d6:dd:ee:00:46:14:0d:79:cc:f8:
                    5a:4e:f5:57:4d:99:69:77:37:9d:a4:8f:06:22:f8:
                    ae:1c:a2:5b:c5:ac:29:3f:88:30:bb:5e:e1:e5:ca:
                    24:92:b1:e6:68:4e:f2:04:cd:be:6c:1d:e8:48:78:
                    57:c5:d8:74:6b:a3:d3:01:e5:47:03:e3:98:38:e5:
                    30:80:e1:47:21:73:fd:e1:20:5d:85:2b:ee:2d:4c:
                    b0:b4:81:4d:3f:37:a1:51:2a:bb:bb:ca:1d:42:12:
                    65:89:2f:71:bf:2e:7a:f1:52:d1:30:f4:6e:97:66:
                    4f:5e:7f:82:1d:ff:c4:65:4b:dc:26:47:79:da:0e:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:01:8E:C7:48:5C:3B:7C:04:EB:A8:3A:51:4C:B5:01:CF:67:7A
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:0e:ff:9c:cb:d0:e4:74:8a:03:5e:7b:71:b6:c1:01:63:
         5d:45:f0:11:10:29:f2:b8:9d:df:ec:d7:7c:b0:d6:7f:fe:4c:
         b0:9e:73:7f:19:f1:22:91:a1:0d:00:34:be:31:91:de:2a:58:
         0a:d9:62:06:fa:56:ea:6c:62:56:53:d5:2f:19:7d:76:2e:0b:
         3f:c7:44:3c:fd:a5:db:8d:7c:57:30:82:89:19:45:ab:31:ab:
         f1:98:4d:45:6b:62:d4:3e:ed:26:c9:ff:97:03:93:b0:8e:03:
         a3:0b:17:1c:d8:0b:28:9a:98:d3:ce:85:3d:88:7f:57:f3:c1:
         2a:93:2d:13:d4:7d:ca:31:57:c5:50:a2:37:7b:6c:c9:5e:aa:
         34:36:0b:c4:b1:cd:52:31:3d:9d:ad:6a:38:c8:34:2a:99:8d:
         9e:64:01:19:61:76:33:a2:50:2e:f3:d4:f1:e7:72:6c:82:6d:
         d5:83:e8:61:ec:c5:ee:8a:6c:64:12:b4:3c:fa:92:ec:ea:6c:
         2a:e0:b7:c8:24:87:42:c5:34:97:cd:30:e0:82:10:56:67:23:
         f7:0d:72:05:dd:db:16:23:56:90:73:41:ca:64:15:61:35:60:
         1a:5d:6a:69:67:37:eb:67:ca:93:a1:5b:6f:46:e4:28:d9:1d:
         80:55:4d:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----