Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ir9ru78wo/9wt0TtL5L91R/mDG/3H1/8Ctopei2gZck=
Subject key identifier:   D6:4F:E7:C1:E7:07:66:44:A3:27:7A:2D:1F:0C:ED:5E:DF:09:73:30
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       4A5B63BA24EACE58D84308C7E07F107E9775484D
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:34 +0000
ROA not before:           Tue 04 Feb 2025 19:52:34 +0000
ROA not after:            Tue 03 Feb 2026 19:57:34 +0000
asID:                     273072
IP address blocks:        2803:cf90:1100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5b:63:ba:24:ea:ce:58:d8:43:08:c7:e0:7f:10:7e:97:75:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:34 2025 GMT
            Not After : Feb  3 19:57:34 2026 GMT
        Subject: CN=D64FE7C1E7076644A3277A2D1F0CED5EDF097330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:bc:43:a2:89:fe:0d:cb:c5:4c:30:58:5e:
                    46:8c:36:7b:c7:57:67:c7:c7:2b:aa:cc:5b:fa:13:
                    d6:4f:2d:40:f4:0c:80:3a:f7:f9:71:e5:2f:62:2f:
                    72:2e:80:ea:ab:27:df:c1:07:80:2b:9e:0b:0c:31:
                    2a:4a:e0:06:ed:02:67:cc:07:3e:7d:cb:00:54:3b:
                    e9:db:5b:b9:7e:68:71:ab:80:08:3a:74:80:2e:46:
                    09:e2:89:f8:04:55:b2:d9:a3:57:37:64:f1:90:de:
                    07:f5:a3:2d:e9:7d:1f:f3:b1:1c:68:11:24:7d:f5:
                    eb:ec:52:96:79:14:30:85:94:fa:f1:63:8c:8c:f5:
                    6c:ec:50:bb:58:38:2d:a8:25:09:2b:01:56:ed:f7:
                    35:16:4a:fa:5f:15:4f:47:89:7c:f5:e9:3d:c1:ae:
                    35:a0:7d:4b:98:cb:7c:c0:5a:a7:5b:65:4d:53:0e:
                    b5:c7:55:9f:f8:7b:89:4e:7e:73:ae:4a:9a:bb:3f:
                    4a:6b:d8:82:20:7a:c9:a2:22:7f:0c:14:cd:97:21:
                    ae:6d:e0:b9:91:0a:99:1d:fe:4c:32:6a:04:04:58:
                    05:1f:6d:c9:04:f5:d7:53:ce:51:25:8f:23:7b:d0:
                    2e:e6:4d:69:96:85:8c:2b:52:5b:c1:5a:cb:a1:f8:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:E7:C1:E7:07:66:44:A3:27:7A:2D:1F:0C:ED:5E:DF:09:73:30
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:0a:20:08:43:a4:07:1a:ec:e3:b5:cf:e3:ed:85:03:b2:
         48:2f:8f:b1:a7:50:01:18:f2:07:34:42:f2:48:c0:b7:b4:07:
         41:fa:1a:99:5b:d8:0a:3c:71:8e:ec:32:8c:47:f0:de:8b:6f:
         98:56:b6:cb:ac:17:c7:12:7f:11:91:c4:a4:1a:f0:26:ef:d9:
         c3:39:60:6e:8f:1e:9c:33:d6:8d:bf:ff:ec:7c:d1:b3:fe:30:
         3b:f8:36:c9:32:b1:01:3b:65:cf:f5:81:c7:d2:8d:76:f7:10:
         f5:81:03:3e:c1:12:f2:16:0d:4b:27:12:e8:aa:4f:37:81:93:
         2d:2f:57:1a:2a:da:1d:e1:1b:07:e0:3c:fa:21:79:42:4b:66:
         ee:f9:1b:7b:80:20:f4:57:2e:79:48:81:5c:49:46:a2:8f:7f:
         bf:59:ef:40:18:8f:62:8b:ca:b3:f9:2b:e7:e9:b5:86:e9:a3:
         59:9d:39:d9:8d:a1:d5:61:55:83:ab:d8:05:6c:07:18:3b:24:
         cc:6a:30:7e:9e:da:67:9f:fa:a4:85:b0:c5:3b:bc:8c:1e:70:
         21:9b:c2:56:3e:bf:55:c6:c3:09:16:6b:90:e3:25:2c:55:1e:
         8e:71:a9:48:12:05:46:93:74:4d:de:c3:f5:29:6e:28:b2:11:
         59:94:c6:4e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUSltjuiTqzljYQwjH4H8Qfpd1SE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzRaFw0yNjAyMDMxOTU3MzRaMDMxMTAvBgNV
BAMTKEQ2NEZFN0MxRTcwNzY2NDRBMzI3N0EyRDFGMENFRDVFREYwOTczMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQG7xDoon+DcvFTDBYXkaMNnvH
V2fHxyuqzFv6E9ZPLUD0DIA69/lx5S9iL3IugOqrJ9/BB4ArngsMMSpK4AbtAmfM
Bz59ywBUO+nbW7l+aHGrgAg6dIAuRgniifgEVbLZo1c3ZPGQ3gf1oy3pfR/zsRxo
ESR99evsUpZ5FDCFlPrxY4yM9WzsULtYOC2oJQkrAVbt9zUWSvpfFU9HiXz16T3B
rjWgfUuYy3zAWqdbZU1TDrXHVZ/4e4lOfnOuSpq7P0pr2IIgesmiIn8MFM2XIa5t
4LmRCpkd/kwyagQEWAUfbckE9ddTzlEljyN70C7mTWmWhYwrUlvBWsuh+H2FAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU1k/nwecHZkSjJ3otHwztXt8JczAwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QETANBgkqhkiG9w0BAQsFAAOCAQEAMXsKIAhDpAca7OO1z+PthQOy
SC+PsadQARjyBzRC8kjAt7QHQfoamVvYCjxxjuwyjEfw3otvmFa2y6wXxxJ/EZHE
pBrwJu/Zwzlgbo8enDPWjb//7HzRs/4wO/g2yTKxATtlz/WBx9KNdvcQ9YEDPsES
8hYNSycS6KpPN4GTLS9XGiraHeEbB+A8+iF5Qktm7vkbe4Ag9FcueUiBXElGoo9/
v1nvQBiPYovKs/kr5+m1humjWZ052Y2h1WFVg6vYBWwHGDskzGowfp7aZ5/6pIWw
xTu8jB5wIZvCVj6/VcbDCRZrkOMlLFUejnGpSBIFRpN0Td7D9SluKLIRWZTGTg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:12 2025 by rpki-client