Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          wKP+2oFaxFClKh+s/E/XxYRi5TsvXRKJ68IFNJ9olag=
Subject key identifier:   A3:59:BC:2A:41:35:65:14:F4:6E:83:8D:D6:F0:56:D4:70:2F:14:FE
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       023AB9B9C30DCA3B5D27ABAC916C4A7B595DA71D
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:33 +0000
ROA not before:           Tue 04 Feb 2025 19:52:33 +0000
ROA not after:            Tue 03 Feb 2026 19:57:33 +0000
asID:                     273072
IP address blocks:        2803:cf90:1300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3a:b9:b9:c3:0d:ca:3b:5d:27:ab:ac:91:6c:4a:7b:59:5d:a7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:33 2025 GMT
            Not After : Feb  3 19:57:33 2026 GMT
        Subject: CN=A359BC2A41356514F46E838DD6F056D4702F14FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:9e:6d:98:b2:c3:6d:f8:50:d1:e2:58:95:
                    19:99:1a:39:71:5d:b1:ad:71:a2:c1:81:80:9d:52:
                    08:69:9a:9e:bb:4f:76:91:d6:5b:9f:48:cc:f2:58:
                    b9:c8:f5:83:62:38:4b:19:a1:7c:cf:bc:23:4b:37:
                    d1:53:b6:75:53:29:7c:06:ea:3a:3a:c8:b2:cd:df:
                    8a:8f:58:0f:22:27:8f:fe:12:5f:d8:fd:df:0a:99:
                    18:fb:86:f6:85:77:2c:da:34:94:9c:05:a0:08:a2:
                    81:ad:f6:43:07:58:7d:c7:bc:c9:f3:df:10:cb:2e:
                    91:48:53:c4:01:3e:bb:15:6d:79:fc:42:b8:56:09:
                    18:90:8f:b9:2d:d3:ba:c2:9a:62:71:f5:1d:74:48:
                    ea:b7:1a:68:9d:66:f6:63:0c:f4:87:b5:c1:e3:09:
                    c0:0c:8a:4c:3c:6b:b0:02:3b:ee:8c:78:ad:21:87:
                    e3:81:3c:6d:2b:60:05:f7:a7:2c:f7:e5:63:52:35:
                    52:b5:52:39:13:eb:c4:03:32:d7:37:fb:e1:e9:a9:
                    7b:35:62:ac:5f:d2:4a:f5:4c:e1:d1:f4:e9:b0:4b:
                    ca:73:4d:32:88:13:63:f5:01:65:2d:25:4b:3e:37:
                    dd:aa:4f:71:e8:ce:a1:56:c6:61:21:4f:01:fb:05:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:BC:2A:41:35:65:14:F4:6E:83:8D:D6:F0:56:D4:70:2F:14:FE
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:9a:74:c2:25:50:0d:3e:d3:5b:6c:43:6e:5c:8a:1f:93:
         0b:b3:ad:a0:35:67:09:8b:0c:d0:a9:6d:ed:24:04:b5:77:7b:
         40:73:ad:2a:c9:bb:de:ed:04:73:25:12:f2:b7:9f:71:9e:e7:
         63:4a:b2:53:af:2c:df:a5:44:3b:47:f5:c1:d5:e9:f4:96:d7:
         32:7b:c7:6b:80:e2:54:c9:09:28:9d:54:55:65:11:9f:e4:23:
         c1:dd:ef:c2:8e:28:14:04:58:33:8f:11:a2:56:25:42:6b:9e:
         bd:89:16:af:bb:ae:6f:fb:54:fb:21:45:61:f3:76:8e:35:08:
         7f:77:72:c1:54:a5:24:0d:c3:00:84:23:a5:41:ad:4b:ed:ee:
         89:dc:e0:76:08:4a:2f:2f:cc:a7:7b:9b:09:11:a0:43:08:31:
         e2:03:de:29:a8:05:f6:b6:c5:69:d6:a5:84:98:e3:84:3f:59:
         06:35:94:6f:aa:4f:e5:4b:51:62:72:66:c5:84:ef:db:b5:75:
         a6:96:c3:5c:fb:00:ce:16:b2:bd:5f:67:65:f6:a4:6d:be:3a:
         ae:4c:21:af:ea:7b:76:35:15:a0:d5:57:49:0b:48:63:51:cd:
         96:55:f7:00:f5:88:d0:3c:95:b6:40:80:ef:ad:37:fb:bc:a2:
         d4:9b:63:4e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUAjq5ucMNyjtdJ6uskWxKe1ldpx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzNaFw0yNjAyMDMxOTU3MzNaMDMxMTAvBgNV
BAMTKEEzNTlCQzJBNDEzNTY1MTRGNDZFODM4REQ2RjA1NkQ0NzAyRjE0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7055tmLLDbfhQ0eJYlRmZGjlx
XbGtcaLBgYCdUghpmp67T3aR1lufSMzyWLnI9YNiOEsZoXzPvCNLN9FTtnVTKXwG
6jo6yLLN34qPWA8iJ4/+El/Y/d8KmRj7hvaFdyzaNJScBaAIooGt9kMHWH3HvMnz
3xDLLpFIU8QBPrsVbXn8QrhWCRiQj7kt07rCmmJx9R10SOq3GmidZvZjDPSHtcHj
CcAMikw8a7ACO+6MeK0hh+OBPG0rYAX3pyz35WNSNVK1UjkT68QDMtc3++HpqXs1
Yqxf0kr1TOHR9OmwS8pzTTKIE2P1AWUtJUs+N92qT3HozqFWxmEhTwH7BSGJAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUo1m8KkE1ZRT0boON1vBW1HAvFP4wHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QEzANBgkqhkiG9w0BAQsFAAOCAQEAn9uadMIlUA0+01tsQ25cih+T
C7OtoDVnCYsM0Klt7SQEtXd7QHOtKsm73u0EcyUS8refcZ7nY0qyU68s36VEO0f1
wdXp9JbXMnvHa4DiVMkJKJ1UVWURn+Qjwd3vwo4oFARYM48RolYlQmuevYkWr7uu
b/tU+yFFYfN2jjUIf3dywVSlJA3DAIQjpUGtS+3uidzgdghKLy/Mp3ubCRGgQwgx
4gPeKagF9rbFadalhJjjhD9ZBjWUb6pP5UtRYnJmxYTv27V1ppbDXPsAzhayvV9n
Zfakbb46rkwhr+p7djUVoNVXSQtIY1HNllX3APWI0DyVtkCA7603+7yi1JtjTg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:43 2025 by rpki-client