Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          5e5WfBKGXFzJswTwvND5F1k8un9CRhfeAoD3hOBwtg0=
Subject key identifier:   94:06:01:E3:94:81:D4:97:79:21:AA:59:C8:2B:C4:01:B6:95:CC:A1
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       5281CBCC3936AF5795CDB25C8176A99F69CED91E
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:41 +0000
ROA not before:           Tue 04 Feb 2025 19:52:41 +0000
ROA not after:            Tue 03 Feb 2026 19:57:41 +0000
asID:                     273072
IP address blocks:        2803:cf90:1500::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:81:cb:cc:39:36:af:57:95:cd:b2:5c:81:76:a9:9f:69:ce:d9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:41 2025 GMT
            Not After : Feb  3 19:57:41 2026 GMT
        Subject: CN=940601E39481D4977921AA59C82BC401B695CCA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:9c:39:1a:da:df:28:2d:58:ab:ef:e2:f8:
                    06:b0:d7:a8:31:f5:4d:c1:fd:4e:1e:1b:00:c2:53:
                    6b:55:77:9a:13:cd:2b:01:34:0f:d8:8d:fb:59:d3:
                    0d:1a:f0:84:66:9a:41:b5:80:64:85:a1:02:2b:d7:
                    c6:15:9f:60:75:2b:a8:c6:df:89:3a:2d:76:d6:0b:
                    81:b2:29:f9:32:e9:20:da:91:86:0e:be:c0:d6:74:
                    be:92:42:5d:88:aa:4e:78:57:81:f8:86:15:b0:e1:
                    0a:78:66:3b:c1:62:b5:17:25:b3:96:7c:62:ae:35:
                    ab:ab:5f:95:5e:4b:e7:fa:e5:fd:63:82:1a:dc:c8:
                    11:4a:e3:0e:bb:48:5c:21:29:da:6f:29:f3:fe:9e:
                    bc:df:d9:94:5c:53:2d:41:3d:5d:72:05:46:c2:24:
                    76:11:66:4c:21:b7:7a:61:b1:a3:00:a8:b6:b2:04:
                    46:42:3d:21:7c:84:86:e6:bd:ce:c7:20:23:28:c5:
                    76:ce:33:d5:a8:74:57:71:b1:80:e4:80:fd:e2:9f:
                    4a:8f:b4:39:a7:a2:0d:a2:b0:ab:1d:14:64:1b:a9:
                    cb:69:fb:ee:7a:30:7b:0e:cc:06:07:3a:a2:18:e8:
                    64:5f:14:2e:1c:1f:4a:70:31:99:04:8e:a6:cd:d7:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:01:E3:94:81:D4:97:79:21:AA:59:C8:2B:C4:01:B6:95:CC:A1
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:66:d2:a8:0d:e0:21:14:8d:89:c6:05:6c:0d:11:a1:f2:
         1c:97:5b:22:53:7a:fc:2e:20:a5:07:98:18:81:98:25:17:78:
         d9:b1:a1:8f:5b:06:83:ea:bb:f1:92:4a:ca:fd:b3:31:e9:79:
         ec:0c:91:77:5d:b7:09:dd:55:b0:1a:3a:eb:83:0a:00:4b:f9:
         83:5c:56:d9:59:2d:1d:06:23:44:09:66:af:d9:96:b0:8c:9f:
         58:53:cd:2b:49:f8:45:bf:30:ab:be:7b:36:5f:33:bd:96:c9:
         63:0d:69:8f:d9:10:0d:27:54:ad:0d:56:0c:d5:bd:8c:5c:0a:
         b5:a9:be:4d:c9:78:9e:17:0c:fa:d1:27:53:50:e9:40:7a:5a:
         27:90:18:1c:cb:f7:32:27:7a:23:57:92:74:57:12:65:3e:58:
         35:1a:de:3f:b5:47:52:cc:d7:20:b9:b1:17:d1:ef:49:ff:b8:
         85:0a:ec:ec:e2:83:23:73:40:f3:3e:f4:2d:43:b2:16:28:09:
         d1:ea:67:dd:8d:e7:2a:8c:3e:01:42:f0:66:59:4f:2a:48:53:
         8f:29:56:02:0f:b3:7d:ad:da:af:51:c5:55:04:86:bd:fa:2d:
         cb:0f:a9:8e:9b:fa:ca:d1:cd:fd:d3:89:6d:8b:58:24:07:d5:
         82:20:ea:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:15 2025 by rpki-client