Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          9/W5Xw5SqQXFMZ4GWcnxAVO8bLFgePtbOyTxhyygxng=
Subject key identifier:   83:92:AC:70:F6:73:DD:34:E9:F5:B6:30:2F:B6:D4:0A:90:B3:2B:26
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6AC97E29453597BB53458286998DE456877FC696
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:29 +0000
ROA not before:           Tue 04 Feb 2025 19:52:29 +0000
ROA not after:            Tue 03 Feb 2026 19:57:29 +0000
asID:                     273072
IP address blocks:        2803:cf90:1600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c9:7e:29:45:35:97:bb:53:45:82:86:99:8d:e4:56:87:7f:c6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:29 2025 GMT
            Not After : Feb  3 19:57:29 2026 GMT
        Subject: CN=8392AC70F673DD34E9F5B6302FB6D40A90B32B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:c1:32:32:db:07:08:d0:99:58:9c:84:c0:
                    ac:0f:df:ba:7f:e3:cb:06:2b:a9:67:74:b1:ed:96:
                    e0:73:26:b6:99:c5:d9:be:a5:5e:cc:ae:00:cc:2f:
                    25:d3:7f:a8:c0:c4:f0:6f:b2:02:24:60:7d:b5:db:
                    15:ca:73:98:df:f1:fd:24:d5:75:c3:ca:e2:9d:a7:
                    b3:aa:85:a2:fe:a3:7e:17:c7:f9:9f:bc:e7:d2:c4:
                    84:91:09:d7:9b:f9:57:eb:71:1c:ca:bb:a7:c4:7b:
                    a1:44:a5:a1:80:e1:d4:f9:3f:4c:39:20:17:d7:31:
                    7d:87:3f:68:f7:0e:f9:d3:e1:1a:4e:28:b4:0b:a0:
                    2c:96:1f:9c:f4:56:52:f1:25:42:23:45:51:26:06:
                    6c:51:cc:6a:ce:92:98:f1:58:9b:1b:04:39:8f:cd:
                    aa:1a:81:87:11:22:1d:66:ba:d9:d8:8c:3a:ab:e6:
                    5e:b6:99:5e:f6:51:e5:69:dd:22:51:e3:2f:69:ac:
                    c6:dd:b5:93:84:fc:52:f8:80:ef:89:65:79:ab:9e:
                    7d:18:e3:18:90:c2:fe:8d:76:36:bf:0f:86:33:ab:
                    3e:d5:d8:a6:ed:7c:ab:d9:6b:de:06:16:d4:36:80:
                    ea:44:2a:90:ac:4c:04:0a:12:3d:d1:01:0d:3f:95:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:AC:70:F6:73:DD:34:E9:F5:B6:30:2F:B6:D4:0A:90:B3:2B:26
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:32:e0:fc:fe:8b:95:db:fc:b6:57:f8:92:cb:3b:5c:f2:
         20:df:10:e1:3e:b5:70:bc:8d:88:6f:60:21:52:71:ad:2d:66:
         2d:7e:a3:31:4d:90:b4:37:82:37:97:48:e9:db:e5:c2:e6:72:
         15:39:26:71:8f:9d:1e:5a:99:0e:e0:05:64:d8:70:01:6c:77:
         88:96:f0:44:70:e8:c9:0c:f5:5e:5c:93:b1:fb:e7:98:3d:f1:
         1b:f5:28:5c:68:99:3b:d3:49:bc:43:29:7a:a4:fd:8d:bb:c8:
         8f:ae:c8:10:f2:a2:cb:94:8e:3b:28:b2:7c:f9:52:35:52:65:
         37:41:7d:53:06:59:ea:9c:5b:be:4e:db:c4:80:39:72:c9:5f:
         d3:1d:dc:96:b2:c6:37:ec:e6:ee:8e:86:91:9f:71:13:5b:18:
         73:6d:53:35:b3:39:f1:b0:be:94:5d:cb:11:b6:5b:fe:28:f0:
         f9:9a:77:ff:b0:0a:e7:d3:1b:ed:eb:6a:ad:82:5d:4f:ad:2c:
         11:e5:36:dd:a6:cc:47:2d:2f:8c:b7:34:86:af:0b:29:f5:72:
         67:43:10:f8:d8:d2:39:d3:a8:e5:bc:fc:c9:86:ae:f4:17:c3:
         8a:da:e5:c9:fa:aa:cd:bf:91:32:35:4d:1f:bc:6a:b1:81:9a:
         a1:26:39:65
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUasl+KUU1l7tTRYKGmY3kVod/xpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMjlaFw0yNjAyMDMxOTU3MjlaMDMxMTAvBgNV
BAMTKDgzOTJBQzcwRjY3M0REMzRFOUY1QjYzMDJGQjZENDBBOTBCMzJCMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0V8EyMtsHCNCZWJyEwKwP37p/
48sGK6lndLHtluBzJraZxdm+pV7MrgDMLyXTf6jAxPBvsgIkYH212xXKc5jf8f0k
1XXDyuKdp7OqhaL+o34Xx/mfvOfSxISRCdeb+VfrcRzKu6fEe6FEpaGA4dT5P0w5
IBfXMX2HP2j3DvnT4RpOKLQLoCyWH5z0VlLxJUIjRVEmBmxRzGrOkpjxWJsbBDmP
zaoagYcRIh1mutnYjDqr5l62mV72UeVp3SJR4y9prMbdtZOE/FL4gO+JZXmrnn0Y
4xiQwv6Ndja/D4Yzqz7V2KbtfKvZa94GFtQ2gOpEKpCsTAQKEj3RAQ0/lbdzAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUg5KscPZz3TTp9bYwL7bUCpCzKyYwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QFjANBgkqhkiG9w0BAQsFAAOCAQEANnwy4Pz+i5Xb/LZX+JLLO1zy
IN8Q4T61cLyNiG9gIVJxrS1mLX6jMU2QtDeCN5dI6dvlwuZyFTkmcY+dHlqZDuAF
ZNhwAWx3iJbwRHDoyQz1XlyTsfvnmD3xG/UoXGiZO9NJvEMpeqT9jbvIj67IEPKi
y5SOOyiyfPlSNVJlN0F9UwZZ6pxbvk7bxIA5cslf0x3clrLGN+zm7o6GkZ9xE1sY
c21TNbM58bC+lF3LEbZb/ijw+Zp3/7AK59Mb7etqrYJdT60sEeU23abMRy0vjLc0
hq8LKfVyZ0MQ+NjSOdOo5bz8yYau9BfDitrlyfqqzb+RMjVNH7xqsYGaoSY5ZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:16 2025 by rpki-client