Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          gWrMn+LP6ajLFRaSBoazJmgWUzjkaws994l4CCWRiss=
Subject key identifier:   11:7E:DF:6F:19:CE:21:DB:2B:B4:1D:7B:51:3F:1D:6C:63:E6:1D:7D
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       0D39E278557500C8E4272C2C6B7D489DE7B50C73
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:32 +0000
ROA not before:           Tue 04 Feb 2025 19:52:32 +0000
ROA not after:            Tue 03 Feb 2026 19:57:32 +0000
asID:                     273072
IP address blocks:        2803:cf90:1700::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:39:e2:78:55:75:00:c8:e4:27:2c:2c:6b:7d:48:9d:e7:b5:0c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:32 2025 GMT
            Not After : Feb  3 19:57:32 2026 GMT
        Subject: CN=117EDF6F19CE21DB2BB41D7B513F1D6C63E61D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:59:96:93:bb:b0:72:14:09:43:e4:13:cb:
                    1b:38:86:4c:97:c1:94:e9:bd:ec:4d:77:e6:f6:a1:
                    3b:d3:36:96:b4:12:2f:c5:87:65:99:bb:19:2d:28:
                    9a:ad:00:60:05:81:37:c2:df:91:11:cf:67:9e:37:
                    07:f8:ec:54:09:1b:7e:f4:62:b1:1f:c0:d3:b8:cc:
                    14:96:13:69:ed:d0:27:81:2f:e5:76:c4:79:19:bb:
                    f7:eb:17:46:80:a9:9a:87:8a:26:9c:c5:8a:1d:42:
                    cd:7e:9c:ee:77:eb:cb:87:ca:79:c3:ce:f4:59:4a:
                    77:3e:a4:d1:99:74:64:a0:eb:10:9a:9b:a2:33:f3:
                    33:1d:17:0b:ec:ab:25:9f:25:b8:ab:cd:d8:eb:52:
                    ef:ac:ef:c6:b0:ab:96:b4:60:bc:d3:50:5f:b3:d0:
                    7f:1b:94:ee:57:e3:72:d8:b0:9e:80:9b:ac:a7:29:
                    fc:fd:0f:ea:af:bf:62:09:01:d0:d9:bb:fc:2f:44:
                    2b:f6:09:9a:de:88:da:8b:1f:28:32:ca:5c:4e:3d:
                    ea:8f:5d:f0:a1:39:cc:6c:2b:69:3d:b0:9a:c2:37:
                    1a:f7:39:c6:0d:20:90:5f:83:12:75:aa:5d:3f:d9:
                    83:f0:9b:02:45:f5:9c:d2:64:d1:8d:98:74:84:05:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:DF:6F:19:CE:21:DB:2B:B4:1D:7B:51:3F:1D:6C:63:E6:1D:7D
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:e8:4d:a6:41:98:fc:43:82:d0:08:cf:72:53:c9:7e:b7:d5:
         03:f4:13:1e:61:09:27:c6:18:39:63:f3:62:70:0c:46:71:e5:
         6d:cf:b7:ff:58:a7:cb:e3:1a:68:7d:c6:0a:92:37:62:49:e0:
         ef:33:ac:a9:91:44:01:71:67:b4:00:dd:c2:89:2f:a4:7a:32:
         1d:79:0d:12:96:6b:55:3c:27:40:e1:b8:82:0b:24:c8:01:72:
         35:3b:7c:70:ba:31:30:e1:ca:ca:4f:df:0b:d8:c3:de:c1:45:
         33:71:dc:19:22:0d:a3:23:af:f8:fe:93:a6:09:1b:d3:f9:10:
         18:1c:82:81:36:26:70:b1:b8:91:96:a2:02:d1:e5:96:35:f9:
         61:e9:5b:07:fd:19:d0:7b:df:e8:7b:a5:d8:79:d9:0e:b8:16:
         b5:81:24:b5:db:19:7e:d1:64:7f:e9:d7:91:21:17:be:89:85:
         58:3c:46:96:08:78:ce:25:a6:18:44:c1:4d:3c:66:33:b3:16:
         8d:6c:69:cf:56:40:15:e5:ed:e7:8d:82:14:1d:9a:55:f7:a0:
         ab:2a:9a:3e:cc:bf:84:56:9c:f9:e5:1e:a5:00:74:e8:08:37:
         71:54:f2:3e:0a:d0:e9:cf:14:ac:70:c3:51:f4:04:47:04:83:
         d2:72:09:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:27 2025 by rpki-client