Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          EUDuuwoUNiF8FdTwxu78eq/ww7XB7JqqLrRopyy4C/U=
Subject key identifier:   EA:30:27:8A:AF:7E:EA:AD:82:B7:4C:F3:6B:6A:05:10:15:96:4A:29
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       0FC20847650AB74E38412C9B4608874DA3D12B5A
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:37 +0000
ROA not before:           Tue 04 Feb 2025 19:52:37 +0000
ROA not after:            Tue 03 Feb 2026 19:57:37 +0000
asID:                     273072
IP address blocks:        2803:cf90:1800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c2:08:47:65:0a:b7:4e:38:41:2c:9b:46:08:87:4d:a3:d1:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:37 2025 GMT
            Not After : Feb  3 19:57:37 2026 GMT
        Subject: CN=EA30278AAF7EEAAD82B74CF36B6A051015964A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:73:f6:19:e2:66:d3:84:a8:33:c2:9d:cd:
                    07:6c:3b:8e:08:a3:ec:43:82:8b:2a:ea:38:7a:31:
                    ed:bf:a2:e4:9c:ae:54:c8:50:26:c9:81:1b:04:6e:
                    15:ed:3c:d0:b4:07:04:06:d3:2b:e4:10:23:05:ed:
                    d4:ea:65:25:64:26:a6:d7:cb:d5:6d:4f:a5:ac:66:
                    38:19:fc:ef:55:5e:83:5b:3f:13:80:13:1f:9c:7f:
                    d4:d1:a9:87:60:14:c7:17:dd:56:5c:46:80:12:91:
                    88:d5:30:40:a9:c1:db:f8:3a:6a:a7:3a:d9:5f:f0:
                    3f:ad:4c:7e:04:01:19:b6:b5:d3:75:12:fb:45:66:
                    43:2c:99:38:0a:b6:e0:6c:d1:74:e2:1d:fd:37:9e:
                    9f:d6:95:e7:bc:dc:90:e5:a5:7a:72:5a:dc:58:bc:
                    a6:c2:79:97:e7:f5:b1:70:29:55:09:2c:f5:e9:17:
                    86:4a:c6:c5:a4:b4:42:ea:5b:b7:82:b1:ee:0a:c7:
                    5c:95:f7:a9:36:54:79:b0:93:b9:b4:14:70:47:85:
                    c3:ec:57:cc:2b:3f:4f:93:d2:dd:cc:92:93:0c:42:
                    9e:fb:90:d7:3d:86:93:f7:ce:a8:8b:7e:30:38:7b:
                    4c:5d:16:2a:71:f1:82:0f:fc:c7:51:3f:de:b3:64:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:27:8A:AF:7E:EA:AD:82:B7:4C:F3:6B:6A:05:10:15:96:4A:29
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:42:fe:8b:55:d7:c1:30:bf:22:40:fb:41:ae:16:39:ee:37:
         54:b6:d7:b8:6f:0b:19:85:3a:37:d4:44:bf:fa:b2:5f:e5:51:
         22:cf:5c:3e:47:19:e9:7e:73:3c:3a:c1:52:bc:37:b4:05:2d:
         4d:cc:ec:2b:3a:28:a0:bc:8c:bc:30:c3:bb:70:80:5d:22:24:
         3f:1c:2b:ad:ed:5c:d0:96:64:a9:12:b8:16:c0:ed:77:d4:e7:
         b6:ca:97:81:37:9b:9b:f2:80:e8:de:37:92:be:41:c2:5d:3d:
         46:7f:ff:2c:5e:91:53:c0:fd:98:4c:81:95:0b:07:45:fa:f9:
         b9:2c:67:ba:d6:83:a9:42:2b:21:31:b1:e2:d9:79:de:e3:e8:
         99:90:42:a2:42:c3:e8:48:60:d5:85:a1:0b:e2:fc:a7:db:c5:
         d8:6e:d0:2b:e8:6a:ea:22:5e:2d:87:b5:d2:8f:7c:83:50:3c:
         1d:b6:63:21:39:3f:41:e7:82:7f:58:00:ee:86:bb:41:4e:86:
         f5:16:c8:9a:8c:e7:98:f9:6b:dd:2b:12:1f:45:3a:1b:dc:16:
         2c:2d:23:3a:ef:4a:19:d6:8b:0a:64:04:22:25:54:91:56:6e:
         3f:e4:12:ae:44:63:60:57:88:87:3c:1c:0e:b4:96:ce:56:e1:
         b9:02:dd:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:38 2025 by rpki-client