Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          fcdr7+5GXpEemnocwfqNkM0HORGskF6c+aiZ9ccEg10=
Subject key identifier:   18:43:10:03:6F:94:92:A6:1E:D1:15:1C:28:5A:89:FA:88:50:6A:C2
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7BB92CAD1EBF5DF44FF847AB3EA787B34837983C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:37 +0000
ROA not before:           Tue 04 Feb 2025 19:52:37 +0000
ROA not after:            Tue 03 Feb 2026 19:57:37 +0000
asID:                     273072
IP address blocks:        2803:cf90:1900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b9:2c:ad:1e:bf:5d:f4:4f:f8:47:ab:3e:a7:87:b3:48:37:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:37 2025 GMT
            Not After : Feb  3 19:57:37 2026 GMT
        Subject: CN=184310036F9492A61ED1151C285A89FA88506AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:54:7b:49:5c:2b:0d:bb:f3:4e:da:96:de:
                    6f:b8:de:ad:80:51:ea:59:5e:cd:94:be:1d:8b:e3:
                    ad:1f:e1:c3:d5:55:b0:45:ed:44:6d:41:72:e2:d3:
                    80:9d:b6:27:c8:50:2a:10:ed:d0:50:7f:c1:3c:37:
                    e5:f0:ab:0e:69:94:8b:29:ba:e5:e3:a4:1d:52:9e:
                    01:15:80:d2:9e:78:6e:9c:99:ac:f7:f5:6b:4d:24:
                    f2:f0:d1:c2:89:3c:73:9d:7d:c2:90:b5:38:b2:f8:
                    37:24:5d:42:f8:45:00:74:1b:74:2b:ba:b1:e5:ea:
                    8f:6a:e0:ff:3f:14:bf:04:7a:35:bc:43:1f:9c:6f:
                    da:1c:64:df:01:01:b6:36:06:db:3b:a7:38:3f:f1:
                    e3:45:f6:73:8c:b5:0d:60:42:94:04:d3:33:d3:b0:
                    ff:d8:e7:9a:79:53:d1:74:f0:14:8f:2c:09:85:24:
                    88:8a:e0:68:9f:4e:aa:e2:0f:ee:f9:1d:90:b5:9e:
                    01:af:3d:bf:5d:07:2a:f7:47:d3:f8:b8:cf:15:24:
                    a1:f6:31:0d:73:27:21:da:ad:7e:d5:3a:ca:23:bc:
                    9d:48:7c:b6:2a:3a:86:f9:21:6d:f8:f4:8a:55:aa:
                    d4:53:86:cb:cb:e2:bc:36:88:b3:66:56:d3:85:01:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:10:03:6F:94:92:A6:1E:D1:15:1C:28:5A:89:FA:88:50:6A:C2
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313930303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:d8:b9:75:e0:13:e3:c2:69:5f:72:09:ee:10:46:eb:ca:
         07:ce:ef:8c:ea:e6:e9:c9:86:48:d7:5c:e0:da:61:24:d5:6f:
         a1:cf:2d:01:8a:92:6f:f0:03:a6:19:3a:b8:1f:b1:13:cb:70:
         46:64:08:3c:30:07:7c:69:19:4d:47:76:c9:e1:01:db:0a:1f:
         81:3a:c6:9f:f1:6d:6b:ed:83:56:8b:7b:69:35:b1:d5:88:2b:
         ad:24:1d:b2:25:5f:24:ce:39:59:a9:90:78:a2:bf:8f:76:64:
         b6:5c:2e:ad:b8:38:78:19:22:b4:79:f7:5b:e5:c9:45:f1:bf:
         a2:75:80:41:eb:3a:27:43:6c:e1:1d:72:77:0a:40:d9:74:ba:
         7b:f4:34:1f:14:45:e8:1d:e8:1b:14:36:d7:71:d2:81:14:18:
         79:4f:ec:ce:ef:84:e6:b9:ff:50:1d:69:cf:23:e0:32:77:2d:
         a3:4d:b4:a6:fb:af:be:59:20:bc:ce:a0:88:97:6d:12:ec:34:
         11:b8:69:cf:01:df:e4:c9:8a:c7:e2:26:a2:a4:a5:e4:ba:9d:
         2e:54:7c:ee:ce:e7:fd:b9:cb:bc:65:8a:4f:65:be:ed:a6:c8:
         5e:44:d8:1b:8e:9f:e9:7a:d4:d0:fb:5c:0f:54:4b:3e:35:de:
         a2:d2:97:e6
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUe7ksrR6/XfRP+EerPqeHs0g3mDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzdaFw0yNjAyMDMxOTU3MzdaMDMxMTAvBgNV
BAMTKDE4NDMxMDAzNkY5NDkyQTYxRUQxMTUxQzI4NUE4OUZBODg1MDZBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUFR7SVwrDbvzTtqW3m+43q2A
UepZXs2Uvh2L460f4cPVVbBF7URtQXLi04CdtifIUCoQ7dBQf8E8N+Xwqw5plIsp
uuXjpB1SngEVgNKeeG6cmaz39WtNJPLw0cKJPHOdfcKQtTiy+DckXUL4RQB0G3Qr
urHl6o9q4P8/FL8EejW8Qx+cb9ocZN8BAbY2Bts7pzg/8eNF9nOMtQ1gQpQE0zPT
sP/Y55p5U9F08BSPLAmFJIiK4GifTqriD+75HZC1ngGvPb9dByr3R9P4uM8VJKH2
MQ1zJyHarX7VOsojvJ1IfLYqOob5IW349IpVqtRThsvL4rw2iLNmVtOFAXllAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUGEMQA2+UkqYe0RUcKFqJ+ohQasIwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QGTANBgkqhkiG9w0BAQsFAAOCAQEAewfYuXXgE+PCaV9yCe4QRuvK
B87vjOrm6cmGSNdc4NphJNVvoc8tAYqSb/ADphk6uB+xE8twRmQIPDAHfGkZTUd2
yeEB2wofgTrGn/Fta+2DVot7aTWx1YgrrSQdsiVfJM45WamQeKK/j3Zktlwurbg4
eBkitHn3W+XJRfG/onWAQes6J0Ns4R1ydwpA2XS6e/Q0HxRF6B3oGxQ213HSgRQY
eU/szu+E5rn/UB1pzyPgMncto020pvuvvlkgvM6giJdtEuw0EbhpzwHf5MmKx+Im
oqSl5LqdLlR87s7n/bnLvGWKT2W+7abIXkTYG46f6XrU0PtcD1RLPjXeotKX5g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:26 2025 by rpki-client