Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          TMwOaSIq+kmnvXKlMwLJtFII9Mh40BixC3o7pl7doBc=
Subject key identifier:   A2:B3:0E:07:39:45:6A:BC:AD:DD:C9:23:5E:A8:D8:8F:4C:D6:1D:F3
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       425BBECDB8D7910B687C252502FD57399647FC1E
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:32 +0000
ROA not before:           Tue 04 Feb 2025 19:52:32 +0000
ROA not after:            Tue 03 Feb 2026 19:57:32 +0000
asID:                     273072
IP address blocks:        2803:cf90:1d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5b:be:cd:b8:d7:91:0b:68:7c:25:25:02:fd:57:39:96:47:fc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:32 2025 GMT
            Not After : Feb  3 19:57:32 2026 GMT
        Subject: CN=A2B30E0739456ABCADDDC9235EA8D88F4CD61DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:97:89:18:ec:1a:f3:be:dd:f6:9d:f8:2d:
                    1b:63:db:24:24:80:7f:ef:ea:0f:af:a2:c6:db:df:
                    8d:19:7c:9a:68:04:ea:ee:9a:ac:59:85:a0:15:f7:
                    04:80:79:a3:dd:19:d8:90:47:51:bb:64:6b:a6:97:
                    78:29:90:c8:0f:78:94:63:6a:7b:e9:4d:75:f7:a0:
                    f0:2c:35:a9:e6:86:36:b5:b7:56:a5:9e:82:c4:85:
                    c4:fc:00:8f:df:6a:8b:f6:ad:e0:13:dc:50:44:e4:
                    69:c1:97:93:17:5d:32:fa:5e:8a:ba:e8:c1:4b:45:
                    e6:be:4e:54:8e:ea:ef:af:13:b9:d6:f3:47:93:e3:
                    99:00:f9:be:a1:fc:fc:af:cf:73:62:6b:a4:2b:8c:
                    7d:3a:6e:ad:e1:85:bc:1b:04:17:6c:d9:12:27:78:
                    63:fe:9c:6b:32:a8:57:5d:4f:cb:5a:10:1a:ca:63:
                    81:52:c1:fc:8c:9e:ce:26:ae:b5:03:7d:0d:e2:d2:
                    63:be:a0:22:93:d2:0f:31:cb:f2:7a:b7:c5:09:b5:
                    fd:f1:f3:73:b4:9d:af:7d:d6:b5:87:c9:d3:c3:0a:
                    99:87:eb:62:d5:92:a6:23:ce:b2:86:d9:62:d3:30:
                    5b:f7:1a:06:02:7c:68:4a:83:90:47:75:35:69:53:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:0E:07:39:45:6A:BC:AD:DD:C9:23:5E:A8:D8:8F:4C:D6:1D:F3
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:e5:2f:4c:a7:72:ff:a9:2c:96:ff:97:ae:58:59:d5:e5:
         fe:f5:a1:1b:f2:5b:5f:1e:e8:75:88:59:67:b4:9e:d4:23:87:
         ae:88:53:d7:cf:61:b5:68:1b:b8:77:fa:de:fb:60:26:e5:69:
         43:7f:65:a1:48:42:af:76:70:66:76:2a:ac:b0:a0:0d:52:47:
         3a:c9:df:1a:3c:85:e9:c6:90:9d:0c:9a:0c:05:c9:23:27:9f:
         1b:84:84:80:ee:ae:ae:e2:26:f0:c5:18:4a:48:32:68:96:88:
         13:1a:8f:66:ba:cf:9d:4d:b6:12:69:75:6b:86:86:9e:a1:53:
         41:f1:86:44:e9:9f:c4:2e:a6:a9:8f:d3:ee:5a:6a:03:d7:45:
         1f:9f:e9:8b:85:6c:d4:97:a8:d0:f1:18:cd:92:bc:b0:c1:d5:
         46:be:8c:61:6b:e4:81:d8:74:e1:4b:e2:5a:9c:ca:53:68:c3:
         4b:c7:30:8a:13:ee:7d:28:73:51:b4:77:9f:e3:54:86:c3:ae:
         ac:0a:bd:90:a0:ea:cf:ce:1a:8a:07:4f:5c:2b:82:01:cd:87:
         c8:61:05:58:8d:1b:11:a9:23:a2:3e:a8:8a:23:e5:0c:73:9a:
         80:63:5b:c7:1d:57:32:67:0c:d6:5a:55:0e:a4:03:9b:0a:48:
         75:1c:0a:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:34 2025 by rpki-client