Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          DGBn7e/LVVeRomK+7npflQsdLHdA+6Cw4lTKay0NVm0=
Subject key identifier:   73:DF:0F:DE:B4:11:72:3A:FA:5B:2B:30:F0:60:E0:EA:0F:31:D0:3E
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       3DF6C169B129A6EBF429B3F635F1BF34A342EADF
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:24 +0000
ROA not before:           Tue 04 Feb 2025 19:52:24 +0000
ROA not after:            Tue 03 Feb 2026 19:57:24 +0000
asID:                     273072
IP address blocks:        2803:cf90:1f00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f6:c1:69:b1:29:a6:eb:f4:29:b3:f6:35:f1:bf:34:a3:42:ea:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:24 2025 GMT
            Not After : Feb  3 19:57:24 2026 GMT
        Subject: CN=73DF0FDEB411723AFA5B2B30F060E0EA0F31D03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:d7:35:13:69:de:d8:e2:d2:6a:d0:0a:f2:
                    f5:4b:00:c4:c9:44:2d:01:c9:e2:b1:bd:81:ec:25:
                    a5:f3:ff:6b:52:9d:b3:df:27:0f:3e:df:6d:29:83:
                    88:e1:b9:0b:42:1c:1d:15:cb:08:d7:5b:80:74:1a:
                    52:e7:e8:8c:8a:02:33:b9:a0:8e:a9:d4:d2:99:4b:
                    c5:08:bd:b6:08:41:32:ec:af:6c:1e:01:ea:2b:f8:
                    bc:e3:41:87:e2:5b:3e:53:92:3f:7e:f4:07:4d:db:
                    09:4b:7e:85:fa:6b:aa:fb:2f:17:71:32:b3:d3:11:
                    18:de:6e:2d:e6:9b:9b:d3:61:a9:74:36:c1:34:25:
                    08:e3:25:07:27:6d:de:ee:38:13:6e:45:f0:b9:ca:
                    c7:54:cb:fa:c1:a9:c5:8b:74:44:df:67:dd:f9:6e:
                    c0:12:6a:f9:b1:99:ff:bc:d9:9b:51:16:b3:83:b3:
                    6f:16:89:e1:7a:fa:44:61:db:9d:69:62:0c:24:c4:
                    4f:c3:63:8f:70:7d:e1:1d:c7:7f:0e:ef:d5:1d:08:
                    35:f4:7e:42:5c:f3:42:71:f0:c5:98:8f:16:e8:dd:
                    ab:8b:a4:a4:a7:60:00:ab:41:09:d1:4c:fa:9e:a1:
                    56:42:7b:d4:7b:4c:0c:39:63:33:f1:78:c0:de:0f:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:0F:DE:B4:11:72:3A:FA:5B:2B:30:F0:60:E0:EA:0F:31:D0:3E
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:d6:af:e9:3f:82:68:ad:8b:b7:6a:7e:63:29:af:15:40:
         a4:76:75:0d:d5:3d:0b:e0:a3:b5:ac:b3:84:96:34:d1:84:a9:
         50:45:17:ed:bd:43:34:77:88:82:2b:b8:b0:8b:b5:26:f9:2b:
         59:2b:82:73:4a:cc:a5:b5:a0:7e:27:58:a3:7f:2a:c4:b9:0a:
         9f:59:15:96:f3:62:47:f8:f4:c7:72:d2:a1:d1:12:e3:e4:60:
         24:94:3d:a3:e4:56:1d:d0:e4:ba:58:e1:e3:61:cb:0f:94:d5:
         6c:fe:84:a7:e5:71:c3:19:ce:b3:7e:3a:fd:37:06:70:ac:dd:
         19:1e:99:73:40:59:82:30:ca:8f:b6:e2:ed:4f:6e:d0:5c:83:
         9a:14:93:14:52:6a:ab:28:b4:2a:bf:ed:0c:ae:70:2d:c7:a4:
         e6:8c:a1:1b:0e:fc:e3:47:66:95:a2:2e:89:e3:66:9c:96:e4:
         0e:0a:af:16:80:c2:c7:5c:4f:71:66:79:7c:b8:69:a7:83:7a:
         f1:18:6b:7c:5a:82:54:d6:5c:cd:21:84:9c:c3:e3:3b:5c:d0:
         c3:5b:ff:67:a6:ad:e8:bb:aa:0e:a2:a8:a1:19:c3:33:4a:de:
         c8:a8:bf:a1:01:85:fb:65:f5:62:e2:a5:0b:a5:59:04:75:0f:
         f2:aa:33:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:28 2025 by rpki-client