Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          EijAad57ffpV3+vFkmYie5UwKWiqV7roDRsEMYFNYBI=
Subject key identifier:   86:DC:30:0C:A1:AA:1B:E5:41:3A:41:EB:96:78:71:C7:9A:C3:57:64
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       1A66BF89841A063D93B0F4C0DFD38191F90EBED7
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:21 +0000
ROA not before:           Tue 04 Feb 2025 19:52:21 +0000
ROA not after:            Tue 03 Feb 2026 19:57:21 +0000
asID:                     273072
IP address blocks:        2803:cf90:3200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:bf:89:84:1a:06:3d:93:b0:f4:c0:df:d3:81:91:f9:0e:be:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:21 2025 GMT
            Not After : Feb  3 19:57:21 2026 GMT
        Subject: CN=86DC300CA1AA1BE5413A41EB967871C79AC35764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:0e:07:6f:02:03:c1:9f:fc:44:2c:c3:ef:
                    d0:a5:4a:ea:f9:1c:7f:98:84:7e:4e:c7:7e:f9:da:
                    74:2a:b8:c8:ce:c3:6c:2c:51:90:af:38:75:e2:50:
                    a8:be:11:0e:3c:4a:cf:e3:73:94:22:f5:0e:dc:11:
                    88:9b:18:fa:05:01:a5:a4:69:d4:d7:a4:d2:8a:28:
                    47:6e:13:fd:07:a2:a9:6e:0c:ef:75:fd:7c:1d:69:
                    b0:91:c9:50:de:d9:08:19:c9:3a:65:cf:42:c6:65:
                    d4:89:48:51:6f:31:1a:dc:4b:47:79:2e:ec:3f:cc:
                    f2:c6:cc:17:02:04:e0:a4:f6:92:ae:5e:41:9d:47:
                    94:88:52:b8:97:88:98:d3:0a:9d:a7:94:21:78:9c:
                    3c:20:1d:d3:29:de:69:ba:fb:8a:1d:65:6b:08:4b:
                    42:17:87:17:f1:64:c6:75:c9:53:d6:c0:c3:27:18:
                    1b:1f:3a:4c:35:86:95:d7:57:22:4e:44:ba:60:af:
                    10:12:b9:fa:17:a8:2c:1e:eb:0e:78:8f:0b:50:6d:
                    7f:dd:7a:16:c7:c9:74:9d:5c:0f:52:78:ac:e2:3d:
                    04:3e:04:42:78:69:8f:0d:e4:92:92:27:73:a1:43:
                    2f:9e:67:cc:f2:7f:86:79:25:f5:b1:c7:0d:9c:f5:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DC:30:0C:A1:AA:1B:E5:41:3A:41:EB:96:78:71:C7:9A:C3:57:64
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333230303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:7d:ae:b3:51:f4:a1:13:e8:42:75:53:04:83:00:a0:9d:
         1d:5c:ba:28:60:7f:3b:23:59:c2:7c:4f:b1:69:b6:1b:42:ba:
         2e:37:5b:03:1c:f2:46:f8:6d:f1:f6:15:64:bc:1d:89:59:06:
         98:d8:06:16:a3:fb:ee:62:56:32:82:92:73:b1:b1:f7:89:25:
         1c:62:64:5b:45:ae:0e:1a:4d:43:3c:e3:4c:c3:7d:65:03:31:
         60:e5:92:bc:ad:97:80:7f:b7:f2:6b:b5:8f:4f:d9:56:4b:8a:
         65:e3:d2:69:00:9b:67:70:29:d5:00:65:87:21:67:60:8b:2c:
         ed:ab:2f:74:17:07:27:77:64:92:4b:14:0c:53:5f:b9:a7:a6:
         b3:e9:2f:a5:99:9a:03:44:8c:f0:54:1a:d4:ed:dd:3c:0f:c5:
         5b:52:41:5a:74:d6:b4:73:0f:fa:8b:f6:90:0e:5d:da:03:cf:
         ce:89:dd:c4:6a:00:11:ac:b0:68:c0:db:5e:88:f1:81:18:a6:
         01:0c:7a:3c:f5:22:5b:89:aa:98:80:70:f3:2c:18:b9:04:cd:
         93:c1:d7:e8:d9:16:3d:ad:1c:96:c5:dc:e5:1f:ce:5c:e2:e1:
         c9:43:89:86:36:ea:49:41:f2:2e:96:40:11:63:10:b9:dc:c9:
         c5:78:c1:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:30 2025 by rpki-client