Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          rxA8Kf78M+8QxF+dNzskW/e/7H7ZFw9+VgADglFXk5U=
Subject key identifier:   97:FB:1C:B2:52:CC:47:72:2F:E2:95:DD:6F:47:93:FF:47:CE:B2:13
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       5A2E50C29A477B2904AE45A127DA9C23B21D6550
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:32 +0000
ROA not before:           Tue 04 Feb 2025 19:52:32 +0000
ROA not after:            Tue 03 Feb 2026 19:57:32 +0000
asID:                     273072
IP address blocks:        2803:cf90:3800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2e:50:c2:9a:47:7b:29:04:ae:45:a1:27:da:9c:23:b2:1d:65:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:32 2025 GMT
            Not After : Feb  3 19:57:32 2026 GMT
        Subject: CN=97FB1CB252CC47722FE295DD6F4793FF47CEB213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:f9:9a:df:0b:e5:37:4c:86:38:61:ef:1a:
                    7b:b4:ff:57:1a:3a:59:d1:df:4e:24:58:35:c3:dd:
                    a7:6e:aa:2d:ce:32:2b:cc:76:1e:e7:aa:52:10:9e:
                    c1:bf:22:6b:ec:7d:20:ae:e3:46:62:0c:61:17:24:
                    ca:52:45:0f:95:3a:52:29:2f:b7:1b:55:60:5f:2b:
                    1b:3f:c2:61:6d:4e:0f:ca:56:ca:ac:3d:4a:72:2c:
                    81:00:f6:a8:f8:49:78:43:39:57:d6:9e:ad:92:e7:
                    b3:3a:0d:55:b4:2c:87:09:42:43:0b:a7:ff:ac:6a:
                    88:9b:b1:1b:bf:a2:05:44:c1:09:1e:4d:9b:8f:ab:
                    63:e2:ac:f4:59:36:28:04:99:93:ec:a9:4a:bc:3d:
                    9c:a4:4a:71:aa:30:b0:d6:a7:35:0a:5c:bf:99:de:
                    d6:89:3e:c2:5a:38:89:61:6f:ee:c3:3b:c6:70:4f:
                    04:e9:d7:9e:ea:57:a2:4e:0a:8c:b5:a9:93:ea:60:
                    f7:ea:e1:08:dc:d3:e2:aa:ec:f6:18:7e:ec:1f:18:
                    8c:78:cb:f0:07:23:d4:b7:4b:63:06:99:34:6d:05:
                    a3:69:26:52:9f:2d:76:65:8d:4b:89:ee:0a:7c:56:
                    fd:27:a1:f4:ed:f4:c5:0c:4b:0a:76:af:d0:d4:67:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:1C:B2:52:CC:47:72:2F:E2:95:DD:6F:47:93:FF:47:CE:B2:13
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:45:df:c3:92:ea:9b:3c:b2:7b:55:0d:3a:05:74:c8:d6:
         d2:63:b1:40:e1:0b:cb:8d:3f:94:d6:be:74:6a:2d:1b:c1:7b:
         84:26:11:b7:69:ec:f0:4b:5e:43:e7:f9:42:20:d5:74:33:84:
         21:33:54:58:9a:17:fd:a5:16:1a:a0:38:f2:4d:fc:4a:b5:9e:
         ad:b7:2e:c7:16:ab:57:1f:32:04:de:6c:73:bc:69:52:e0:1e:
         d3:11:55:37:09:78:25:6f:7b:f7:59:0a:f6:9f:1c:6d:4d:8f:
         25:a9:3a:ee:18:ab:69:14:4e:e3:62:9c:e8:16:50:e0:cb:19:
         8e:62:fe:05:c3:95:44:3f:7d:e1:77:a7:23:53:e4:91:1b:89:
         1b:1b:fa:1d:ef:01:37:85:3b:32:35:0e:eb:45:85:c8:bc:ae:
         9c:b3:58:de:13:db:97:1b:9d:b4:f8:d6:17:5a:97:1e:b5:8e:
         63:ff:64:2e:a0:4f:96:35:bf:a5:58:50:ab:cd:5f:ff:d8:81:
         9e:fd:07:25:56:69:44:bf:b3:29:12:ed:f9:46:5b:15:75:df:
         08:84:90:b5:20:23:1c:f7:2e:e7:b1:44:73:7b:68:6d:63:85:
         1b:a2:f6:f0:12:92:80:1c:69:90:42:00:f4:70:c2:84:dc:fc:
         33:de:9c:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:24 2025 by rpki-client