Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          8448iH3P4mAiVRMU4R+dSrhJXrjsnTPskCSu6qVCYjc=
Subject key identifier:   0F:47:F8:B0:62:9D:C7:A0:0D:1D:12:D0:97:4C:C6:4D:B2:9A:11:7D
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       4FF809FCE29866BA78E1B269002FBB6AFB9F03A7
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:31 +0000
ROA not before:           Tue 04 Feb 2025 19:52:31 +0000
ROA not after:            Tue 03 Feb 2026 19:57:31 +0000
asID:                     273072
IP address blocks:        2803:cf90:3b00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f8:09:fc:e2:98:66:ba:78:e1:b2:69:00:2f:bb:6a:fb:9f:03:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:31 2025 GMT
            Not After : Feb  3 19:57:31 2026 GMT
        Subject: CN=0F47F8B0629DC7A00D1D12D0974CC64DB29A117D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:11:91:b1:ba:7b:5c:b3:34:13:7b:6c:dd:
                    9b:cf:78:8f:5d:dc:49:99:5d:0b:19:ef:ca:7d:ad:
                    02:fc:a3:be:b7:97:88:a2:8c:f1:a2:6c:b0:cd:09:
                    dd:0f:ed:2a:a0:81:e7:26:a8:9a:ec:47:3b:35:fb:
                    52:f5:46:62:71:56:76:f1:be:7d:3d:3e:69:89:cb:
                    43:34:59:15:79:e3:48:b3:ad:16:23:74:61:7f:31:
                    cf:53:55:83:15:5a:ba:28:4d:19:70:f0:d5:73:51:
                    c3:52:25:82:1a:71:b7:31:45:d7:7f:25:d2:c5:d9:
                    a3:ce:89:15:9a:e3:88:67:9b:ee:2c:1e:a1:f8:ca:
                    82:2d:16:88:15:c6:85:23:24:81:6e:f4:76:58:62:
                    da:9b:8e:2c:5f:a6:35:b8:3e:c7:6b:7a:c6:41:8d:
                    60:88:7a:f3:c5:20:cf:64:13:44:21:fa:c0:a8:87:
                    d2:83:7b:38:47:46:da:10:71:22:1d:f2:84:9c:12:
                    23:6d:a7:4d:08:67:75:f2:a3:c6:c0:ff:e5:af:ac:
                    16:ad:53:26:39:7d:f1:45:d1:a2:db:7d:93:21:30:
                    d4:6f:31:9b:9c:8a:30:87:d9:03:23:5d:79:f1:22:
                    93:af:70:8f:53:f7:e2:f3:27:c4:a6:1a:35:7d:52:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:F8:B0:62:9D:C7:A0:0D:1D:12:D0:97:4C:C6:4D:B2:9A:11:7D
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:14:d3:a8:1b:1a:cf:2e:87:31:8f:04:5b:6c:30:23:6c:9e:
         fd:39:3d:fa:df:aa:bc:3c:81:46:c2:c1:d3:98:e1:7e:8f:2a:
         1c:82:eb:bb:35:60:94:58:ed:56:64:c1:85:48:86:b0:36:eb:
         c5:69:eb:ed:b0:b1:62:31:22:7a:45:61:53:73:ae:b1:75:a9:
         6a:db:05:83:b6:36:79:f4:3d:b9:d2:22:86:5d:fd:af:ae:35:
         37:6d:b9:5d:80:ea:31:f3:88:4c:61:fb:75:4b:a7:e5:f2:07:
         be:b2:d2:98:05:00:11:5a:69:d6:15:bf:8d:6b:f3:79:a0:25:
         6d:49:72:9a:d1:01:a2:ec:0a:46:37:79:a6:a2:97:4d:63:a2:
         fc:06:fb:73:eb:33:f4:b9:6a:8f:db:7a:b2:9f:67:17:e6:2e:
         ec:b8:ec:e5:f7:fb:64:6c:20:eb:ef:52:9d:ac:07:8a:d6:e6:
         1a:c9:6c:20:4c:26:0c:cc:f0:9c:ca:bb:d8:9f:47:6f:b9:ab:
         46:0e:e1:8c:42:8b:28:36:84:d5:a4:c9:f8:23:97:b7:54:2e:
         da:6a:47:1a:7f:ee:8f:3d:10:61:40:b8:e3:99:a4:2d:b3:a6:
         49:0e:95:a1:fc:49:05:d7:80:65:07:62:5d:cd:d0:96:fb:61:
         5b:b8:a0:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:37 2025 by rpki-client