Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Z2g3hu4/TBuFDiycDib1KsrZNTu3kavzIEKSY2NDviQ=
Subject key identifier:   3B:4A:55:97:6B:AE:A6:63:BB:E3:58:19:8B:F8:6E:5F:A5:5D:CF:E7
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       430EBA69B3F1B3D6D52B33698618CF4084026D60
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:40 +0000
ROA not before:           Tue 04 Feb 2025 19:52:40 +0000
ROA not after:            Tue 03 Feb 2026 19:57:40 +0000
asID:                     273072
IP address blocks:        2803:cf90:400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:ba:69:b3:f1:b3:d6:d5:2b:33:69:86:18:cf:40:84:02:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:40 2025 GMT
            Not After : Feb  3 19:57:40 2026 GMT
        Subject: CN=3B4A55976BAEA663BBE358198BF86E5FA55DCFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:cc:3d:62:ca:3b:39:4c:40:0b:f7:2a:00:
                    f6:d8:5c:dd:41:cc:dd:4e:f3:4b:a2:67:a9:ed:ed:
                    bd:d5:ea:c5:59:ed:b0:32:88:14:eb:b4:36:4f:ab:
                    e2:67:74:da:90:69:9b:59:19:d3:8b:ac:d3:64:db:
                    93:f3:a4:5c:91:41:63:b0:c4:c8:41:ab:23:4f:ac:
                    7e:9c:0a:bc:11:d7:c6:a4:b4:12:0c:8b:96:0a:a6:
                    12:a5:52:24:5f:f4:bd:46:99:db:ed:a1:72:04:ab:
                    bd:a5:f1:85:92:22:86:1e:50:19:aa:92:76:b0:11:
                    b1:70:1a:53:a3:3b:e6:32:f3:fe:29:ab:93:f3:ac:
                    67:33:a2:7a:fc:c3:9a:6d:5c:61:4c:ad:81:af:57:
                    93:b3:bc:06:09:31:5b:5f:87:f7:18:fa:69:de:fc:
                    02:9c:4f:1a:36:e5:ea:d7:5c:90:e3:ca:6d:51:9a:
                    87:4c:b8:c1:e7:30:0c:ca:4f:6c:69:7b:c1:49:48:
                    c8:b2:28:12:6e:a4:db:ad:5d:8b:a6:c1:dc:4d:1d:
                    2a:bf:a6:e8:92:44:83:87:99:72:5d:d8:38:5b:6e:
                    36:7a:b8:a2:4c:8d:db:3c:2a:cb:a5:c4:87:78:8c:
                    a4:06:13:33:7b:7e:60:c9:b6:b9:19:5c:cc:e2:2d:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:55:97:6B:AE:A6:63:BB:E3:58:19:8B:F8:6E:5F:A5:5D:CF:E7
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:79:67:cb:2c:b2:8e:f7:c4:06:52:17:87:b5:23:e5:54:
         47:82:2e:78:bb:43:c2:60:fc:1f:8b:a6:08:45:bf:9d:32:17:
         d0:d4:ed:70:5c:d6:49:f0:dd:22:76:f6:65:54:0f:ed:16:9b:
         78:05:5d:78:fa:07:41:7e:b0:4c:b3:34:8a:50:5f:2d:19:9b:
         5a:6f:33:bf:5e:69:71:80:52:14:fc:3f:34:bc:84:8d:e8:28:
         61:3b:d0:1f:28:1f:b7:23:a6:2e:9c:a5:07:fc:60:43:08:c9:
         e6:54:9f:06:4a:51:35:4e:a2:51:1e:31:58:cf:a9:1d:e6:8c:
         22:a4:91:bd:ba:9e:9a:87:28:29:9e:5b:58:7f:8b:1f:0a:62:
         d0:34:80:ef:dd:36:db:bd:97:cf:42:2b:d2:9d:fd:f9:ee:90:
         7e:84:9e:f9:f7:9b:ba:8d:15:35:b2:27:f6:43:c3:c8:e9:e5:
         a8:f8:60:97:9d:db:bc:05:99:7e:0d:2c:56:30:ca:b2:35:a8:
         56:8d:82:84:b6:bd:09:51:e4:c5:db:ad:88:4d:11:5c:b5:33:
         fc:38:2c:4b:6e:5d:1a:23:9b:23:e3:66:9a:a4:c7:44:95:ba:
         d3:5e:67:19:c9:a2:e1:e7:02:40:05:a7:36:86:6d:8d:9a:b6:
         28:3c:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:14 2025 by rpki-client