Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          EVMJurCWBHvL7TbhsHitAhhfmxIliZkSmrEqFd4Tnns=
Subject key identifier:   4E:2A:1E:B0:EB:9A:F3:BB:7F:63:92:B6:C3:F1:83:35:38:B7:1C:B7
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       17BD78AD47A37741361E8C197FE23CF17F2FB8CF
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:26 +0000
ROA not before:           Tue 04 Feb 2025 19:52:26 +0000
ROA not after:            Tue 03 Feb 2026 19:57:26 +0000
asID:                     273072
IP address blocks:        2803:cf90:4200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:78:ad:47:a3:77:41:36:1e:8c:19:7f:e2:3c:f1:7f:2f:b8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:26 2025 GMT
            Not After : Feb  3 19:57:26 2026 GMT
        Subject: CN=4E2A1EB0EB9AF3BB7F6392B6C3F1833538B71CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:0d:c8:15:15:a1:b6:df:6d:0f:de:b3:dd:
                    f0:1d:ff:e0:66:0b:3e:17:53:2a:ed:05:ae:ce:41:
                    45:cb:68:bc:fb:46:84:28:88:9a:a2:1a:38:cc:24:
                    f1:ee:69:8e:e6:c3:40:49:81:65:0d:fe:59:32:67:
                    89:08:41:65:43:81:45:01:4a:6b:ff:5f:8e:39:75:
                    f8:14:f0:36:9d:d5:24:81:f3:fd:8b:9f:03:22:46:
                    7c:c8:38:7b:53:37:ac:ec:ed:db:c3:fd:b3:1f:24:
                    a8:18:79:ae:22:29:d1:13:6b:e3:58:49:6e:8e:29:
                    2f:d5:80:a6:9d:ab:53:e0:a4:89:16:83:42:9a:87:
                    ea:d3:c8:f4:71:13:d1:cb:09:03:53:7b:9d:ae:81:
                    b4:81:83:93:d7:8d:f9:34:4a:2a:ac:da:03:7c:2a:
                    cd:1a:c8:99:ca:2f:14:8a:b8:65:4d:d6:d2:cf:5b:
                    fd:bb:83:2f:71:21:d1:03:55:09:14:bc:30:50:c8:
                    9a:93:39:54:d5:9d:fc:bb:16:44:c4:ed:99:35:6c:
                    91:10:39:8c:a6:33:5b:c3:84:9b:6c:f6:07:84:01:
                    2d:aa:d0:f7:a1:e1:db:43:a1:44:55:21:49:73:e1:
                    0e:eb:12:6b:39:74:08:57:de:6c:93:20:4e:4b:d2:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:1E:B0:EB:9A:F3:BB:7F:63:92:B6:C3:F1:83:35:38:B7:1C:B7
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343230303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:d0:c0:06:34:48:78:22:a3:1e:56:40:95:60:1d:98:04:38:
         c2:0d:2d:8d:5e:85:84:5b:7f:7e:36:99:8d:0c:c3:3b:76:19:
         d6:e6:83:0c:e2:e8:0e:ba:65:7b:3b:57:ed:9d:39:af:be:cc:
         51:44:7c:c0:8c:31:74:e7:8f:dc:1a:da:10:7a:15:f5:a2:c1:
         05:98:7c:f9:15:1c:dc:fd:6a:fb:ff:78:b0:be:ac:d6:e5:a7:
         f1:79:f0:6d:63:26:7c:ec:1e:d0:3c:75:fc:9a:ce:db:9a:6d:
         e2:e7:97:64:16:1f:51:22:32:d4:fa:9b:1e:66:be:3a:f7:d1:
         c1:3e:02:b5:b7:0a:0e:5d:e1:26:f0:6d:ed:18:f1:09:ac:35:
         e0:97:63:6e:c3:61:b0:3a:25:09:13:51:40:15:5c:4b:db:86:
         90:1d:92:a5:e6:27:32:8c:35:02:13:55:ee:e4:5d:c1:4a:9e:
         c7:40:35:3e:4c:3e:87:17:29:8d:54:7c:79:e8:36:d3:3c:f9:
         09:46:74:d1:81:2f:a1:30:e9:cd:e7:8e:3a:ac:2c:21:eb:f2:
         df:85:cb:71:1b:22:e8:32:3b:22:f4:d4:8a:59:45:43:d5:1f:
         0c:97:87:87:de:af:ac:1f:a0:3a:82:ef:c8:8d:54:91:e2:37:
         c1:29:6e:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:31 2025 by rpki-client