Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ysaXbKJIsAnfCdthmJhX9D2qIs631sgapKuajdYjhYY=
Subject key identifier:   FD:5D:19:42:BC:13:A8:8F:B5:C6:B0:30:2B:2F:A7:F7:1D:6F:FD:00
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       5FE53133184767D945F92D218646673E693958CA
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:35 +0000
ROA not before:           Tue 04 Feb 2025 19:52:35 +0000
ROA not after:            Tue 03 Feb 2026 19:57:35 +0000
asID:                     273072
IP address blocks:        2803:cf90:4300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e5:31:33:18:47:67:d9:45:f9:2d:21:86:46:67:3e:69:39:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:35 2025 GMT
            Not After : Feb  3 19:57:35 2026 GMT
        Subject: CN=FD5D1942BC13A88FB5C6B0302B2FA7F71D6FFD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:f5:22:c7:e2:4d:19:77:05:ae:21:52:4a:
                    05:b6:41:93:eb:5e:b9:85:12:fa:a5:88:5c:1b:aa:
                    b5:52:df:c9:7a:cb:4f:36:27:d8:53:83:f8:61:d0:
                    5c:a6:3d:c9:89:0c:91:ca:42:7a:bc:74:81:81:87:
                    be:b6:e7:07:39:ea:91:d8:1d:e4:d5:ee:c8:c9:ba:
                    12:c7:e7:ed:46:63:44:a0:25:ca:d0:d5:94:87:8e:
                    2c:f3:3a:9f:0e:e5:59:c9:37:09:81:1c:c9:ac:9a:
                    69:cc:29:7a:dd:30:52:50:b5:72:a0:7f:99:03:a1:
                    73:34:db:5c:0d:e1:4d:40:a5:48:0f:75:7d:b1:fe:
                    98:38:04:73:7c:ec:4c:79:54:f7:41:0f:17:e7:30:
                    1a:8a:93:91:80:48:75:25:07:3f:a1:8f:a8:7e:15:
                    d4:a4:69:2c:b6:80:94:21:2f:8c:a6:a7:dc:43:b1:
                    41:ae:4b:96:b9:f3:9d:26:94:38:90:80:c8:97:5f:
                    87:5d:5d:02:ec:22:56:32:80:19:e6:b7:d5:01:64:
                    64:c3:22:c5:bb:a7:56:96:32:30:2c:65:a8:81:94:
                    4c:f8:0f:55:67:ac:c0:db:65:6d:1a:f4:03:1f:ab:
                    89:ef:0d:dc:db:b4:5e:38:5a:c9:b9:a4:80:fe:5d:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:19:42:BC:13:A8:8F:B5:C6:B0:30:2B:2F:A7:F7:1D:6F:FD:00
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:8a:69:a4:b5:4c:b6:9e:0a:9a:a2:4d:89:26:73:5d:50:
         1e:9e:52:e1:d6:70:96:8d:ea:20:10:ae:4a:15:43:ab:c7:3a:
         4f:e2:45:27:af:4f:ef:a4:c0:e7:d7:c2:d5:2a:d0:96:66:86:
         9b:f9:f3:39:ac:4c:c5:22:6d:01:81:36:d0:9d:f1:85:50:98:
         df:4f:a3:f1:1e:7e:7b:a7:a9:ca:44:db:04:05:f0:e2:59:aa:
         1e:62:a2:c8:23:da:88:c8:47:3a:59:e3:53:d9:1b:37:4c:b1:
         a8:cf:8e:b2:3a:30:89:0c:d8:e8:79:a0:93:30:bf:f5:70:9c:
         eb:d6:6a:d7:5c:30:59:db:36:0f:c3:1c:29:52:69:21:a9:8f:
         aa:24:8a:61:85:e2:a4:d2:32:1d:73:bf:0c:79:94:22:53:f6:
         70:9a:48:d4:c1:46:92:21:43:2b:0e:01:7c:52:10:40:53:03:
         91:08:f8:38:58:6b:b3:b8:9d:39:25:0d:0f:b9:9a:8c:5c:3b:
         93:2e:74:f6:3e:63:30:46:f1:ea:62:60:8e:85:89:3d:3a:d7:
         2f:10:98:90:d0:4a:5b:9e:52:d1:0c:9b:a9:f1:55:d1:f1:5e:
         48:63:7b:2a:c6:7a:16:71:cc:c9:e7:cb:92:f1:6f:94:5e:b9:
         c7:45:32:6d
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUX+UxMxhHZ9lF+S0hhkZnPmk5WMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzVaFw0yNjAyMDMxOTU3MzVaMDMxMTAvBgNV
BAMTKEZENUQxOTQyQkMxM0E4OEZCNUM2QjAzMDJCMkZBN0Y3MUQ2RkZEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvPUix+JNGXcFriFSSgW2QZPr
XrmFEvqliFwbqrVS38l6y082J9hTg/hh0FymPcmJDJHKQnq8dIGBh7625wc56pHY
HeTV7sjJuhLH5+1GY0SgJcrQ1ZSHjizzOp8O5VnJNwmBHMmsmmnMKXrdMFJQtXKg
f5kDoXM021wN4U1ApUgPdX2x/pg4BHN87Ex5VPdBDxfnMBqKk5GASHUlBz+hj6h+
FdSkaSy2gJQhL4ymp9xDsUGuS5a5850mlDiQgMiXX4ddXQLsIlYygBnmt9UBZGTD
IsW7p1aWMjAsZaiBlEz4D1VnrMDbZW0a9AMfq4nvDdzbtF44Wsm5pID+XYXlAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU/V0ZQrwTqI+1xrAwKy+n9x1v/QAwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QQzANBgkqhkiG9w0BAQsFAAOCAQEAHUiKaaS1TLaeCpqiTYkmc11Q
Hp5S4dZwlo3qIBCuShVDq8c6T+JFJ69P76TA59fC1SrQlmaGm/nzOaxMxSJtAYE2
0J3xhVCY30+j8R5+e6epykTbBAXw4lmqHmKiyCPaiMhHOlnjU9kbN0yxqM+Osjow
iQzY6HmgkzC/9XCc69Zq11wwWds2D8McKVJpIamPqiSKYYXipNIyHXO/DHmUIlP2
cJpI1MFGkiFDKw4BfFIQQFMDkQj4OFhrs7idOSUND7majFw7ky509j5jMEbx6mJg
joWJPTrXLxCYkNBKW55S0QybqfFV0fFeSGN7KsZ6FnHMyefLkvFvlF65x0UybQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:39 2025 by rpki-client