Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          nHv3D+eJ16yMHZuhCLAJlkbI7YVIvndf9xc+mtwKtVM=
Subject key identifier:   91:73:53:3C:60:C8:FB:A0:88:79:15:6C:83:3F:F1:DB:F1:C7:FA:F3
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7921FEB926C840F5424BA6BE304A8B60C6BF8F4C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:33 +0000
ROA not before:           Tue 04 Feb 2025 19:52:33 +0000
ROA not after:            Tue 03 Feb 2026 19:57:33 +0000
asID:                     273072
IP address blocks:        2803:cf90:4400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:fe:b9:26:c8:40:f5:42:4b:a6:be:30:4a:8b:60:c6:bf:8f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:33 2025 GMT
            Not After : Feb  3 19:57:33 2026 GMT
        Subject: CN=9173533C60C8FBA08879156C833FF1DBF1C7FAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:9e:08:98:f3:47:0b:ab:65:3f:a6:7f:97:
                    26:57:82:c7:3b:31:83:ea:39:be:fe:4f:9c:38:72:
                    18:c7:9b:ad:1d:0e:a9:92:3a:61:f8:8f:34:f4:af:
                    0f:c0:81:a3:50:bd:34:32:42:1d:a9:f8:33:5f:71:
                    34:ce:ad:ce:06:bc:16:bc:0f:d9:d9:89:95:26:d1:
                    e9:43:6f:f6:2f:7d:70:53:a2:bb:2a:5e:8d:eb:fa:
                    94:6e:0e:d4:c8:47:71:48:f8:e1:37:23:4a:e3:38:
                    3d:bb:94:cb:4a:98:19:df:5b:e3:ab:b9:74:73:07:
                    70:83:21:71:02:4b:f9:3e:bd:fa:ea:29:a1:ac:32:
                    ef:e5:1a:bc:b8:9a:e0:a8:17:13:b1:2f:74:5f:33:
                    24:04:1f:c7:77:cc:8b:1c:c6:61:bd:a3:6a:6f:19:
                    fd:15:ca:2a:a8:f5:cb:49:28:15:c2:d7:ae:40:aa:
                    60:f5:32:f9:0d:94:13:2d:b8:99:55:e2:ce:08:71:
                    0e:59:27:4b:28:87:9e:93:fc:21:27:02:1b:5c:b7:
                    13:b3:79:7d:92:a2:52:e5:4d:24:0d:da:c4:26:d8:
                    92:d5:b3:2d:fc:9a:2f:f8:04:83:ec:a5:c8:d4:53:
                    fc:12:e4:80:9f:77:f4:d3:a3:af:83:0c:22:47:8c:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:53:3C:60:C8:FB:A0:88:79:15:6C:83:3F:F1:DB:F1:C7:FA:F3
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:54:14:06:84:2b:3e:d1:88:ad:70:99:30:d5:5f:a1:5b:72:
         dd:d1:6c:f0:b2:f3:7e:cf:00:17:69:4c:8d:c3:7d:38:d2:19:
         9b:db:98:12:10:28:e1:7a:36:af:6f:c1:19:d8:b2:d0:e7:62:
         e4:c0:f8:f1:f0:0c:ec:85:00:8d:72:05:98:ef:63:86:b3:8f:
         4f:73:e9:60:6e:75:87:62:1a:4a:65:ce:d8:29:11:51:6c:f9:
         c3:4f:a2:ff:54:cb:8d:80:1f:23:c6:19:db:17:3b:e7:54:4e:
         d7:da:8f:16:f2:73:30:d3:a8:b1:b4:aa:43:67:f9:92:39:d6:
         06:ea:fe:cb:cb:8b:31:8c:5b:24:c5:bf:8f:6a:76:7f:e4:ea:
         7d:fd:f1:dd:e0:2c:a9:dc:0d:8a:6e:3a:35:b0:89:5b:96:c7:
         79:01:47:5a:f8:55:9f:14:92:43:be:57:4c:ee:97:d7:19:2d:
         0e:a9:ec:01:61:9b:4e:25:c2:98:f6:69:17:bb:1e:b9:20:07:
         36:53:5b:ab:15:78:34:5d:26:e6:12:08:6a:9b:11:3c:47:60:
         cb:b7:43:78:9e:c2:5f:a3:49:d2:33:b1:30:76:b5:8a:c3:d5:
         73:34:4b:e4:0f:37:26:f1:d2:84:1d:29:d9:88:49:73:a4:d7:
         93:25:70:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:29 2025 by rpki-client