Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Kto5alGSmeHX+plpLCOM2SSNk5vjiQWVZx0V9jIaYQw=
Subject key identifier:   87:91:71:22:67:1D:7A:09:56:67:FB:AC:C4:05:9F:3D:D1:5C:96:27
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       133C5824131C9DD2651179E88B82D12423158994
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:30 +0000
ROA not before:           Tue 04 Feb 2025 19:52:30 +0000
ROA not after:            Tue 03 Feb 2026 19:57:30 +0000
asID:                     273072
IP address blocks:        2803:cf90:4800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3c:58:24:13:1c:9d:d2:65:11:79:e8:8b:82:d1:24:23:15:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:30 2025 GMT
            Not After : Feb  3 19:57:30 2026 GMT
        Subject: CN=87917122671D7A095667FBACC4059F3DD15C9627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:69:aa:ef:88:88:ec:3f:87:b7:82:4c:bc:
                    8d:42:26:73:c2:5a:6a:5b:34:dd:20:d3:38:a0:5a:
                    0e:4a:39:b6:9f:21:3a:5e:f1:fa:5d:cd:33:40:c0:
                    17:84:f3:d5:68:a5:97:e0:29:61:bb:f6:98:21:6a:
                    9c:14:29:2b:85:73:1b:df:51:dd:11:5f:4e:d0:f8:
                    e1:e0:a7:51:11:a5:e8:3c:7e:36:15:b4:e4:30:01:
                    eb:05:73:95:c3:45:1c:80:f4:18:b6:42:2c:a7:08:
                    a6:1d:e3:d7:4c:e3:41:20:9f:95:7c:2e:35:a0:4a:
                    5f:43:d5:36:21:93:d0:b7:29:49:e2:c8:41:86:0f:
                    cf:64:4f:14:2f:ab:82:57:f9:80:7d:93:d1:72:c6:
                    15:d0:66:44:fa:90:85:74:b5:07:06:dd:dc:c5:fa:
                    24:13:6a:bd:28:f5:07:37:72:a8:d2:0f:01:d0:6d:
                    e0:8b:22:53:cf:55:e1:08:b2:b0:e6:b7:eb:58:cb:
                    cb:c6:8f:94:02:b0:14:38:fd:b1:97:4f:4e:bc:09:
                    46:6d:ac:a8:1e:e9:d0:41:31:fd:51:b1:4d:fd:75:
                    4a:94:4a:86:81:fa:ec:dc:99:61:21:ee:55:e3:f5:
                    44:25:9d:d4:e8:67:87:07:ff:08:3a:a2:5d:2c:ac:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:71:22:67:1D:7A:09:56:67:FB:AC:C4:05:9F:3D:D1:5C:96:27
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:37:90:d6:3e:fb:b6:34:4e:21:ed:8a:10:90:0e:d1:5f:be:
         34:68:ed:d4:6e:92:78:39:4b:c5:1d:47:35:a1:e5:95:31:28:
         2a:59:25:3e:f5:b6:e8:20:7e:13:01:9c:1e:80:e6:df:43:db:
         1b:34:f0:97:d2:ef:af:a6:6f:2e:0e:cc:f0:f2:b2:23:e7:05:
         c2:e0:92:bb:c6:ac:f1:5f:1a:40:fc:ef:a1:f7:3a:10:78:64:
         a4:34:9d:79:35:8c:b4:0a:6b:0f:83:5a:49:99:83:3d:05:85:
         45:71:9e:5a:38:2e:02:6b:bd:b8:d5:f7:50:cd:02:a1:0e:8d:
         68:fe:ec:50:c7:bc:a2:a9:ae:e4:c9:28:53:31:8d:54:62:57:
         55:91:25:1c:f1:fb:50:55:1a:64:9a:95:ac:5c:9d:61:09:db:
         f2:91:2c:b7:f7:d8:e7:f2:37:be:0e:a8:4c:f4:77:d9:dd:91:
         5b:0b:b4:bd:a8:4a:b2:6d:07:fe:4f:0e:91:77:d6:32:be:d9:
         ac:0a:42:dc:34:46:1d:be:20:ee:e3:36:1e:a3:6b:53:1b:08:
         c1:1c:8b:f6:e3:5b:6d:83:c6:6a:70:9c:20:cf:2a:e5:0f:87:
         2c:64:f7:2d:65:83:ba:9a:a1:ec:25:2a:ae:cc:96:c1:77:e1:
         83:c6:33:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:10 2025 by rpki-client