Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a346130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          RNopfTZNL4AnobzMpGK7496uPzCYUC7g+ib1wBT6AKk=
Subject key identifier:   AE:E3:59:B5:A0:02:39:AB:98:2C:97:BF:05:BF:DC:0E:5D:C1:23:41
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       0622B92153AFD219F650911DD9F9D6E90D75A302
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:22 +0000
ROA not before:           Tue 04 Feb 2025 19:52:22 +0000
ROA not after:            Tue 03 Feb 2026 19:57:22 +0000
asID:                     273072
IP address blocks:        2803:cf90:4a00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:22:b9:21:53:af:d2:19:f6:50:91:1d:d9:f9:d6:e9:0d:75:a3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:22 2025 GMT
            Not After : Feb  3 19:57:22 2026 GMT
        Subject: CN=AEE359B5A00239AB982C97BF05BFDC0E5DC12341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:d5:99:82:b9:6c:12:e5:a0:55:fe:74:aa:
                    2a:82:4e:58:72:22:75:99:d5:45:de:05:34:45:38:
                    81:dd:c9:43:58:b9:33:a9:13:be:11:11:65:0d:bc:
                    0e:e1:1a:b6:64:3a:bd:0f:e6:ab:c2:5f:4b:02:6d:
                    52:42:80:8a:23:e4:49:87:6f:bc:02:11:e6:4d:ef:
                    bd:71:92:7c:67:26:c7:71:69:52:fa:02:8d:43:d4:
                    f6:ae:37:42:cc:bb:a5:c0:26:ec:a1:99:15:42:65:
                    27:fe:ca:71:b9:4e:8d:4c:dd:26:a3:80:69:02:2c:
                    08:3b:0f:4e:0e:89:f7:fa:56:39:35:03:39:95:3c:
                    f0:2b:c9:c2:7e:58:6d:f7:b1:cd:56:24:a3:a4:1e:
                    59:1f:fc:dc:68:67:0c:52:c9:e1:73:12:44:dd:fa:
                    60:ea:ca:5d:43:1a:3e:e3:7e:18:df:62:0d:a0:e2:
                    d3:c3:cc:60:fe:68:28:d2:d8:cb:b0:1c:89:3a:51:
                    bb:45:11:58:03:e9:25:66:04:c8:c4:6f:c8:a0:a7:
                    d3:0e:17:21:12:88:15:2c:36:a5:7d:c5:4f:53:41:
                    7f:d2:a0:30:6e:33:eb:e9:57:b8:8c:90:e4:ee:bd:
                    16:ba:85:f4:f3:c6:ac:bb:57:a6:a2:11:a2:1c:af:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:59:B5:A0:02:39:AB:98:2C:97:BF:05:BF:DC:0E:5D:C1:23:41
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:51:8a:84:0d:07:ad:44:9f:5b:a6:74:54:38:75:79:eb:
         23:3f:9a:57:e6:35:0b:87:85:52:6f:53:ca:d7:a1:4a:4b:e5:
         58:44:d5:f3:96:8b:37:08:22:a0:36:bb:0d:48:e4:ee:4c:73:
         ba:2c:36:69:a8:cf:c8:c0:c2:5b:38:a9:ee:a3:37:ae:e8:af:
         1b:ae:2e:0e:71:5f:9f:23:23:f8:fb:ee:3c:3f:e9:af:22:7b:
         17:f3:4d:cb:26:63:46:db:8d:8c:88:ec:87:62:c7:4c:13:b8:
         49:fa:ca:c7:83:6d:82:ac:0e:f3:22:13:b7:15:72:60:5f:c2:
         50:af:2e:18:1c:82:3e:b9:78:b0:68:5e:97:73:83:ca:07:90:
         66:a4:3c:29:1c:b7:c8:57:ca:93:8b:d8:17:8c:e2:5b:89:5b:
         5e:1c:c4:30:29:5d:c6:de:2e:ea:27:1b:8f:d0:27:b1:6c:45:
         2c:fa:c9:76:8b:3f:95:5a:5e:d5:eb:c9:dd:0f:5e:0e:37:58:
         1e:0e:af:e1:2d:22:7e:ed:fd:10:bc:58:87:9c:ef:e4:ec:11:
         6b:43:aa:04:0a:7c:1f:97:e0:b9:00:b2:8d:c9:3f:85:d8:e9:
         b8:05:bc:19:67:1c:d3:4b:9c:c4:eb:70:96:43:b0:52:10:4a:
         f6:51:3c:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:01 2025 by rpki-client