Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ppMn5k3Yy83pRbucIg1h9WJbyggO0s5JzbfOt/4j/38=
Subject key identifier:   B5:FE:8D:57:FC:3C:06:AA:AA:05:63:FE:DC:B6:68:15:97:34:54:01
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       03E0D90E51F10AE9286EC2824CA3BD174C0C036B
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:29 +0000
ROA not before:           Tue 04 Feb 2025 19:52:29 +0000
ROA not after:            Tue 03 Feb 2026 19:57:29 +0000
asID:                     273072
IP address blocks:        2803:cf90:700::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e0:d9:0e:51:f1:0a:e9:28:6e:c2:82:4c:a3:bd:17:4c:0c:03:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:29 2025 GMT
            Not After : Feb  3 19:57:29 2026 GMT
        Subject: CN=B5FE8D57FC3C06AAAA0563FEDCB6681597345401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:4e:1a:a6:72:36:30:3b:a1:25:0c:c0:f2:
                    06:e2:57:b4:2f:66:79:a7:6f:43:df:d1:20:a8:2e:
                    9c:11:a0:50:dc:55:63:81:24:48:19:67:82:01:f5:
                    77:81:3f:cf:51:8b:11:e8:6b:41:5d:97:b6:65:31:
                    32:73:c5:34:df:d8:ef:90:69:3d:6c:fa:d0:9d:cd:
                    d7:ad:49:1e:1f:15:56:03:f8:f0:a4:07:05:6f:30:
                    bc:aa:e3:27:0f:79:d5:f1:3d:ea:35:f1:ba:33:80:
                    fe:a3:a9:4c:78:60:36:73:6f:5c:dc:1c:cc:69:30:
                    e4:d5:c0:ed:00:1f:7a:a8:f5:28:71:ee:7f:31:3f:
                    5f:e2:a7:ae:9d:71:26:18:52:a1:43:4e:bb:27:5d:
                    77:d2:38:6f:63:32:df:d4:1b:7e:d8:e6:4c:a5:b5:
                    20:d7:35:05:71:30:8e:a6:23:f5:99:e9:b6:6e:83:
                    ab:b0:e1:62:51:29:5b:db:e4:fc:15:56:af:22:8d:
                    41:37:1a:c1:1c:84:89:d4:e4:6e:aa:bb:41:98:cd:
                    3a:a7:35:10:9c:3d:e3:dd:c7:38:73:2d:0b:9a:2f:
                    f6:ca:a1:18:0c:d5:a8:64:31:72:61:3c:9d:14:b6:
                    7d:d5:dc:8a:3d:b4:a2:2e:91:c6:8d:aa:a3:60:96:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:8D:57:FC:3C:06:AA:AA:05:63:FE:DC:B6:68:15:97:34:54:01
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:fc:5d:5c:9f:e1:23:d1:a3:c5:71:fd:ad:19:6d:6f:03:e5:
         46:94:f3:73:63:5c:3b:4b:79:f5:2b:62:7a:c7:d3:47:a8:d7:
         71:ed:6d:e4:19:e5:9e:c9:68:c4:0e:09:9f:3b:0e:ff:19:ea:
         b5:79:81:a3:2f:7a:1d:06:ea:4d:47:3e:ec:60:f1:f0:f1:68:
         82:d4:c4:3c:ac:00:a5:5e:df:eb:18:0d:05:bd:0a:3f:17:2a:
         f6:ad:24:ee:98:c2:c7:86:5d:5c:0d:43:2f:b1:92:5e:7d:e4:
         63:c0:22:44:35:d3:03:74:8d:2e:ff:b9:10:ef:be:98:0c:1a:
         9d:6e:b3:89:c7:38:ea:45:9f:94:43:04:06:9a:a2:e3:b0:c9:
         85:0e:76:f4:74:dc:a4:b5:04:cc:30:81:35:8e:fd:23:ae:e6:
         b0:74:80:76:de:16:36:88:08:27:0a:f9:6f:4c:57:8c:c4:bb:
         06:f7:76:28:ea:ae:77:e4:c9:88:86:a1:da:83:be:1f:0f:82:
         1e:62:55:fb:ca:76:0b:ab:a5:bb:1a:dd:6f:df:b0:78:19:1a:
         0d:38:fe:97:44:78:77:bc:04:6f:88:af:2c:1d:31:2d:a1:f8:
         24:4f:fa:fb:f9:cd:18:94:39:f1:a2:5d:dc:53:ae:a4:15:47:
         4a:53:10:fc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUA+DZDlHxCukobsKCTKO9F0wMA2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMjlaFw0yNjAyMDMxOTU3MjlaMDMxMTAvBgNV
BAMTKEI1RkU4RDU3RkMzQzA2QUFBQTA1NjNGRURDQjY2ODE1OTczNDU0MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx04apnI2MDuhJQzA8gbiV7Qv
Znmnb0Pf0SCoLpwRoFDcVWOBJEgZZ4IB9XeBP89RixHoa0Fdl7ZlMTJzxTTf2O+Q
aT1s+tCdzdetSR4fFVYD+PCkBwVvMLyq4ycPedXxPeo18bozgP6jqUx4YDZzb1zc
HMxpMOTVwO0AH3qo9Shx7n8xP1/ip66dcSYYUqFDTrsnXXfSOG9jMt/UG37Y5kyl
tSDXNQVxMI6mI/WZ6bZug6uw4WJRKVvb5PwVVq8ijUE3GsEchInU5G6qu0GYzTqn
NRCcPePdxzhzLQuaL/bKoRgM1ahkMXJhPJ0Utn3V3Io9tKIukcaNqqNglrlvAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUtf6NV/w8BqqqBWP+3LZoFZc0VAEwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzcz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPPkAcwDQYJKoZIhvcNAQELBQADggEBAH38XVyf4SPRo8Vx/a0ZbW8D5UaU
83NjXDtLefUrYnrH00eo13HtbeQZ5Z7JaMQOCZ87Dv8Z6rV5gaMveh0G6k1HPuxg
8fDxaILUxDysAKVe3+sYDQW9Cj8XKvatJO6YwseGXVwNQy+xkl595GPAIkQ10wN0
jS7/uRDvvpgMGp1us4nHOOpFn5RDBAaaouOwyYUOdvR03KS1BMwwgTWO/SOu5rB0
gHbeFjaICCcK+W9MV4zEuwb3dijqrnfkyYiGodqDvh8Pgh5iVfvKdgurpbsa3W/f
sHgZGg04/pdEeHe8BG+IrywdMS2h+CRP+vv5zRiUOfGiXdxTrqQVR0pTEPw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:33 2025 by rpki-client