Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          UyGWdGRvQ7nMG4tKjdaWz1+NrMqI6Qw/w8Mfj+pm6xY=
Subject key identifier:   EA:83:CD:29:E6:2D:1E:C5:06:2D:8C:09:4F:7C:A2:6A:73:D5:0D:44
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       527C19DCA93DBE28A10B4223A7092ED68FE81AF1
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:35 +0000
ROA not before:           Tue 04 Feb 2025 19:52:35 +0000
ROA not after:            Tue 03 Feb 2026 19:57:35 +0000
asID:                     273072
IP address blocks:        2803:cf90:a00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7c:19:dc:a9:3d:be:28:a1:0b:42:23:a7:09:2e:d6:8f:e8:1a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:35 2025 GMT
            Not After : Feb  3 19:57:35 2026 GMT
        Subject: CN=EA83CD29E62D1EC5062D8C094F7CA26A73D50D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:ca:a8:50:32:36:e5:a1:8c:d8:e7:9f:65:
                    65:ec:0d:10:a3:92:92:93:10:68:4a:e8:20:38:9d:
                    f0:b2:2e:ad:6c:60:ad:ff:b5:08:70:e3:7b:5c:f4:
                    b7:25:c6:9a:24:c5:b0:4c:96:44:be:ac:f5:59:da:
                    40:86:52:0e:cb:e9:6b:93:a8:b4:02:05:77:f6:f9:
                    34:e6:19:5d:b8:e9:ba:32:bf:9b:97:99:d2:d7:00:
                    15:e2:80:07:12:f2:de:31:96:a6:a0:0c:87:b1:a1:
                    26:a6:c7:6f:f8:19:c5:b8:7f:7b:3b:63:e7:e1:ee:
                    2f:04:1f:f2:72:d9:e8:d2:f8:a5:01:33:01:e0:ae:
                    31:f5:f6:f0:ee:70:ed:0a:63:5e:20:3c:a1:ad:d7:
                    90:5b:be:30:37:03:7e:0e:b7:d0:4f:bf:12:35:af:
                    30:ee:19:82:65:af:23:c9:09:c5:6b:2e:3a:bd:c3:
                    33:9a:18:8f:6e:70:57:fe:52:70:39:d2:26:19:5d:
                    10:91:91:f8:17:30:35:4d:b1:9a:0d:35:3d:1a:71:
                    06:79:9f:be:f0:fd:98:78:c4:d6:ca:39:e2:3b:c3:
                    1b:07:12:19:ca:44:a6:81:b5:87:9d:0f:39:02:f6:
                    25:dd:62:b5:c0:e6:84:b7:6f:22:1a:63:80:0f:e2:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:83:CD:29:E6:2D:1E:C5:06:2D:8C:09:4F:7C:A2:6A:73:D5:0D:44
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:a4:09:83:58:7c:16:a0:05:3b:5d:55:13:e8:84:82:9c:
         e5:08:a6:6b:b4:fc:b1:a6:10:c6:24:99:b2:7e:12:46:71:2e:
         53:d6:3a:b4:d2:c4:61:47:04:42:1d:57:8d:dd:54:b2:63:58:
         39:56:5c:7a:dd:6c:b4:2f:53:65:49:cc:d0:03:f7:ad:eb:87:
         ab:16:b8:d2:45:3f:57:35:49:32:99:5d:6a:78:0e:93:f8:de:
         eb:63:4e:c0:60:fb:9e:d3:ef:37:05:4b:f2:d2:1c:dd:76:d3:
         71:92:d8:87:25:d0:dd:cd:87:35:6a:90:55:b0:3f:7c:76:c8:
         93:00:e4:31:16:3f:9a:34:b2:dc:a1:c8:3f:9b:4b:18:8c:85:
         ad:b2:c7:8a:54:a4:76:6a:f7:aa:dc:41:79:d5:a7:e1:fe:fd:
         af:a0:6a:31:b1:81:d6:db:68:78:a1:bf:5f:7e:24:c9:53:65:
         28:db:1e:79:cc:ec:7b:37:09:6c:c7:15:96:12:10:64:25:e8:
         92:71:13:89:40:3b:eb:67:48:e8:83:8c:07:46:90:6f:4d:76:
         83:6f:d8:23:18:d8:85:2e:dd:19:50:e3:98:0e:9e:f7:f6:da:
         d3:b9:cd:85:5e:c1:43:cc:1e:25:79:0e:1f:e0:fb:ee:6c:d8:
         33:27:25:95
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUnwZ3Kk9viihC0Ijpwku1o/oGvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMzVaFw0yNjAyMDMxOTU3MzVaMDMxMTAvBgNV
BAMTKEVBODNDRDI5RTYyRDFFQzUwNjJEOEMwOTRGN0NBMjZBNzNENTBENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B8qoUDI25aGM2OefZWXsDRCj
kpKTEGhK6CA4nfCyLq1sYK3/tQhw43tc9LclxpokxbBMlkS+rPVZ2kCGUg7L6WuT
qLQCBXf2+TTmGV246boyv5uXmdLXABXigAcS8t4xlqagDIexoSamx2/4GcW4f3s7
Y+fh7i8EH/Jy2ejS+KUBMwHgrjH19vDucO0KY14gPKGt15BbvjA3A34Ot9BPvxI1
rzDuGYJlryPJCcVrLjq9wzOaGI9ucFf+UnA50iYZXRCRkfgXMDVNsZoNNT0acQZ5
n77w/Zh4xNbKOeI7wxsHEhnKRKaBtYedDzkC9iXdYrXA5oS3byIaY4AP4vtRAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU6oPNKeYtHsUGLYwJT3yianPVDUQwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhNjEz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPPkAowDQYJKoZIhvcNAQELBQADggEBAFUepAmDWHwWoAU7XVUT6ISCnOUI
pmu0/LGmEMYkmbJ+EkZxLlPWOrTSxGFHBEIdV43dVLJjWDlWXHrdbLQvU2VJzNAD
963rh6sWuNJFP1c1STKZXWp4DpP43utjTsBg+57T7zcFS/LSHN1203GS2Icl0N3N
hzVqkFWwP3x2yJMA5DEWP5o0styhyD+bSxiMha2yx4pUpHZq96rcQXnVp+H+/a+g
ajGxgdbbaHihv19+JMlTZSjbHnnM7Hs3CWzHFZYSEGQl6JJxE4lAO+tnSOiDjAdG
kG9NdoNv2CMY2IUu3RlQ45gOnvf22tO5zYVewUPMHiV5Dh/g++5s2DMnJZU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:28 2025 by rpki-client