Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          m3ipLhM7saBxeY1PS2dP1yUoBdPKfNGzi4Jp4O3EEbQ=
Subject key identifier:   98:2F:47:97:34:82:37:4B:B0:68:38:3C:D6:21:DF:43:7E:53:FC:FE
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6EA75F33DE02543EBAE2B316CF4FA58ED19BCF72
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:14 +0000
ROA not before:           Tue 05 Mar 2024 17:59:14 +0000
ROA not after:            Tue 04 Mar 2025 18:04:14 +0000
asID:                     273072
IP address blocks:        2803:cf90:4500::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a7:5f:33:de:02:54:3e:ba:e2:b3:16:cf:4f:a5:8e:d1:9b:cf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:14 2024 GMT
            Not After : Mar  4 18:04:14 2025 GMT
        Subject: CN=982F47973482374BB068383CD621DF437E53FCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:7b:cd:4f:59:23:6f:29:dc:99:7c:82:77:
                    fc:a0:a8:94:0c:30:9d:07:6e:78:3d:a7:c8:f0:f3:
                    17:ea:23:eb:5a:40:94:aa:76:c7:cc:82:3c:7c:8b:
                    95:30:aa:eb:5f:9e:de:de:fd:30:f0:5b:34:ae:0c:
                    29:af:17:8f:dd:47:56:e1:0a:5d:1b:29:eb:59:81:
                    a0:4f:df:75:17:66:0b:aa:dc:21:79:b9:35:87:e1:
                    3e:5c:64:4f:8c:c9:ee:c7:1e:f7:bc:b7:99:a2:80:
                    73:33:2a:2c:b1:73:26:9e:d3:bd:5d:e0:b0:88:bd:
                    06:af:1b:c2:2e:0e:20:3e:f0:80:d0:c4:65:b2:ce:
                    6c:47:74:6e:74:fb:63:23:a3:e3:66:5d:d9:a4:2b:
                    8a:cf:44:94:da:d8:cb:13:2c:ff:a3:11:2d:5d:ec:
                    ea:b5:4b:fc:73:b0:51:20:c1:e3:7c:52:34:77:2b:
                    28:be:65:e6:b4:12:34:7d:67:9e:94:86:9e:74:0b:
                    22:52:b2:cb:32:40:16:21:1a:4e:85:70:52:cd:9f:
                    47:a1:8b:67:2e:b6:f5:06:ac:98:00:f4:7c:5a:4b:
                    c1:70:f0:b0:72:40:ad:de:13:8b:b7:59:e1:b6:43:
                    8a:d7:bd:fb:50:93:f5:6e:a8:60:fd:dc:a7:16:57:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:47:97:34:82:37:4B:B0:68:38:3C:D6:21:DF:43:7E:53:FC:FE
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:1c:bd:22:89:9a:12:23:7f:43:5e:ee:9a:f4:65:a6:b6:
         e3:5f:cd:bd:69:07:8b:f7:c7:a9:76:55:9b:88:c1:74:30:32:
         f0:7b:d6:61:8f:89:2f:c5:13:74:94:e6:0a:63:24:56:00:45:
         df:e4:94:ac:24:24:25:d7:41:d0:52:f7:f9:df:a2:74:8c:5e:
         dd:ce:47:0d:00:31:81:68:f4:62:25:d6:8e:53:55:7e:a1:de:
         f0:8a:4b:9d:78:91:3b:7e:92:5e:cf:57:bc:49:1e:9e:19:e1:
         ec:0f:9d:f3:63:61:34:d8:46:aa:09:d2:14:49:f4:88:b2:88:
         c5:ea:43:3a:28:7a:31:96:42:06:99:10:cb:08:95:b6:0e:15:
         5e:f9:3a:cc:8b:c4:25:0c:2d:f5:c7:a5:a5:6c:79:99:fa:a1:
         90:21:3c:da:07:38:ac:46:ca:5d:a8:87:97:08:fe:11:97:41:
         3c:68:cd:33:ee:f4:e5:e7:21:06:0a:ac:3d:21:03:eb:f9:c0:
         f0:42:bf:ef:34:bd:c0:97:b0:a8:d0:32:d7:f6:b3:76:62:54:
         b3:f0:20:09:2b:e4:c7:57:92:5e:9f:02:74:d7:3c:74:de:3c:
         e6:1c:6d:e0:60:8c:4e:4e:42:6c:10:22:ae:71:db:69:4f:65:
         40:1b:42:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:59:04 2025 by rpki-client