Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          lvTARAgkbzOTMbVTQDNsRjzYnzVg9LKHpfbCiteZn8w=
Subject key identifier:   CF:B1:E5:69:05:97:D4:13:D0:33:0E:4E:89:63:37:6C:C4:14:D6:12
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6287EEAE18E9D369E25F8E8B58B218C4D75A7751
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:09 +0000
ROA not before:           Tue 05 Mar 2024 17:59:09 +0000
ROA not after:            Tue 04 Mar 2025 18:04:09 +0000
asID:                     273072
IP address blocks:        2803:cf90:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:ee:ae:18:e9:d3:69:e2:5f:8e:8b:58:b2:18:c4:d7:5a:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:09 2024 GMT
            Not After : Mar  4 18:04:09 2025 GMT
        Subject: CN=CFB1E5690597D413D0330E4E8963376CC414D612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:76:fb:8c:d2:65:32:dd:0f:4b:77:2e:a0:ff:
                    ed:6b:75:bd:40:68:1f:78:83:6e:c3:8c:a1:5a:a7:
                    f1:07:d6:83:40:89:e6:3c:fe:06:cc:f8:3e:e0:dd:
                    5a:dd:2e:7a:94:ab:d8:14:2d:97:97:9d:f3:b3:9d:
                    35:50:cc:57:d9:89:6c:5b:8a:a3:03:e7:a9:94:08:
                    42:20:fe:4f:48:1c:e4:5f:5c:bd:cb:8d:8a:3e:f3:
                    28:81:ae:7d:30:9c:54:c3:d5:6d:43:ff:1d:2e:eb:
                    1a:ec:96:ff:dc:3b:01:d0:5f:ed:9a:78:ff:f7:75:
                    32:35:8d:08:26:f8:fb:49:20:9c:a1:cb:d7:18:0b:
                    d0:48:c4:c7:7b:e8:42:87:28:a9:c7:8d:80:ab:36:
                    24:03:1c:24:dc:c6:03:a7:0d:66:df:03:c6:05:4b:
                    a5:00:4d:6d:47:5b:a8:93:22:0c:ae:d2:51:79:5d:
                    e1:09:85:99:5a:49:ef:55:cb:56:68:94:40:61:06:
                    f7:a5:60:7c:7b:78:62:ff:71:47:ec:59:75:78:7a:
                    50:55:24:39:7f:be:e0:68:60:8c:68:b5:4f:67:4d:
                    4f:14:e8:65:ae:d2:c5:9e:f6:c5:fc:a2:3d:77:59:
                    46:10:cb:40:98:dd:12:ce:b6:c8:79:80:d5:91:9d:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:E5:69:05:97:D4:13:D0:33:0E:4E:89:63:37:6C:C4:14:D6:12
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313030303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:db:0b:a4:3b:b4:2f:c0:bb:dd:29:60:5e:7e:1f:12:a2:65:
         18:3a:01:60:98:1a:6c:19:9c:7d:20:25:b6:b5:63:95:49:01:
         d9:c4:eb:d0:04:f2:71:6d:64:87:c5:6e:d4:e3:58:f9:25:b7:
         10:81:1f:26:86:be:6e:42:eb:f7:a0:85:7a:5c:ad:6f:2f:a9:
         ad:99:02:75:39:b6:7e:b0:54:24:6d:18:c1:e8:f4:23:a0:0c:
         26:0f:dc:d4:ae:4f:56:ce:ee:d2:cb:58:62:61:e4:3d:24:9b:
         b7:0d:8f:81:51:fe:ea:c7:66:20:51:ac:6a:79:32:53:f4:37:
         49:90:b8:5b:2f:f0:0a:f7:72:7a:b6:77:75:99:de:12:ed:04:
         82:f7:0d:5b:b8:fc:eb:a9:da:9e:75:d0:95:fc:48:51:84:76:
         65:ed:22:cb:16:52:fd:ef:dc:e8:5e:04:5d:b0:e2:6a:28:dc:
         65:09:d7:f8:4e:e9:20:b5:60:8d:ac:09:88:77:6e:9b:b1:f9:
         d0:03:51:c9:3a:08:b9:1c:f5:57:fc:82:8a:50:04:1c:48:7b:
         2e:1f:d2:7c:cf:e6:0d:83:e3:75:47:27:04:a0:06:20:e0:a7:
         e1:65:f3:b8:ba:9b:54:d6:4f:5d:0c:37:99:89:10:63:5d:04:
         be:a3:da:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org