Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          DgK+FZKm3R4XReYFZqaawqLCsfOSLtCzEAowZK+BbQ8=
Subject key identifier:   41:28:D7:D2:93:9C:85:05:D7:D9:D6:03:A6:AB:58:D3:85:6C:60:24
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       2D03F91873159D3DAA51DF8FD4B7ACCD51F9E0FE
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     273072
IP address blocks:        2803:cf90:1500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:03:f9:18:73:15:9d:3d:aa:51:df:8f:d4:b7:ac:cd:51:f9:e0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=4128D7D2939C8505D7D9D603A6AB58D3856C6024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:45:66:4a:49:88:2d:c1:ad:2a:a1:ce:37:
                    1f:d0:4f:e2:6e:b6:ca:03:a8:20:ae:79:d3:bc:51:
                    e2:1c:55:78:d2:d1:60:12:88:c2:b6:13:42:76:9c:
                    6d:67:62:3f:bc:28:79:bc:c5:ab:9e:d7:05:23:1e:
                    bd:7b:dd:50:e2:fc:d0:64:41:fd:b6:3c:ba:46:06:
                    61:eb:a2:9e:6d:34:fc:13:49:b9:78:ef:21:9e:25:
                    52:9f:09:24:80:7c:92:13:fd:ca:3a:09:8e:fd:b7:
                    de:4f:99:82:ac:53:bc:2c:cc:38:44:9d:6e:70:6f:
                    a6:3b:c2:e3:7b:51:07:a6:0f:04:9e:48:83:45:19:
                    0e:3d:01:c3:92:e9:96:fe:05:2a:17:62:f8:80:f0:
                    c9:0a:50:58:79:1b:ab:5f:06:43:f8:84:69:16:06:
                    ea:7f:57:c4:82:af:de:af:d8:33:53:a1:a7:47:d9:
                    24:00:63:ac:6b:00:a8:61:38:c8:85:9b:55:d5:43:
                    78:f6:a6:28:a1:03:7c:4d:be:8a:8e:4d:c7:06:63:
                    24:9d:66:91:81:9f:40:8c:8f:62:cf:5d:36:4f:5f:
                    5d:73:48:6b:f6:67:9e:9d:63:14:52:4c:a8:a8:7a:
                    54:40:22:9b:82:47:bd:8a:22:b3:2a:73:4e:fd:7e:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:28:D7:D2:93:9C:85:05:D7:D9:D6:03:A6:AB:58:D3:85:6C:60:24
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:b0:39:75:1f:16:aa:2e:14:db:9c:fd:a1:1a:82:f0:1c:
         9e:83:46:2c:18:91:af:f7:24:ef:54:95:86:6e:46:8c:42:44:
         d4:51:19:d2:1c:dd:e5:36:75:73:9f:78:dc:8a:29:ab:44:e6:
         79:5f:fb:a3:f3:a3:5e:ee:a6:f2:98:0f:a1:73:3d:dd:53:10:
         05:72:9d:de:dc:77:c4:d0:bb:2f:3d:cb:af:23:27:65:a0:c2:
         b7:63:d9:6d:12:3d:d1:5e:73:10:6a:c8:a6:bb:04:1f:03:f2:
         3e:15:19:5c:80:b2:26:7c:a7:b2:c2:7f:2e:ba:89:00:41:7a:
         3d:f8:58:cf:17:22:fa:d9:d0:2e:b0:5b:62:1d:6c:98:bd:16:
         1b:76:1a:2d:d9:2a:25:9b:cf:5c:99:13:b6:a9:19:df:eb:07:
         af:f8:20:66:c8:87:ec:a0:9f:a3:01:cb:fd:4b:e0:95:94:71:
         5a:d3:41:ce:ea:81:f8:bd:d2:c7:35:ab:e6:2b:38:bc:5c:42:
         4f:ea:84:dd:61:55:6c:00:e3:4b:ba:7a:b0:12:4a:86:c0:4f:
         3b:43:c9:64:14:77:74:12:14:df:41:99:5c:2d:2e:1d:38:e7:
         f7:92:04:5d:cf:14:0a:43:ac:b8:00:27:63:65:8d:38:ec:11:
         e9:e2:83:8a
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIULQP5GHMVnT2qUd+P1LeszVH54P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MjJaFw0yNTAzMDQxODA0MjJaMDMxMTAvBgNV
BAMTKDQxMjhEN0QyOTM5Qzg1MDVEN0Q5RDYwM0E2QUI1OEQzODU2QzYwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYLkVmSkmILcGtKqHONx/QT+Ju
tsoDqCCuedO8UeIcVXjS0WASiMK2E0J2nG1nYj+8KHm8xaue1wUjHr173VDi/NBk
Qf22PLpGBmHrop5tNPwTSbl47yGeJVKfCSSAfJIT/co6CY79t95PmYKsU7wszDhE
nW5wb6Y7wuN7UQemDwSeSINFGQ49AcOS6Zb+BSoXYviA8MkKUFh5G6tfBkP4hGkW
Bup/V8SCr96v2DNToadH2SQAY6xrAKhhOMiFm1XVQ3j2piihA3xNvoqOTccGYySd
ZpGBn0CMj2LPXTZPX11zSGv2Z56dYxRSTKioelRAIpuCR72KIrMqc079fv/TAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUQSjX0pOchQXX2dYDpqtY04VsYCQwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QFTANBgkqhkiG9w0BAQsFAAOCAQEAj3SwOXUfFqouFNuc/aEagvAc
noNGLBiRr/ck71SVhm5GjEJE1FEZ0hzd5TZ1c5943Iopq0TmeV/7o/OjXu6m8pgP
oXM93VMQBXKd3tx3xNC7Lz3LryMnZaDCt2PZbRI90V5zEGrIprsEHwPyPhUZXICy
JnynssJ/LrqJAEF6PfhYzxci+tnQLrBbYh1smL0WG3YaLdkqJZvPXJkTtqkZ3+sH
r/ggZsiH7KCfowHL/UvglZRxWtNBzuqB+L3SxzWr5is4vFxCT+qE3WFVbADjS7p6
sBJKhsBPO0PJZBR3dBIU30GZXC0uHTjn95IEXc8UCkOsuAAnY2WNOOwR6eKDig==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org