Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          oSspqMAIXrfySbk0xiamGhuTkwCAHYSVn+FV1WjVEC0=
Subject key identifier:   CE:B3:0E:BD:5E:F1:F7:CB:91:35:E8:0E:99:3A:9D:96:16:14:C5:A2
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       1756C13FCC72CEA05F6F74300310DBEB1A1B83D9
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:09 +0000
ROA not before:           Tue 05 Mar 2024 17:59:09 +0000
ROA not after:            Tue 04 Mar 2025 18:04:09 +0000
asID:                     273072
IP address blocks:        2803:cf90:1600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:56:c1:3f:cc:72:ce:a0:5f:6f:74:30:03:10:db:eb:1a:1b:83:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:09 2024 GMT
            Not After : Mar  4 18:04:09 2025 GMT
        Subject: CN=CEB30EBD5EF1F7CB9135E80E993A9D961614C5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:a4:46:55:50:9e:5b:ab:4a:09:24:b5:11:
                    cc:75:44:b0:2c:3d:78:1c:b5:8f:01:09:93:7f:10:
                    d2:73:b5:ac:e8:c7:de:14:3a:47:67:f5:6c:d1:d3:
                    ab:cb:ae:80:4d:f3:eb:23:c4:e7:4a:8a:7b:e3:d3:
                    51:aa:00:2b:68:b3:10:29:32:7f:52:e8:57:e9:6a:
                    fe:e8:ba:87:fe:c4:8e:d3:c3:ca:ce:11:2a:5b:b1:
                    03:b6:49:57:1b:2a:7e:be:32:f2:6a:65:21:fe:0e:
                    3b:42:51:25:99:84:18:e4:5c:2d:8e:94:bb:7c:b5:
                    a5:3f:e4:90:c7:69:01:0f:e8:ea:8f:e5:a5:70:86:
                    c8:ba:44:cb:6a:cf:66:bc:88:a6:b7:da:1b:d6:65:
                    10:02:e9:24:84:70:fb:38:9c:39:ea:b6:72:82:78:
                    be:4e:3b:51:07:58:07:aa:b3:2b:aa:a6:c1:c6:d3:
                    c3:1d:07:6d:06:22:a8:90:79:ec:ce:0c:87:cd:e9:
                    bb:cd:c7:ea:ce:88:c8:06:34:c6:52:ed:47:4b:d5:
                    44:a3:7b:63:9f:9f:4f:87:e8:e3:00:9a:ed:14:c8:
                    2a:c6:5b:ed:0a:53:44:bc:06:86:63:82:75:f4:49:
                    35:03:82:42:26:ee:60:89:13:b9:a6:27:1c:1b:0a:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:0E:BD:5E:F1:F7:CB:91:35:E8:0E:99:3A:9D:96:16:14:C5:A2
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:af:63:54:a0:1d:0f:2e:8a:0d:e2:56:19:b9:3b:85:34:
         65:ff:23:d5:ac:4b:22:15:2f:db:9a:8b:a8:01:4c:e4:c1:af:
         ed:f3:a6:b6:cb:df:ac:c3:eb:50:86:9b:2c:98:e1:47:9e:8d:
         d8:91:a1:d9:71:61:c0:55:54:a2:f8:66:4c:13:bb:57:07:3b:
         21:44:ff:00:f6:9c:39:b2:94:3b:e9:85:76:91:c1:3f:18:34:
         4d:42:28:cc:e0:a8:48:04:70:81:25:02:4f:45:1d:65:23:98:
         b8:70:c8:a5:74:b8:1d:5a:37:b4:75:b4:a1:30:95:23:ff:43:
         59:5f:bc:1c:56:5f:17:fc:2e:a8:09:fd:aa:7a:53:74:f8:ca:
         3f:42:66:45:51:e8:1e:53:d8:8e:ab:8e:60:96:45:ab:74:22:
         c9:53:90:13:82:44:30:5d:8c:96:cb:c4:c9:9a:04:e4:55:0c:
         7b:3a:6e:35:2c:0b:fa:58:71:71:84:f4:5a:42:7f:7a:3e:04:
         b6:07:e5:17:64:ec:64:22:77:d8:1d:0b:9c:e3:91:b0:17:d1:
         1b:c4:6e:fb:02:ef:07:a6:73:44:86:e4:58:cb:96:e2:4c:76:
         f5:cf:99:61:2c:e5:89:48:e5:c4:89:ad:08:82:54:bf:15:82:
         e9:03:1a:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org