Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          kkHKEGIPGbfcIG6UHOBEt9gePHjOUwKiVoJ8sTpJsoI=
Subject key identifier:   73:B9:09:A8:E2:96:AA:1A:F1:D7:5E:F3:5F:F8:12:4C:A9:56:68:04
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       24D686ED6899C258E60DEEE1D5A38133B1442C56
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:15 +0000
ROA not before:           Tue 05 Mar 2024 17:59:15 +0000
ROA not after:            Tue 04 Mar 2025 18:04:15 +0000
asID:                     273072
IP address blocks:        2803:cf90:1700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d6:86:ed:68:99:c2:58:e6:0d:ee:e1:d5:a3:81:33:b1:44:2c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:15 2024 GMT
            Not After : Mar  4 18:04:15 2025 GMT
        Subject: CN=73B909A8E296AA1AF1D75EF35FF8124CA9566804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:f0:6f:b6:d5:c8:96:b8:55:6b:d7:30:d1:
                    d9:49:b8:55:f9:73:57:ae:fe:a8:c4:d3:24:a2:94:
                    7b:01:a2:4c:f0:c3:af:85:d1:15:3b:30:09:e4:8a:
                    d8:19:26:52:73:5c:a3:9f:fa:79:66:dc:3c:36:65:
                    2f:19:2a:85:ac:96:48:c9:57:ca:92:1c:04:21:62:
                    73:67:5a:34:0d:f0:78:ce:76:69:0e:9a:63:aa:fc:
                    22:03:5c:78:96:5d:00:8e:31:d9:34:5f:d6:5b:4f:
                    f9:95:43:89:c9:14:fc:0c:6d:15:d8:c3:3f:26:c7:
                    6b:4d:43:28:73:de:ae:23:df:2e:ab:90:cf:68:60:
                    79:19:3f:62:a3:ea:23:4e:67:d1:be:35:f3:8a:ce:
                    86:82:8d:08:b0:26:e8:df:3f:2c:d1:a7:43:52:2f:
                    8e:87:0b:cb:c3:ff:b9:4e:43:50:d2:6d:11:4a:8b:
                    8c:a0:9f:08:7e:55:d9:85:71:78:47:da:2a:1d:df:
                    5a:db:1c:f0:f4:fd:c7:6a:56:75:88:4a:fa:43:f9:
                    55:d9:3e:29:28:04:46:76:c8:d0:47:26:63:23:08:
                    ac:d5:f7:3a:8b:6b:52:22:f4:82:1c:ff:a4:f6:47:
                    eb:c0:fe:ea:ea:7a:ba:71:74:b7:24:dd:d1:96:73:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:09:A8:E2:96:AA:1A:F1:D7:5E:F3:5F:F8:12:4C:A9:56:68:04
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a313730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:c5:61:36:82:68:0b:2a:3b:79:ac:7e:c5:b0:e4:85:f4:
         6b:fb:0b:6a:f0:27:2f:99:eb:c6:31:51:9a:cf:28:0f:8b:ad:
         2f:a5:dd:7a:d5:76:c1:6f:71:f0:69:90:98:48:7f:66:fd:a5:
         27:24:d1:ee:8e:24:be:f4:c9:1f:8b:bb:3b:2e:d9:d7:3d:ff:
         12:40:2c:8b:96:31:1b:23:8f:c2:63:a5:21:13:52:de:6c:bc:
         49:0d:52:59:ff:56:66:3e:16:8d:c8:09:02:50:df:7b:1b:54:
         fd:39:51:77:c4:a7:60:15:9c:24:44:82:33:f3:a5:fb:65:53:
         00:0c:73:fe:85:af:4f:eb:c8:61:84:6d:1c:08:b1:19:c8:0f:
         58:af:8d:c9:c1:88:ae:ae:c0:4b:98:54:e9:d9:1a:0a:ac:b0:
         ca:a0:6e:e7:72:f0:ab:1b:ab:9a:b9:72:87:bf:ff:d4:af:7a:
         9d:c0:c4:77:c0:e3:3e:aa:64:00:0a:57:f6:8e:be:eb:35:ac:
         66:88:43:c8:e5:75:10:a6:88:c9:50:c9:a8:96:c0:56:4a:28:
         9d:67:cc:c4:ff:57:17:13:38:1d:a5:f9:9b:22:50:a2:21:e6:
         7c:24:fd:52:c9:f0:f7:0e:fc:89:bd:e6:a8:7b:e0:ee:cd:d1:
         21:80:49:82
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUJNaG7WiZwljmDe7h1aOBM7FELFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MTVaFw0yNTAzMDQxODA0MTVaMDMxMTAvBgNV
BAMTKDczQjkwOUE4RTI5NkFBMUFGMUQ3NUVGMzVGRjgxMjRDQTk1NjY4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnA/BvttXIlrhVa9cw0dlJuFX5
c1eu/qjE0ySilHsBokzww6+F0RU7MAnkitgZJlJzXKOf+nlm3Dw2ZS8ZKoWslkjJ
V8qSHAQhYnNnWjQN8HjOdmkOmmOq/CIDXHiWXQCOMdk0X9ZbT/mVQ4nJFPwMbRXY
wz8mx2tNQyhz3q4j3y6rkM9oYHkZP2Kj6iNOZ9G+NfOKzoaCjQiwJujfPyzRp0NS
L46HC8vD/7lOQ1DSbRFKi4ygnwh+VdmFcXhH2iod31rbHPD0/cdqVnWISvpD+VXZ
PikoBEZ2yNBHJmMjCKzV9zqLa1Ii9IIc/6T2R+vA/urqerpxdLck3dGWc+4LAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUc7kJqOKWqhrx117zX/gSTKlWaAQwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzEz
NzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QFzANBgkqhkiG9w0BAQsFAAOCAQEAahnFYTaCaAsqO3msfsWw5IX0
a/sLavAnL5nrxjFRms8oD4utL6XdetV2wW9x8GmQmEh/Zv2lJyTR7o4kvvTJH4u7
Oy7Z1z3/EkAsi5YxGyOPwmOlIRNS3my8SQ1SWf9WZj4WjcgJAlDfextU/TlRd8Sn
YBWcJESCM/Ol+2VTAAxz/oWvT+vIYYRtHAixGcgPWK+NycGIrq7AS5hU6dkaCqyw
yqBu53Lwqxurmrlyh7//1K96ncDEd8DjPqpkAApX9o6+6zWsZohDyOV1EKaIyVDJ
qJbAVkoonWfMxP9XFxM4HaX5myJQoiHmfCT9Usnw9w78ib3mqHvg7s3RIYBJgg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org