Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          7fdaUSf7SMn5VEfH76cOuSdnsPE9V+7tWYrrZFLxCkg=
Subject key identifier:   23:51:FE:93:89:D7:02:BC:19:EA:63:A3:B1:45:6C:96:71:54:22:06
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7609EC10A5A19B1E109F0616743C92524612C023
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:06 +0000
ROA not before:           Tue 05 Mar 2024 17:59:06 +0000
ROA not after:            Tue 04 Mar 2025 18:04:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:1c00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:ec:10:a5:a1:9b:1e:10:9f:06:16:74:3c:92:52:46:12:c0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:06 2024 GMT
            Not After : Mar  4 18:04:06 2025 GMT
        Subject: CN=2351FE9389D702BC19EA63A3B1456C9671542206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:9c:c7:45:7b:ab:1f:f4:f0:89:dc:41:4e:
                    40:51:2e:de:9e:a6:2e:d6:d6:c8:95:c0:2c:4b:f1:
                    e0:8f:29:c4:7c:0a:16:70:87:5b:bb:8e:c2:43:1b:
                    f2:64:6a:dc:ce:23:39:58:15:d7:b8:d8:86:91:74:
                    65:ab:eb:f6:f9:05:b8:b8:db:f6:7f:1a:95:42:ea:
                    29:df:64:5c:fe:b5:73:18:02:dc:15:85:13:7a:62:
                    56:ba:be:06:54:62:15:4a:ec:13:ec:b1:e0:64:b5:
                    9d:f8:2f:33:d6:cb:fe:5b:d8:48:7d:fd:6d:49:7e:
                    ea:9d:49:81:4f:34:d0:9f:3a:e3:20:ff:17:68:1d:
                    df:7e:29:2e:57:64:65:67:ae:99:f7:5a:ac:9e:ba:
                    7f:9e:b8:a7:b3:f8:bc:c5:69:10:73:76:34:1f:d5:
                    89:c5:a5:0a:e0:59:52:83:5b:ad:b9:b4:5c:fa:d1:
                    a8:a2:fe:5d:5b:af:d3:81:bf:d6:22:47:fd:34:c5:
                    73:ee:a3:f8:21:9b:a9:c0:92:c2:a3:39:95:a8:05:
                    53:65:fe:3f:5a:32:e5:ae:2c:eb:95:f5:b6:f5:d4:
                    3f:b1:ab:5c:af:d0:57:19:ad:f0:18:24:6c:f2:96:
                    7d:10:5f:69:b1:45:5c:fe:85:26:88:da:d6:ff:a5:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:51:FE:93:89:D7:02:BC:19:EA:63:A3:B1:45:6C:96:71:54:22:06
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:10:94:9a:0f:03:a4:b1:47:ef:67:f8:17:df:d8:1d:f8:
         a6:fa:62:fb:0e:4b:6b:4e:41:50:59:88:69:46:79:40:da:bd:
         dc:e4:09:7a:aa:8c:5d:31:47:9f:d1:77:63:cd:8b:6f:2c:2b:
         31:9c:17:8c:30:b5:fd:b4:86:af:5c:8f:b7:d6:49:5e:e9:78:
         44:f5:a5:a6:6b:0f:c2:7d:64:98:ad:87:e1:1c:92:95:3f:dd:
         88:4c:b4:20:f5:c8:2c:07:9a:79:ca:0f:a0:03:47:96:1d:8f:
         03:e1:88:24:10:79:2a:5d:a7:6a:74:4d:c4:b5:fd:d6:47:68:
         b3:26:2d:f6:19:d0:0d:26:f0:f8:e2:1a:26:00:88:3e:08:5a:
         6c:fa:4f:cd:59:ca:40:e5:a2:89:ce:11:bb:6e:30:5e:d6:c1:
         c0:d0:b4:e9:ce:49:99:fd:36:bf:9c:9d:7d:d2:99:1b:fe:d2:
         45:bb:0d:0d:62:f3:18:52:78:25:e3:3d:cc:d8:61:43:92:03:
         02:3c:51:e8:a9:d5:ef:e6:ae:da:0b:be:a8:9c:fc:bf:06:21:
         8d:e5:28:b4:4f:15:f7:a9:8d:a2:9a:6f:d2:fa:67:e9:eb:5a:
         09:84:ef:fe:22:ee:f2:7d:0a:22:3e:43:3f:fd:db:eb:5b:21:
         f6:0b:32:31
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUdgnsEKWhmx4QnwYWdDySUkYSwCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MDZaFw0yNTAzMDQxODA0MDZaMDMxMTAvBgNV
BAMTKDIzNTFGRTkzODlENzAyQkMxOUVBNjNBM0IxNDU2Qzk2NzE1NDIyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOpzHRXurH/TwidxBTkBRLt6e
pi7W1siVwCxL8eCPKcR8ChZwh1u7jsJDG/JkatzOIzlYFde42IaRdGWr6/b5Bbi4
2/Z/GpVC6infZFz+tXMYAtwVhRN6Yla6vgZUYhVK7BPsseBktZ34LzPWy/5b2Eh9
/W1JfuqdSYFPNNCfOuMg/xdoHd9+KS5XZGVnrpn3Wqyeun+euKez+LzFaRBzdjQf
1YnFpQrgWVKDW625tFz60aii/l1br9OBv9YiR/00xXPuo/ghm6nAksKjOZWoBVNl
/j9aMuWuLOuV9bb11D+xq1yv0FcZrfAYJGzyln0QX2mxRVz+hSaI2tb/payVAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUI1H+k4nXArwZ6mOjsUVslnFUIgYwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzE2
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QHDANBgkqhkiG9w0BAQsFAAOCAQEAm8kQlJoPA6SxR+9n+Bff2B34
pvpi+w5La05BUFmIaUZ5QNq93OQJeqqMXTFHn9F3Y82LbywrMZwXjDC1/bSGr1yP
t9ZJXul4RPWlpmsPwn1kmK2H4RySlT/diEy0IPXILAeaecoPoANHlh2PA+GIJBB5
Kl2nanRNxLX91kdosyYt9hnQDSbw+OIaJgCIPghabPpPzVnKQOWiic4Ru24wXtbB
wNC06c5Jmf02v5ydfdKZG/7SRbsNDWLzGFJ4JeM9zNhhQ5IDAjxR6KnV7+au2gu+
qJz8vwYhjeUotE8V96mNoppv0vpn6etaCYTv/iLu8n0KIj5DP/3b61sh9gsyMQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org