Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          gQ2VHjGBEv0+hmdlIV2srGR3YZZjBs9tJi7hc7UmQtk=
Subject key identifier:   E2:66:03:33:E4:87:82:6C:C8:ED:CD:99:7D:3C:2A:41:18:E6:7A:8B
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       72A74B206011DE260F88C93CDF46C36D150FFEA5
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:06 +0000
ROA not before:           Tue 05 Mar 2024 17:59:06 +0000
ROA not after:            Tue 04 Mar 2025 18:04:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:1d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:4b:20:60:11:de:26:0f:88:c9:3c:df:46:c3:6d:15:0f:fe:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:06 2024 GMT
            Not After : Mar  4 18:04:06 2025 GMT
        Subject: CN=E2660333E487826CC8EDCD997D3C2A4118E67A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:ae:c3:5d:fc:f6:be:4d:d4:9e:f9:6b:9a:
                    09:4f:10:20:1b:4c:80:ea:80:e6:ff:e0:ef:c1:01:
                    02:c4:55:2a:87:d8:7d:9b:12:23:4e:98:de:8a:57:
                    d2:9d:8b:b8:d6:20:55:4b:63:9f:4b:90:b6:d2:30:
                    d1:22:da:b1:1e:86:eb:c6:12:d3:90:21:4d:2e:92:
                    99:6a:67:b3:e8:5a:18:c1:72:29:f2:91:e2:74:ee:
                    05:a7:16:c3:2c:34:a6:6c:1c:5c:18:c3:28:23:08:
                    83:90:fa:9b:76:94:8a:8c:c8:df:e4:f1:3b:c9:a0:
                    6e:7f:77:a3:72:a5:f1:c0:ad:1e:4b:f1:3b:9a:52:
                    03:ff:17:55:81:25:00:7c:80:de:f8:dd:e1:2c:01:
                    11:24:a4:2e:47:17:15:c7:29:64:fe:c8:50:87:e0:
                    ac:8d:99:a0:e3:e8:c5:bc:0f:cf:61:5a:dd:f0:6d:
                    e1:23:45:69:67:51:f7:af:9c:33:47:fd:5e:65:9a:
                    98:02:50:65:4d:99:15:ad:0f:73:ad:81:9f:7a:8b:
                    07:42:d3:2e:21:96:3c:53:f9:36:74:17:2e:5b:54:
                    00:a6:9d:14:8a:ac:53:73:c4:2b:95:bc:6a:cf:c1:
                    cb:77:98:f7:99:01:5e:44:1f:73:44:c0:15:c2:2b:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:03:33:E4:87:82:6C:C8:ED:CD:99:7D:3C:2A:41:18:E6:7A:8B
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a316430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:be:b4:01:3f:90:0c:40:ba:ec:bb:1d:c7:49:81:93:4f:91:
         4b:95:cf:f8:12:89:61:dc:81:f5:23:ae:d1:ee:ae:cc:ef:32:
         11:d9:f4:45:ee:f6:8e:df:ff:d4:10:3e:a8:88:df:e2:b1:af:
         21:1e:39:7f:93:42:bc:e6:ed:e3:3f:c9:da:39:a9:76:24:9a:
         44:f7:da:d8:32:94:33:f2:fd:fd:c6:6e:c3:2c:76:e2:8d:5f:
         8b:e6:cb:a4:99:ca:10:04:a8:f8:41:c3:88:bc:7c:9e:e2:0c:
         4b:9e:42:74:db:f1:8f:86:7a:89:d2:1e:34:81:b3:16:4d:6b:
         db:f8:ed:40:16:79:8a:42:f8:a5:95:37:d0:7a:ea:1f:19:2d:
         19:6a:62:c3:0e:23:51:a1:c2:42:c9:57:17:94:ac:9c:08:b9:
         8d:8e:37:d9:bb:5f:f4:aa:3e:10:7d:8b:16:21:4d:d3:40:6e:
         de:c8:3f:c3:52:66:4e:c1:f2:64:c2:0e:45:67:67:64:2d:2c:
         df:e8:02:45:4a:1b:92:10:2d:e7:4a:57:50:73:76:1c:21:4d:
         51:54:f3:23:b9:bb:4c:ba:0f:68:17:8a:0c:01:7c:28:47:aa:
         4e:c2:d6:ef:c7:e3:f2:cb:52:10:6d:02:36:54:6f:a5:e5:f2:
         bd:87:8c:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org