Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          pPn5udFCorHTKsb+tgtzkORpR/HPiJau+tf0+EyeG9Q=
Subject key identifier:   61:4E:63:E3:99:4F:C5:37:84:EF:83:25:A1:A2:A0:7C:36:EE:6D:80
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       35E6F0AC497A71A144CBC7482E82F87EAE0D330A
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:04 +0000
ROA not before:           Tue 05 Mar 2024 17:59:04 +0000
ROA not after:            Tue 04 Mar 2025 18:04:04 +0000
asID:                     273072
IP address blocks:        2803:cf90:2100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e6:f0:ac:49:7a:71:a1:44:cb:c7:48:2e:82:f8:7e:ae:0d:33:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:04 2024 GMT
            Not After : Mar  4 18:04:04 2025 GMT
        Subject: CN=614E63E3994FC53784EF8325A1A2A07C36EE6D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:58:49:8e:4b:b4:1e:90:bc:3d:0a:c6:7e:
                    29:18:9a:40:6f:3b:66:1a:00:cf:31:0e:89:a7:00:
                    07:5a:69:e5:1b:4b:73:f3:1f:41:32:ec:e7:bd:db:
                    a2:40:fa:57:6d:c9:a4:f8:d1:17:09:11:f0:9c:db:
                    0c:db:30:a9:ad:35:21:f2:fd:b2:a9:d7:8f:5d:9f:
                    17:c8:82:15:e8:33:bf:cc:9d:23:c1:39:a7:d8:60:
                    be:6c:e2:92:12:b2:33:f9:20:83:a5:0c:e1:ef:86:
                    e8:2c:4d:54:fb:ab:86:ec:f2:ab:7c:7b:1a:2c:30:
                    7b:60:95:a8:b3:e7:7e:1c:43:92:a6:79:bd:fd:ee:
                    ff:24:0e:25:38:2f:3c:21:5c:df:4f:02:3a:6d:8c:
                    5a:4c:86:b2:73:10:2e:a6:36:8e:ba:e1:45:3a:e0:
                    4a:ac:82:e7:ec:f1:f5:9a:0d:de:71:e4:7d:b2:db:
                    bb:f1:6c:0d:a9:e2:cd:e0:a9:ca:da:8d:0c:fa:7d:
                    0f:ad:cb:82:ff:ca:ad:db:21:a8:de:64:98:45:b0:
                    1a:5c:c7:41:45:18:af:3f:57:98:80:cb:00:c0:24:
                    6f:8d:76:cc:b7:e0:73:e8:7c:dc:cb:cb:69:2f:33:
                    d9:55:39:68:90:11:6a:db:e7:16:a8:bb:5f:70:0e:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:63:E3:99:4F:C5:37:84:EF:83:25:A1:A2:A0:7C:36:EE:6D:80
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:00:23:2e:29:63:91:21:9a:bc:01:2d:1e:c5:21:33:cd:
         64:e5:15:06:b9:ce:c9:d0:d2:9b:6d:2d:be:6c:60:7c:cb:80:
         e6:8c:32:17:eb:9c:02:9e:af:57:14:4a:d1:eb:d3:64:4b:ec:
         1f:3c:e4:0c:a1:34:93:98:73:2f:a9:67:7c:2b:f3:cd:4d:71:
         cc:77:f6:29:8a:2c:93:d2:a4:a1:08:56:d2:fb:7a:84:bc:8f:
         f1:ff:eb:41:9e:a7:ab:ed:2d:32:bc:a5:f2:55:0c:e5:67:ad:
         86:bb:75:39:65:ba:7a:0e:81:a9:08:c5:c6:f6:b8:dd:d7:6a:
         b2:4d:c2:8c:aa:36:53:a9:7a:e9:48:8d:37:db:f6:50:28:dd:
         1b:c4:1b:e8:cd:31:d9:34:74:5e:a9:cc:3f:64:40:cd:5f:e8:
         68:d3:e6:0b:80:63:bd:5f:f7:6f:5d:3a:98:04:1a:36:19:3f:
         db:bf:b2:70:2e:4d:8d:85:9e:2b:d0:fe:27:b0:ad:cd:95:7e:
         27:04:71:d8:04:eb:98:6b:96:7a:4b:97:d0:14:df:f1:e9:49:
         9f:35:45:41:7e:dd:0a:6d:59:2f:05:88:f4:05:a0:00:e7:70:
         50:f7:0f:c0:dd:86:28:9f:55:48:5f:32:04:86:33:35:a7:e1:
         e8:80:11:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org