Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          i3oLpHF9deZ1avNhINKJz40N9Puh+KvUUgkyyNc2x+o=
Subject key identifier:   9A:EC:1E:9B:72:4B:C6:36:6C:7C:4E:60:65:17:E6:0A:10:BC:83:3C
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6A033EB331B0755A28EC5058205EB0D543278A86
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:07 +0000
ROA not before:           Tue 05 Mar 2024 17:59:07 +0000
ROA not after:            Tue 04 Mar 2025 18:04:07 +0000
asID:                     273072
IP address blocks:        2803:cf90:2300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:03:3e:b3:31:b0:75:5a:28:ec:50:58:20:5e:b0:d5:43:27:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:07 2024 GMT
            Not After : Mar  4 18:04:07 2025 GMT
        Subject: CN=9AEC1E9B724BC6366C7C4E606517E60A10BC833C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:7f:99:5d:f2:d9:0b:7c:71:3b:bc:df:2d:
                    7e:0f:4f:cb:ff:4c:da:2e:74:9d:86:82:e1:bf:7a:
                    40:bd:20:f4:5c:c1:7c:6d:45:72:a9:4a:75:de:68:
                    8a:89:a0:4d:c2:c6:e4:73:ed:61:c3:ba:1e:d9:89:
                    d2:84:7c:9f:5e:7c:8d:ca:19:c4:c8:1b:d3:2e:9e:
                    3f:b6:79:af:ab:63:9e:ef:a0:bc:21:37:f0:df:07:
                    e3:21:02:4c:4b:96:ad:84:a5:06:e4:ae:ec:8d:96:
                    68:8c:08:39:bb:35:f0:c1:6f:56:c5:05:43:73:73:
                    4b:be:f0:e0:d9:a7:0e:1f:b9:c8:03:b7:27:e6:26:
                    9c:1e:89:3a:6b:d5:50:ef:b8:51:f0:ca:62:81:cf:
                    4c:c1:3a:d2:f0:5b:13:30:d0:79:25:e5:d5:b0:49:
                    45:d9:61:8c:87:99:91:b8:71:0e:1a:0b:c0:48:d3:
                    4c:c9:ba:b0:b9:21:fb:33:ae:6f:de:36:bc:cb:0b:
                    79:66:40:5a:71:2d:40:02:87:50:a0:69:1e:26:f3:
                    77:87:77:c7:6b:7c:f6:76:09:de:84:0f:e1:88:d8:
                    b8:66:b5:90:07:03:a0:5c:17:9e:61:00:28:b2:6c:
                    1b:0e:71:00:1e:0f:c0:a5:e9:ed:0c:1d:0e:1f:8a:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EC:1E:9B:72:4B:C6:36:6C:7C:4E:60:65:17:E6:0A:10:BC:83:3C
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:aa:6d:86:b6:8d:4b:b3:37:2e:e8:b9:0b:d2:b0:ba:1d:
         6b:f4:03:31:f6:a4:6d:38:95:b1:ee:01:a0:80:64:d5:b9:02:
         7c:bc:e4:c8:23:db:ae:e5:df:ff:64:cc:56:1a:8d:24:e4:a8:
         98:88:aa:2f:c5:6e:62:e2:5e:5f:c6:7a:2c:af:3e:3e:2c:9b:
         5e:c7:1d:d1:a0:09:83:06:84:98:10:f1:75:e4:b7:34:20:be:
         19:8f:84:2a:1d:d7:c9:5c:ad:e0:21:73:aa:42:a1:6c:be:16:
         9f:70:ab:d4:8b:f7:8c:30:72:21:43:3a:19:d4:62:a8:df:d6:
         37:f2:5b:52:21:37:ba:fe:2c:cc:ab:f6:94:8b:6e:b4:a7:29:
         66:00:0b:81:5e:a8:fd:a9:89:fe:c3:65:cc:0e:97:1b:41:c3:
         b8:9f:c7:5d:98:d6:95:30:cc:db:ba:4c:34:47:32:04:2b:a8:
         73:b4:b4:42:b9:b6:2a:72:7a:4e:ce:b8:1e:a7:cf:63:59:07:
         8f:58:18:ec:6a:69:18:c7:5d:b8:1d:b7:d3:6d:3c:72:b6:d9:
         59:1d:a5:84:ce:49:54:82:01:bf:38:59:08:55:a6:d5:19:fd:
         9a:2e:0d:b1:26:b4:da:53:4e:59:30:c1:56:10:f8:a8:e9:aa:
         30:c2:b2:2b
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUagM+szGwdVoo7FBYIF6w1UMnioYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MDdaFw0yNTAzMDQxODA0MDdaMDMxMTAvBgNV
BAMTKDlBRUMxRTlCNzI0QkM2MzY2QzdDNEU2MDY1MTdFNjBBMTBCQzgzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAH+ZXfLZC3xxO7zfLX4PT8v/
TNoudJ2GguG/ekC9IPRcwXxtRXKpSnXeaIqJoE3CxuRz7WHDuh7ZidKEfJ9efI3K
GcTIG9Munj+2ea+rY57voLwhN/DfB+MhAkxLlq2EpQbkruyNlmiMCDm7NfDBb1bF
BUNzc0u+8ODZpw4fucgDtyfmJpweiTpr1VDvuFHwymKBz0zBOtLwWxMw0Hkl5dWw
SUXZYYyHmZG4cQ4aC8BI00zJurC5Ifszrm/eNrzLC3lmQFpxLUACh1CgaR4m83eH
d8drfPZ2Cd6ED+GI2LhmtZAHA6BcF55hACiybBsOcQAeD8Cl6e0MHQ4fiiSfAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUmuwem3JLxjZsfE5gZRfmChC8gzwwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QIzANBgkqhkiG9w0BAQsFAAOCAQEACDyqbYa2jUuzNy7ouQvSsLod
a/QDMfakbTiVse4BoIBk1bkCfLzkyCPbruXf/2TMVhqNJOSomIiqL8VuYuJeX8Z6
LK8+PiybXscd0aAJgwaEmBDxdeS3NCC+GY+EKh3XyVyt4CFzqkKhbL4Wn3Cr1Iv3
jDByIUM6GdRiqN/WN/JbUiE3uv4szKv2lItutKcpZgALgV6o/amJ/sNlzA6XG0HD
uJ/HXZjWlTDM27pMNEcyBCuoc7S0Qrm2KnJ6Ts64HqfPY1kHj1gY7GppGMdduB23
0208crbZWR2lhM5JVIIBvzhZCFWm1Rn9mi4NsSa02lNOWTDBVhD4qOmqMMKyKw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org