Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          OdN7S7iT6/ocXRKdAtrc0ehqERFy/ZThtGkLzsjME9k=
Subject key identifier:   BF:B7:55:B4:39:4B:E2:54:25:D6:8C:F7:ED:A8:02:5A:C2:4B:01:1B
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       5C355A021551FFCCC9705FBAC48C65B87D51D01F
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:20 +0000
ROA not before:           Tue 05 Mar 2024 17:59:20 +0000
ROA not after:            Tue 04 Mar 2025 18:04:20 +0000
asID:                     273072
IP address blocks:        2803:cf90:2400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:35:5a:02:15:51:ff:cc:c9:70:5f:ba:c4:8c:65:b8:7d:51:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:20 2024 GMT
            Not After : Mar  4 18:04:20 2025 GMT
        Subject: CN=BFB755B4394BE25425D68CF7EDA8025AC24B011B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:f9:e2:67:d0:dd:cd:56:a4:c7:19:3f:14:
                    5f:b2:83:bc:d6:dc:8d:e3:df:b9:b4:af:11:5c:b0:
                    0e:f3:88:a4:2f:ce:7b:02:35:4c:26:12:61:05:2e:
                    59:df:47:26:84:5c:b9:fe:34:e0:d7:a7:70:4a:31:
                    a2:d0:51:03:7f:ab:45:52:43:93:ab:5f:12:33:54:
                    24:2e:a4:07:9a:46:bd:26:9b:05:9e:c9:a3:93:5b:
                    79:ca:db:be:5d:94:ea:55:da:53:5c:9c:6c:5f:56:
                    bc:a6:54:2b:2c:94:75:7c:2e:ce:2b:b7:84:56:42:
                    fc:ec:90:98:f7:44:91:ca:69:4c:aa:c3:95:7a:2f:
                    97:d5:b9:bc:7d:99:66:aa:93:f7:46:80:12:7f:87:
                    c4:fd:28:c7:20:22:43:e5:e1:3d:ee:ed:04:d8:e3:
                    55:9d:dd:ed:12:7c:19:70:ce:32:ac:56:6f:2f:59:
                    a4:b2:75:83:51:67:d2:e8:b1:b3:9d:62:07:bb:db:
                    73:78:59:7b:a3:eb:75:7b:27:cd:db:19:67:6b:e8:
                    92:6e:d4:04:53:78:9e:51:25:de:b8:f8:1d:43:0f:
                    46:80:9a:ff:de:2c:9c:dc:05:7d:52:46:3f:d0:32:
                    60:d5:fc:63:50:b2:f0:a7:4c:da:6d:0e:23:bc:6c:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:55:B4:39:4B:E2:54:25:D6:8C:F7:ED:A8:02:5A:C2:4B:01:1B
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:8b:58:db:7d:a1:56:e3:1d:2a:16:b1:f6:73:27:06:0b:
         e5:4f:26:0e:06:e5:13:c6:c9:f9:6d:d6:6d:1d:a7:d3:c6:d0:
         71:9e:ae:12:01:65:68:34:ed:9b:69:68:7b:f8:e5:a8:3f:e8:
         c0:44:7b:e0:93:43:8d:81:61:40:22:9c:e8:a1:0f:87:37:f7:
         7f:4f:41:a9:1e:67:88:08:00:e2:6c:5e:e9:cc:0c:81:59:1a:
         c1:20:58:89:31:4f:0c:6f:c5:bd:b7:cb:41:9a:5d:e0:e7:c1:
         cf:fb:26:25:c6:2f:50:c0:0f:49:a4:32:98:ab:2d:4f:03:46:
         64:1a:31:02:26:8b:b6:5f:b8:f5:14:c8:2a:e7:6c:54:c1:cb:
         d1:89:3f:87:60:b8:14:7f:c0:63:46:e0:a4:06:29:9b:48:fb:
         a7:da:c2:69:47:77:89:67:93:14:6f:5d:7a:b0:4c:88:3e:54:
         18:e5:04:75:fa:fa:e0:c7:de:40:69:f5:72:3d:e0:db:a2:54:
         5f:3e:94:3e:01:5b:38:fc:1b:b3:63:f9:74:1a:93:dc:a4:44:
         df:ab:ca:3c:ed:27:4e:c0:d7:7e:b1:a3:cb:95:49:a5:47:ef:
         25:4f:42:9d:6d:c4:94:10:3d:bc:16:58:b4:88:35:1a:60:1c:
         f2:55:e8:15
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUXDVaAhVR/8zJcF+6xIxluH1R0B8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MjBaFw0yNTAzMDQxODA0MjBaMDMxMTAvBgNV
BAMTKEJGQjc1NUI0Mzk0QkUyNTQyNUQ2OENGN0VEQTgwMjVBQzI0QjAxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVo/niZ9DdzVakxxk/FF+yg7zW
3I3j37m0rxFcsA7ziKQvznsCNUwmEmEFLlnfRyaEXLn+NODXp3BKMaLQUQN/q0VS
Q5OrXxIzVCQupAeaRr0mmwWeyaOTW3nK275dlOpV2lNcnGxfVrymVCsslHV8Ls4r
t4RWQvzskJj3RJHKaUyqw5V6L5fVubx9mWaqk/dGgBJ/h8T9KMcgIkPl4T3u7QTY
41Wd3e0SfBlwzjKsVm8vWaSydYNRZ9LosbOdYge723N4WXuj63V7J83bGWdr6JJu
1ARTeJ5RJd64+B1DD0aAmv/eLJzcBX1SRj/QMmDV/GNQsvCnTNptDiO8bOw3AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUv7dVtDlL4lQl1oz37agCWsJLARswHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz
NDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QJDANBgkqhkiG9w0BAQsFAAOCAQEAq+KLWNt9oVbjHSoWsfZzJwYL
5U8mDgblE8bJ+W3WbR2n08bQcZ6uEgFlaDTtm2loe/jlqD/owER74JNDjYFhQCKc
6KEPhzf3f09BqR5niAgA4mxe6cwMgVkawSBYiTFPDG/FvbfLQZpd4OfBz/smJcYv
UMAPSaQymKstTwNGZBoxAiaLtl+49RTIKudsVMHL0Yk/h2C4FH/AY0bgpAYpm0j7
p9rCaUd3iWeTFG9derBMiD5UGOUEdfr64MfeQGn1cj3g26JUXz6UPgFbOPwbs2P5
dBqT3KRE36vKPO0nTsDXfrGjy5VJpUfvJU9CnW3ElBA9vBZYtIg1GmAc8lXoFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org