Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          8NPH8Q2f4Wqx3neIo9VPFLRYhZcZTLUCWNx1advysW0=
Subject key identifier:   83:5A:AF:F1:2F:1C:93:76:67:56:C5:D7:D4:EE:8D:7A:0F:A0:7F:E4
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       378DBF75D4EB99C5A18034D4562F28AB833BDF06
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:06 +0000
ROA not before:           Tue 05 Mar 2024 17:59:06 +0000
ROA not after:            Tue 04 Mar 2025 18:04:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:2600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:bf:75:d4:eb:99:c5:a1:80:34:d4:56:2f:28:ab:83:3b:df:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:06 2024 GMT
            Not After : Mar  4 18:04:06 2025 GMT
        Subject: CN=835AAFF12F1C93766756C5D7D4EE8D7A0FA07FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:b9:d8:54:64:e9:2e:b3:23:34:fa:6b:3d:
                    59:7d:ba:ad:eb:3e:21:ac:a3:a1:e5:c6:60:82:d9:
                    6b:47:47:eb:65:5d:9b:03:c9:34:e1:92:43:31:d4:
                    af:8c:64:86:a9:7e:ac:3c:44:9b:26:b3:54:8f:1b:
                    0d:00:c5:d7:7f:97:bb:f1:6d:00:a0:d3:6c:ff:45:
                    91:c4:b3:dc:b6:0f:54:0b:f1:40:3b:6f:71:d4:78:
                    a5:b4:f1:c9:5a:13:0b:da:3b:7a:54:81:49:7d:92:
                    0a:87:22:08:6c:f6:80:b1:b2:35:9b:e4:a9:36:2c:
                    4d:27:a6:25:e9:d4:70:dc:53:d0:b4:c5:56:ce:ad:
                    8d:8f:0f:3f:64:23:8a:42:0a:07:4b:74:97:48:8a:
                    51:c7:4e:28:8b:db:f8:d9:ce:4b:3b:42:22:eb:25:
                    3f:9a:04:82:03:49:e6:a1:1b:a1:99:14:37:73:30:
                    10:e9:57:d4:1d:d7:bb:ce:e3:eb:39:77:6c:15:45:
                    47:1e:66:d5:d6:43:9e:7a:36:d1:88:c8:f5:fe:80:
                    4c:19:7c:5b:ae:e3:51:27:0f:ff:dc:86:83:c0:cc:
                    58:27:0a:36:53:3c:f8:fc:08:f6:f7:76:09:3f:9d:
                    8f:e7:73:08:3d:d5:eb:26:28:3d:c0:14:0e:50:a9:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:AF:F1:2F:1C:93:76:67:56:C5:D7:D4:EE:8D:7A:0F:A0:7F:E4
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2600::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:f9:5d:19:19:6e:72:da:2f:40:ee:f5:82:17:8e:a8:41:
         f7:c7:09:89:30:6c:59:df:4a:b0:9d:38:3d:33:86:e9:49:8b:
         d7:51:95:aa:e0:c3:9d:84:7a:ce:39:57:fd:d5:d9:9e:5d:05:
         ba:4b:b3:1b:e6:b0:5b:bf:77:87:db:ec:eb:37:14:f5:21:36:
         9f:a1:3a:21:ce:9e:ee:c0:ca:79:a0:33:f4:f9:a3:2b:ac:60:
         80:13:c7:f4:c3:80:15:e2:95:33:6a:e2:2d:5a:1e:f4:5d:7d:
         f0:20:78:ec:7f:bd:a7:8f:53:18:0b:b8:8a:9d:e3:ce:aa:a9:
         d6:8b:cd:30:12:73:6b:f1:91:bb:4c:9b:f7:b3:a4:ff:85:50:
         ea:99:c0:67:55:24:42:7b:4b:6f:5f:38:d1:2b:ac:d4:8b:a4:
         b9:09:b4:db:54:b7:54:b9:65:07:b5:a3:bd:36:dc:28:e9:35:
         d0:38:26:d9:4f:76:65:7e:e5:9b:11:c9:f8:7a:29:6b:33:52:
         d6:d0:0f:26:2a:ab:3d:02:71:d6:a0:cf:f4:cb:48:1e:8e:c9:
         f5:34:44:be:f8:2b:f0:22:a8:e1:af:82:be:a4:12:ac:a7:77:
         bc:c2:5f:3d:e9:fe:f6:3a:15:b5:83:f0:f8:5f:3a:15:b4:fa:
         c6:fe:5b:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org