Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          NHWclWw5rHiG271r7n9XOiUMOHCxBIcpUYrz+dtslZ0=
Subject key identifier:   6E:87:EB:FD:AB:5B:84:CD:86:36:98:F9:09:1F:7F:1E:C5:25:2B:E0
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       20329F0E94DC4378E2AE8BEDF19419600741BC48
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:40 +0000
ROA not before:           Tue 04 Feb 2025 19:52:40 +0000
ROA not after:            Tue 03 Feb 2026 19:57:40 +0000
asID:                     273072
IP address blocks:        2803:cf90:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:32:9f:0e:94:dc:43:78:e2:ae:8b:ed:f1:94:19:60:07:41:bc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:40 2025 GMT
            Not After : Feb  3 19:57:40 2026 GMT
        Subject: CN=6E87EBFDAB5B84CD863698F9091F7F1EC5252BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:95:a5:10:54:c2:82:ab:67:99:ba:07:f8:
                    4e:5e:05:0f:26:a9:15:2f:36:3d:07:35:14:d0:a0:
                    2d:4e:30:d7:4c:3a:88:65:af:f0:cb:58:f9:73:53:
                    70:86:09:5d:20:fb:19:7d:05:b1:36:a3:16:f0:6a:
                    2a:93:be:83:64:cc:25:9b:96:0e:b7:1a:0a:a8:50:
                    e0:91:7f:e4:a1:ac:cd:87:f1:dc:34:be:11:84:d2:
                    8b:a3:a3:35:80:ff:ac:c3:1f:35:7c:14:30:6d:c0:
                    f4:d0:24:19:88:a3:44:34:60:f4:ab:a7:8b:ad:d8:
                    de:6e:76:bd:bd:57:c8:2a:6e:f6:90:9e:48:e5:7c:
                    d0:02:6c:6e:89:cb:05:e6:2c:97:7e:da:d4:e3:41:
                    72:63:ed:02:70:14:40:44:77:ed:21:dd:f9:2f:f9:
                    f6:d1:b9:1b:a2:a5:80:21:da:57:b5:e5:94:2c:05:
                    bb:ab:1a:a9:18:62:47:aa:5d:cd:64:89:11:13:b5:
                    25:bc:d2:15:f7:4b:0e:dd:44:e6:39:2e:d2:a5:dd:
                    ed:fc:1a:69:01:bc:af:39:50:fe:46:6e:4b:ab:f2:
                    2b:62:78:93:f3:09:fa:b2:63:86:50:09:df:fa:e9:
                    5c:ed:de:03:f7:d2:30:47:34:e5:10:00:cd:08:24:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:87:EB:FD:AB:5B:84:CD:86:36:98:F9:09:1F:7F:1E:C5:25:2B:E0
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:75:49:7c:49:cc:b6:ef:5a:f6:13:9d:be:75:65:2a:bf:b4:
         43:bc:12:69:77:17:9b:9b:f9:04:6e:fd:38:93:92:4c:16:bc:
         f2:88:48:aa:59:a0:48:21:a6:b7:49:66:5a:3a:c2:d3:12:47:
         ab:91:26:3b:01:ff:2e:7d:46:d3:25:42:32:aa:6b:50:54:eb:
         a4:a5:c0:ae:eb:08:69:7f:3d:a6:30:ca:d3:ef:23:4a:e7:92:
         97:cc:84:12:e5:d5:8e:af:74:ba:7d:7c:f0:1f:54:a7:9e:f0:
         40:f9:c8:da:19:a2:b8:29:ce:fd:c3:ab:ee:58:53:3f:32:3a:
         9b:82:0c:ea:7d:fc:ac:24:67:e0:2a:06:83:7e:68:87:cf:4d:
         dc:f6:ac:83:01:37:3e:a2:f0:fc:d8:f5:f7:d7:8d:1b:b9:a7:
         70:36:c7:20:92:1f:05:b3:df:41:94:09:7d:f5:2f:81:53:60:
         f3:c7:58:b8:4f:06:25:e8:fc:3c:85:7c:d2:60:eb:32:0b:58:
         71:6f:1b:fd:14:32:ac:59:e7:4d:40:89:98:39:1d:aa:38:22:
         f7:05:4b:ee:48:d5:2a:4f:0b:79:dd:c3:00:d7:47:e5:5d:1c:
         ef:7e:91:76:2e:17:ab:0d:c8:b1:1a:94:46:76:7d:b0:a3:0d:
         3c:4b:8a:24
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUIDKfDpTcQ3jirovt8ZQZYAdBvEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyNDBaFw0yNjAyMDMxOTU3NDBaMDMxMTAvBgNV
BAMTKDZFODdFQkZEQUI1Qjg0Q0Q4NjM2OThGOTA5MUY3RjFFQzUyNTJCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaZWlEFTCgqtnmboH+E5eBQ8m
qRUvNj0HNRTQoC1OMNdMOohlr/DLWPlzU3CGCV0g+xl9BbE2oxbwaiqTvoNkzCWb
lg63GgqoUOCRf+ShrM2H8dw0vhGE0oujozWA/6zDHzV8FDBtwPTQJBmIo0Q0YPSr
p4ut2N5udr29V8gqbvaQnkjlfNACbG6JywXmLJd+2tTjQXJj7QJwFEBEd+0h3fkv
+fbRuRuipYAh2le15ZQsBburGqkYYkeqXc1kiRETtSW80hX3Sw7dROY5LtKl3e38
GmkBvK85UP5Gbkur8itieJPzCfqyY4ZQCd/66Vzt3gP30jBHNOUQAM0IJEHNAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUbofr/atbhM2GNpj5CR9/HsUlK+AwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz
ODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QKDANBgkqhkiG9w0BAQsFAAOCAQEAZ3VJfEnMtu9a9hOdvnVlKr+0
Q7wSaXcXm5v5BG79OJOSTBa88ohIqlmgSCGmt0lmWjrC0xJHq5EmOwH/Ln1G0yVC
MqprUFTrpKXArusIaX89pjDK0+8jSueSl8yEEuXVjq90un188B9Up57wQPnI2hmi
uCnO/cOr7lhTPzI6m4IM6n38rCRn4CoGg35oh89N3PasgwE3PqLw/Nj199eNG7mn
cDbHIJIfBbPfQZQJffUvgVNg88dYuE8GJej8PIV80mDrMgtYcW8b/RQyrFnnTUCJ
mDkdqjgi9wVL7kjVKk8Led3DANdH5V0c736Rdi4Xqw3IsRqURnZ9sKMNPEuKJA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:33 2025 by rpki-client