Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          f/dZywM6SlKR3bZXy5KTXf69wqoPQ2sq32GttFPfLGA=
Subject key identifier:   F9:4A:5D:FB:85:31:89:23:29:C2:6A:93:49:DF:9D:71:08:64:B8:0D
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       38B2874EBC5823FD7A90C4F6364FA92DF9B56F84
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:20 +0000
ROA not before:           Tue 04 Feb 2025 19:52:20 +0000
ROA not after:            Tue 03 Feb 2026 19:57:20 +0000
asID:                     273072
IP address blocks:        2803:cf90:2900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b2:87:4e:bc:58:23:fd:7a:90:c4:f6:36:4f:a9:2d:f9:b5:6f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:20 2025 GMT
            Not After : Feb  3 19:57:20 2026 GMT
        Subject: CN=F94A5DFB8531892329C26A9349DF9D710864B80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:e4:42:5c:25:95:82:7c:e6:e1:63:a6:ca:
                    5c:ec:d3:4c:3f:4a:e0:e6:9f:8b:fa:b6:ae:f9:b2:
                    24:eb:d1:f3:39:9c:f8:41:93:3b:03:14:68:6a:77:
                    b6:54:2d:49:31:42:66:5e:55:42:61:7c:b3:56:a3:
                    9f:85:c0:51:b4:c4:c8:5b:7b:62:38:2b:01:2b:af:
                    ba:0f:59:08:68:ec:0a:fe:2d:62:5d:af:7c:cc:1e:
                    a2:2f:ad:cc:cb:c5:25:22:17:f7:35:c5:42:6d:04:
                    18:53:3c:a8:db:72:c2:b4:ed:98:f5:82:aa:e8:ea:
                    e1:1f:d9:d1:37:fd:7a:30:e6:02:cd:8f:2d:8b:c5:
                    62:26:5e:e6:6d:23:12:07:ac:5e:eb:02:61:74:02:
                    78:3d:a7:07:3a:2c:b0:df:81:9b:a9:a0:47:bc:f7:
                    65:d1:92:b2:dd:e2:0f:30:48:ca:af:de:a0:6e:7c:
                    e1:b3:02:77:29:74:cb:65:29:3f:ba:3a:4a:a7:90:
                    b4:3c:05:95:a1:66:6c:7b:7f:43:fc:7f:62:47:62:
                    9f:5d:eb:23:28:36:e3:f4:8b:11:ca:d5:dd:14:b9:
                    60:f5:c7:c9:c3:83:06:d7:88:9e:f2:c2:1b:d4:c3:
                    c0:d8:47:f1:d2:ea:ba:c6:e1:48:2c:35:67:ff:ca:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:5D:FB:85:31:89:23:29:C2:6A:93:49:DF:9D:71:08:64:B8:0D
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a323930303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:bf:ed:9a:c4:0b:ba:41:b9:9f:69:0e:25:08:fc:b8:8c:
         20:11:c4:28:70:8f:c4:4c:d2:71:44:2d:04:dc:94:6b:30:66:
         b7:ac:38:93:a4:8c:54:a0:ab:76:fc:0e:f6:a3:ca:25:a8:19:
         50:4c:ec:48:1d:1e:30:2a:54:be:01:ff:a2:16:cb:2f:ba:45:
         e6:c7:0e:47:08:08:74:38:83:cd:12:c3:12:e1:09:d7:27:44:
         55:ff:25:79:ed:64:8a:8e:3b:71:d9:29:ff:a3:59:0f:2d:f1:
         48:ec:66:fb:c2:f0:e7:cf:d2:94:d3:d9:a3:3e:04:22:a7:12:
         2e:e8:fd:84:f9:0b:04:1d:71:26:d4:c3:6c:0f:01:0d:5f:b8:
         02:bc:f8:4b:3b:72:b2:7e:da:fd:6c:42:60:b5:24:a3:92:43:
         5a:00:da:ee:fc:c0:25:2c:f0:2a:2c:5b:8c:d9:16:19:36:df:
         72:dc:60:15:8e:42:73:0e:97:58:7f:cc:ea:4c:9c:a7:ad:a7:
         ab:b3:55:81:d8:68:f5:68:1e:f0:e9:d7:ce:90:67:11:59:f9:
         cd:32:7c:04:c9:42:57:05:e7:b6:de:79:99:e7:9a:0d:54:b9:
         f4:10:f5:0c:8b:42:9c:5d:c4:60:70:80:23:12:3a:4f:a5:e0:
         3b:73:78:86
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOLKHTrxYI/16kMT2Nk+pLfm1b4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMjBaFw0yNjAyMDMxOTU3MjBaMDMxMTAvBgNV
BAMTKEY5NEE1REZCODUzMTg5MjMyOUMyNkE5MzQ5REY5RDcxMDg2NEI4MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxeRCXCWVgnzm4WOmylzs00w/
SuDmn4v6tq75siTr0fM5nPhBkzsDFGhqd7ZULUkxQmZeVUJhfLNWo5+FwFG0xMhb
e2I4KwErr7oPWQho7Ar+LWJdr3zMHqIvrczLxSUiF/c1xUJtBBhTPKjbcsK07Zj1
gqro6uEf2dE3/Xow5gLNjy2LxWImXuZtIxIHrF7rAmF0Ang9pwc6LLDfgZupoEe8
92XRkrLd4g8wSMqv3qBufOGzAncpdMtlKT+6OkqnkLQ8BZWhZmx7f0P8f2JHYp9d
6yMoNuP0ixHK1d0UuWD1x8nDgwbXiJ7ywhvUw8DYR/HS6rrG4UgsNWf/ym+hAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU+Upd+4UxiSMpwmqTSd+dcQhkuA0wHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzIz
OTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QKTANBgkqhkiG9w0BAQsFAAOCAQEAi9m/7ZrEC7pBuZ9pDiUI/LiM
IBHEKHCPxEzScUQtBNyUazBmt6w4k6SMVKCrdvwO9qPKJagZUEzsSB0eMCpUvgH/
ohbLL7pF5scORwgIdDiDzRLDEuEJ1ydEVf8lee1kio47cdkp/6NZDy3xSOxm+8Lw
58/SlNPZoz4EIqcSLuj9hPkLBB1xJtTDbA8BDV+4Arz4Sztysn7a/WxCYLUko5JD
WgDa7vzAJSzwKixbjNkWGTbfctxgFY5Ccw6XWH/M6kycp62nq7NVgdho9Wge8OnX
zpBnEVn5zTJ8BMlCVwXntt55meeaDVS59BD1DItCnF3EYHCAIxI6T6XgO3N4hg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:41 2025 by rpki-client