Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Yw+6AHGz/+JgqoOyeVmRTm7rxNEBhpt4S5VznafKk5A=
Subject key identifier:   F0:63:BA:4C:A3:15:E2:E3:E8:8D:37:47:53:A5:DF:2A:81:79:DA:B9
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       22279BE918ADB3B003C32A5AB99FFB8B48EB088D
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:13 +0000
ROA not before:           Tue 05 Mar 2024 17:59:13 +0000
ROA not after:            Tue 04 Mar 2025 18:04:13 +0000
asID:                     273072
IP address blocks:        2803:cf90:2a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:9b:e9:18:ad:b3:b0:03:c3:2a:5a:b9:9f:fb:8b:48:eb:08:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:13 2024 GMT
            Not After : Mar  4 18:04:13 2025 GMT
        Subject: CN=F063BA4CA315E2E3E88D374753A5DF2A8179DAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:77:1c:31:17:e1:32:92:1c:1f:54:f5:88:
                    a9:a1:7d:91:bb:d2:96:a0:94:b0:4c:3d:c7:91:ed:
                    3a:db:f9:6d:54:60:13:4d:60:e8:da:32:5b:50:89:
                    26:42:72:cb:50:94:91:1f:e5:50:b0:90:7a:18:22:
                    13:0c:e7:c9:53:ad:13:f9:bb:7a:02:f7:60:a8:ba:
                    59:76:e9:f9:16:9c:77:24:0c:e9:88:5a:c1:2a:40:
                    88:b4:32:28:08:53:64:ed:05:ef:13:f4:29:22:62:
                    db:c7:b4:26:10:24:25:97:eb:20:6b:41:78:89:bb:
                    35:22:9e:74:50:e9:0f:2e:d4:41:de:86:08:a4:03:
                    52:d3:be:3a:e3:a3:7e:78:bd:6f:c9:6f:de:99:b9:
                    e5:6c:b7:27:1d:16:f8:95:ca:ea:48:5d:20:ab:ba:
                    26:a2:c7:e6:49:fb:c9:80:19:16:93:05:a6:4a:77:
                    2f:ce:fb:78:d7:0a:16:00:0d:da:61:b8:45:00:12:
                    15:98:a3:e9:06:0b:c5:90:f6:56:09:86:40:05:f2:
                    06:a0:a7:7e:07:77:90:e4:e8:af:ed:ef:c7:83:fa:
                    18:27:59:7d:64:97:1f:b9:64:bf:a3:20:b2:52:96:
                    2e:08:d1:85:bf:1d:48:9e:7f:14:39:32:4f:ea:4a:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:BA:4C:A3:15:E2:E3:E8:8D:37:47:53:A5:DF:2A:81:79:DA:B9
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:12:0d:ac:5d:78:11:3f:41:52:a2:f9:7b:b8:f0:a7:9f:72:
         90:3a:31:f1:cb:e4:78:7f:04:b6:c0:f4:ac:81:79:40:7e:9f:
         45:e1:9d:df:b6:3f:69:bc:67:6c:65:dd:4d:c2:d2:1e:dd:56:
         11:b2:38:01:f6:57:cd:21:3f:99:d8:ca:61:1a:67:ab:0b:d5:
         ca:03:3f:93:9d:d7:12:56:aa:a9:78:a3:f5:42:aa:c7:d3:28:
         46:fa:b7:05:59:8c:d9:14:8e:60:6c:b3:a4:39:4e:b6:ea:3a:
         fa:5a:26:7c:22:80:e6:f3:90:ce:7e:ee:a3:41:d8:66:de:87:
         15:15:ab:39:0c:b6:59:26:5a:13:1b:71:47:6b:b1:48:24:f1:
         b5:7b:f4:66:a2:e7:06:bf:41:59:c8:5b:a5:e0:09:42:97:3a:
         38:99:ca:71:4e:82:09:7a:1c:8e:1e:96:7e:fb:b0:4e:9f:cb:
         5f:bf:54:bd:eb:7c:4e:4e:82:a5:ef:2c:34:cf:76:66:53:f4:
         bb:88:5a:b4:22:c9:f4:9a:68:78:68:c5:66:3e:ea:e0:8b:59:
         f5:7e:0b:1b:ea:97:95:f0:fd:b7:a5:70:e9:26:01:f6:ae:60:
         77:e2:b6:b6:77:5c:20:bf:64:1c:c8:35:ca:92:de:ce:fe:67:
         4b:6f:6d:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:49 2024 by rpki-client on console-fra.rpki-client.org