Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          jaSd7pRpYTLJMrRo8C6j8XhxdaabiKO2gFeg8t4oZ6s=
Subject key identifier:   61:33:E5:D3:09:F5:F2:75:34:7B:48:0D:78:B0:38:A0:E4:FB:A5:82
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       011F9FED69D7F03AE30FAF78333BA4BE509FCBFE
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:33 +0000
ROA not before:           Tue 04 Feb 2025 19:52:33 +0000
ROA not after:            Tue 03 Feb 2026 19:57:33 +0000
asID:                     273072
IP address blocks:        2803:cf90:2e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:9f:ed:69:d7:f0:3a:e3:0f:af:78:33:3b:a4:be:50:9f:cb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:33 2025 GMT
            Not After : Feb  3 19:57:33 2026 GMT
        Subject: CN=6133E5D309F5F275347B480D78B038A0E4FBA582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:d0:38:1c:29:8a:d4:3a:25:ff:a6:ed:d2:
                    cf:c9:f4:6a:d1:cb:7a:1a:1f:21:0d:97:31:86:3c:
                    24:e9:9e:6d:c3:69:d8:7e:b1:75:7a:37:49:b0:ce:
                    3b:cc:15:91:bd:1f:fb:e7:6b:76:79:52:d6:0c:8e:
                    96:a2:26:9d:57:b6:2a:c3:e4:40:73:98:90:fa:7b:
                    dd:ad:66:7e:0a:05:5d:e2:17:ee:ae:4a:df:50:89:
                    5b:3b:21:0a:53:6e:3d:67:d8:4b:b5:82:01:a9:71:
                    45:c8:22:eb:75:e2:fe:01:5a:34:72:69:90:f0:91:
                    0c:d8:8d:63:59:2e:3c:f3:be:a0:5a:d9:5b:58:ca:
                    b2:e2:fe:bf:a9:57:67:1e:ba:47:5a:33:b8:c7:bb:
                    bd:5d:a7:07:d5:c2:05:6e:fb:71:10:24:67:63:bc:
                    dd:6d:37:4e:43:82:53:b9:a2:da:a3:71:7d:a1:ce:
                    ce:0c:ab:79:5b:8f:53:4a:f1:6e:0e:dd:d7:d9:d6:
                    5a:0a:2a:8e:6b:c5:8e:37:bc:ca:e1:f3:f7:74:40:
                    8e:3c:8d:96:34:d6:41:e4:41:e4:d5:42:c8:6d:28:
                    6e:37:79:9c:62:73:32:06:1f:ad:b8:1f:88:7a:41:
                    11:a8:83:ef:46:6b:4c:04:c8:fa:e2:97:13:91:73:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:33:E5:D3:09:F5:F2:75:34:7B:48:0D:78:B0:38:A0:E4:FB:A5:82
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a326530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:70:5e:ac:8c:f5:4b:76:74:37:61:37:fe:d5:81:8c:0b:
         93:4b:d8:06:5c:00:68:47:90:2b:4f:c8:41:8e:e7:7b:dd:b0:
         99:6c:af:a7:43:4b:14:c1:91:65:c3:13:f5:64:d7:62:2f:5f:
         d4:03:89:07:64:80:35:fe:cc:48:73:99:de:35:1e:09:31:b2:
         c2:59:de:2a:4f:c0:6a:29:3a:31:c8:09:63:37:93:a6:66:46:
         a0:91:0a:8a:e1:c1:ce:4c:c2:70:ab:bf:e8:35:56:29:37:f3:
         f2:18:1c:17:d4:13:42:1d:88:2e:93:43:ac:4c:1e:b6:dc:04:
         99:a4:16:18:91:f6:a0:c5:e3:65:3e:55:2a:66:51:e6:4d:39:
         2b:7d:67:8b:d1:2e:6b:1b:66:69:3f:0f:3a:71:03:5d:a6:66:
         e6:f7:84:3b:65:89:28:24:b5:92:91:21:75:ce:da:ca:17:b6:
         e5:5a:d1:db:7a:21:ee:f4:8a:f0:8c:f2:3a:fa:7c:aa:91:63:
         87:03:45:ce:db:a4:64:d5:42:24:be:8a:8e:f7:67:44:41:0c:
         8e:7d:4f:3f:dc:8d:52:0c:f4:78:68:62:85:c6:ac:86:65:2a:
         d4:f1:4e:e0:ed:a3:31:c2:06:ff:b8:94:a6:0c:12:a7:f8:05:
         bc:4b:ea:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:37 2025 by rpki-client