Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          OuYzEOdzbJMKBjdkev5sjdpvp+drKrju0mhO1KAdAtk=
Subject key identifier:   5A:14:B3:D3:8E:6F:64:28:87:79:86:76:61:D4:C2:85:00:A9:BE:4F
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       19FF05848A7A8296E0654C3ECD2FBD6205BDA859
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:09 +0000
ROA not before:           Tue 05 Mar 2024 17:59:09 +0000
ROA not after:            Tue 04 Mar 2025 18:04:09 +0000
asID:                     273072
IP address blocks:        2803:cf90:3100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ff:05:84:8a:7a:82:96:e0:65:4c:3e:cd:2f:bd:62:05:bd:a8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:09 2024 GMT
            Not After : Mar  4 18:04:09 2025 GMT
        Subject: CN=5A14B3D38E6F64288779867661D4C28500A9BE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:7a:82:df:09:d7:d0:9d:55:63:df:91:11:
                    ce:33:f8:bb:b6:65:0a:cf:6f:b5:fc:f2:c5:73:59:
                    5f:1d:94:10:76:80:38:38:1a:67:66:46:60:10:e4:
                    12:02:db:aa:1a:f5:3a:b3:2a:64:f8:a5:62:be:04:
                    b0:8f:a0:ac:f3:79:1c:e6:6b:99:d4:81:29:d8:f3:
                    de:3e:b0:6b:33:52:88:eb:80:b2:a2:8b:d6:cb:ba:
                    25:72:f4:1d:25:c4:53:00:ef:e3:7b:45:64:39:01:
                    95:47:a7:67:7f:db:32:43:cd:8c:76:24:f2:fc:0e:
                    a9:f8:94:32:4f:72:04:ce:17:2f:84:5d:4a:29:ea:
                    e9:2d:f0:8b:9f:36:d3:13:0e:aa:37:ad:43:55:51:
                    f2:d6:0a:3b:fa:5c:eb:48:9f:1c:f6:5a:e4:00:b6:
                    8d:29:3a:e1:8f:5c:c1:ac:b2:93:db:62:87:78:3c:
                    70:5c:ca:75:69:3a:e0:f5:33:92:03:f6:f1:10:42:
                    3b:fa:9a:f5:64:15:d8:2d:cb:d4:ea:f3:3d:fc:3b:
                    5d:0d:5c:96:98:85:3c:0c:30:a0:6b:f4:98:0e:9b:
                    38:50:78:96:14:65:a4:61:89:42:84:25:a2:88:b9:
                    1d:7c:fa:85:a2:20:73:06:45:71:3b:ea:00:af:df:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:B3:D3:8E:6F:64:28:87:79:86:76:61:D4:C2:85:00:A9:BE:4F
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:66:21:2c:c8:e0:c2:68:78:00:6d:1a:a4:ba:dc:56:d4:67:
         2f:ad:b6:aa:d9:cc:5e:d0:73:a1:bb:6a:64:5f:0b:1f:fe:ae:
         99:89:6e:1d:57:fb:db:ec:f4:b1:95:23:d2:33:dd:47:bd:7d:
         2a:f4:09:d1:5e:08:5f:1e:07:09:96:22:63:f4:99:23:a3:59:
         2a:72:c7:d0:92:9c:49:76:89:f3:40:8e:8a:73:34:ba:87:e7:
         42:e5:cb:fc:d5:f3:38:07:87:18:d9:fa:9b:12:56:9c:da:c7:
         b2:37:60:0b:e6:d9:78:34:7a:a4:8a:97:8b:61:ce:df:60:e4:
         c6:99:17:d5:92:11:62:4f:83:f5:5f:c2:99:d0:93:94:85:d3:
         ac:7a:ce:d7:08:ff:ec:72:06:cf:d1:04:77:57:d6:13:4c:72:
         ee:48:be:34:6b:31:d0:d1:fe:6c:22:f4:b0:c9:ee:3e:86:55:
         0e:b5:f8:ca:df:d4:4a:02:93:26:a2:7c:7d:ff:dd:64:83:c2:
         ec:58:ec:96:eb:c6:82:2a:20:1d:4a:36:08:4e:ba:88:24:b4:
         e7:f8:1a:5e:62:20:c7:4f:57:1d:9e:1a:d6:e1:ed:c7:9a:96:
         24:bb:36:8e:b4:6a:56:5e:0d:18:e8:27:d8:80:d3:fe:89:cf:
         6e:2a:bc:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org