Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          85BLANhsdKUL9bZP1AecKg7T30Hl8kyqXXQi3wqD1Lg=
Subject key identifier:   8D:B8:DF:F8:07:46:96:FA:65:7F:BC:35:77:11:03:D5:9C:22:17:16
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       39A2F6A111C74AC4D1CAB04BED07CF77A2088DFF
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:21 +0000
ROA not before:           Tue 04 Feb 2025 19:52:21 +0000
ROA not after:            Tue 03 Feb 2026 19:57:21 +0000
asID:                     273072
IP address blocks:        2803:cf90:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a2:f6:a1:11:c7:4a:c4:d1:ca:b0:4b:ed:07:cf:77:a2:08:8d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:21 2025 GMT
            Not After : Feb  3 19:57:21 2026 GMT
        Subject: CN=8DB8DFF8074696FA657FBC35771103D59C221716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:30:ea:f9:70:8c:54:08:9b:24:71:db:97:
                    86:d2:c7:d5:9e:b4:d5:b0:89:19:bf:84:1b:a4:23:
                    19:a7:fa:78:61:c1:00:c2:d1:7a:74:b9:f9:f9:45:
                    f9:a4:f6:35:55:c3:88:18:e3:5c:7e:b7:94:2a:39:
                    8e:4e:ac:84:38:69:ce:63:23:1d:d3:d2:c6:ea:78:
                    b7:a1:c8:0b:e9:67:5a:4b:15:ab:43:7f:4e:51:73:
                    8d:b6:6d:57:9c:d4:2a:50:02:40:6b:4c:66:e3:69:
                    44:6f:62:9d:cb:4f:2a:97:e1:7e:f1:b2:f9:76:c9:
                    cb:9f:ec:b3:cc:96:c1:be:5a:9b:1a:57:5f:9e:22:
                    2e:21:ad:dd:b6:d8:a9:84:0d:97:43:fd:41:31:19:
                    9f:5f:b7:14:ef:18:1d:6f:83:63:7a:22:dc:f9:1e:
                    38:33:80:c4:e1:da:aa:6b:f6:82:c6:78:00:e8:96:
                    53:08:41:ae:a5:57:1c:82:e9:04:c4:ba:9b:b9:9d:
                    e4:0a:9e:ab:8c:68:ee:cb:ab:55:37:d5:db:88:e7:
                    cc:db:d8:68:7a:60:9d:c8:37:15:0c:1c:2c:3a:4e:
                    2e:b0:14:ad:2e:2d:2a:b5:db:28:b0:57:bc:5c:fa:
                    8f:ea:56:6a:de:5e:f0:b9:91:8f:f3:a8:bb:57:7c:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B8:DF:F8:07:46:96:FA:65:7F:BC:35:77:11:03:D5:9C:22:17:16
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333330303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:32:39:e2:9e:43:c3:56:2e:23:0c:8a:d5:41:e8:cd:e0:
         7c:c9:6d:56:50:95:17:99:8d:9c:d7:00:be:df:2d:4e:f9:96:
         cf:18:39:a0:12:57:2d:bd:0d:b1:dd:27:dd:95:15:8e:9c:27:
         65:65:0f:42:de:0c:a2:07:aa:29:17:c1:3c:29:e5:e8:15:4e:
         66:8c:10:d6:d7:dd:ac:1c:ac:92:14:ec:37:eb:2b:46:47:7b:
         4f:ac:65:db:e6:4e:19:c6:ef:23:e2:cf:6e:85:3e:f0:b4:98:
         18:5a:ce:8a:58:cd:bc:72:cd:0e:96:45:fd:eb:40:38:6f:6b:
         c1:90:d2:6b:75:3f:f4:45:0f:da:9f:cb:ed:5e:fc:0a:a2:2c:
         cb:96:4a:bf:f6:91:af:61:c1:ff:1e:ac:5c:99:aa:c8:41:b5:
         6e:08:2d:b7:9b:2d:2f:db:bc:56:4d:59:2d:78:8b:2d:d5:ab:
         ec:83:5d:b2:f6:78:f0:c6:f5:5e:c5:4a:72:7a:23:45:52:37:
         38:89:ba:b0:d3:4d:be:54:c3:32:48:50:4e:78:70:86:13:0b:
         ea:f4:00:b6:77:78:8f:19:13:0d:38:61:35:78:10:0f:7c:f9:
         c8:76:63:db:9b:c3:a7:f1:22:25:6f:8c:e8:99:f2:6b:0c:d7:
         8f:db:6e:0c
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUOaL2oRHHSsTRyrBL7QfPd6IIjf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyMjFaFw0yNjAyMDMxOTU3MjFaMDMxMTAvBgNV
BAMTKDhEQjhERkY4MDc0Njk2RkE2NTdGQkMzNTc3MTEwM0Q1OUMyMjE3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONzDq+XCMVAibJHHbl4bSx9We
tNWwiRm/hBukIxmn+nhhwQDC0Xp0ufn5Rfmk9jVVw4gY41x+t5QqOY5OrIQ4ac5j
Ix3T0sbqeLehyAvpZ1pLFatDf05Rc422bVec1CpQAkBrTGbjaURvYp3LTyqX4X7x
svl2ycuf7LPMlsG+WpsaV1+eIi4hrd222KmEDZdD/UExGZ9ftxTvGB1vg2N6Itz5
HjgzgMTh2qpr9oLGeADollMIQa6lVxyC6QTEupu5neQKnquMaO7Lq1U31duI58zb
2Gh6YJ3INxUMHCw6Ti6wFK0uLSq12yiwV7xc+o/qVmreXvC5kY/zqLtXfMhBAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUjbjf+AdGlvplf7w1dxED1ZwiFxYwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzMz
MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QMzANBgkqhkiG9w0BAQsFAAOCAQEAOIoyOeKeQ8NWLiMMitVB6M3g
fMltVlCVF5mNnNcAvt8tTvmWzxg5oBJXLb0Nsd0n3ZUVjpwnZWUPQt4MogeqKRfB
PCnl6BVOZowQ1tfdrByskhTsN+srRkd7T6xl2+ZOGcbvI+LPboU+8LSYGFrOiljN
vHLNDpZF/etAOG9rwZDSa3U/9EUP2p/L7V78CqIsy5ZKv/aRr2HB/x6sXJmqyEG1
bggtt5stL9u8Vk1ZLXiLLdWr7INdsvZ48Mb1XsVKcnojRVI3OIm6sNNNvlTDMkhQ
TnhwhhML6vQAtnd4jxkTDThhNXgQD3z5yHZj25vDp/EiJW+M6JnyawzXj9tuDA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:14 2025 by rpki-client