Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Gc+OZHPUc1NAsNYT187vhQi3qA1tvGXJ1E7nZJbl7gM=
Subject key identifier:   A3:2B:BF:55:B3:84:11:5A:A3:4D:32:52:78:39:6C:C2:A4:85:EA:C0
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       44087FED209F36680DEF5B64CD9C274B7F3348DF
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:16 +0000
ROA not before:           Tue 05 Mar 2024 17:59:16 +0000
ROA not after:            Tue 04 Mar 2025 18:04:16 +0000
asID:                     273072
IP address blocks:        2803:cf90:3400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:08:7f:ed:20:9f:36:68:0d:ef:5b:64:cd:9c:27:4b:7f:33:48:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:16 2024 GMT
            Not After : Mar  4 18:04:16 2025 GMT
        Subject: CN=A32BBF55B384115AA34D325278396CC2A485EAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:ee:23:7c:e2:b1:c3:b4:23:e8:1a:b2:59:
                    e6:81:32:27:84:6b:32:69:e2:10:ea:eb:af:bc:14:
                    6f:1e:f8:81:31:c8:cd:9e:52:51:7d:4f:6f:76:0c:
                    e7:ad:73:e2:38:24:e2:73:29:78:cf:00:6a:2e:70:
                    2c:ed:15:7a:f9:c4:3a:d8:39:a2:ee:54:96:4d:83:
                    2f:b4:e3:52:49:76:64:4f:08:25:92:9c:7a:f3:c0:
                    4e:38:77:6c:1b:6f:7e:2b:29:1c:6d:69:1a:69:b8:
                    c0:ce:91:7f:9d:e5:62:58:bb:b5:dc:b6:0f:4c:ee:
                    8f:e1:4c:33:14:42:07:b6:1a:f6:a3:d3:4e:73:9f:
                    19:d5:f3:04:16:82:f7:4e:6a:ca:53:48:3d:ac:4c:
                    83:39:a3:c0:71:b9:75:03:0d:2f:20:8c:12:f7:5f:
                    45:0e:c0:69:d3:76:51:ad:d9:d6:a0:50:77:4e:dd:
                    e2:d4:5a:4e:de:81:bf:ea:86:07:fa:cf:12:ce:9a:
                    a6:2e:93:d4:4c:65:82:fd:cc:a0:e8:10:e5:2e:17:
                    5d:12:0d:5c:82:53:84:50:89:71:f1:2f:ac:87:f0:
                    bc:d2:26:df:e5:0c:35:37:fe:36:0e:b9:e7:22:2b:
                    c8:e7:b2:30:4f:85:00:a8:4d:fa:91:32:21:39:f0:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2B:BF:55:B3:84:11:5A:A3:4D:32:52:78:39:6C:C2:A4:85:EA:C0
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:75:01:85:ef:5a:e9:ff:77:cd:94:b2:08:ec:2d:d8:a6:44:
         b6:80:29:f2:9e:26:60:d1:ed:fc:16:7f:ee:fd:7e:c4:fc:07:
         90:46:26:0d:42:65:8e:45:e4:24:f1:ed:6c:9e:af:86:ec:a6:
         36:5d:fc:7d:e6:2e:b1:5a:d0:8c:59:9b:10:e2:71:02:7b:79:
         cb:72:80:11:30:a1:dd:26:4d:e2:d2:f7:24:64:7a:37:cb:9e:
         69:03:ad:cb:8a:18:85:74:1d:f7:1a:da:85:b4:59:d7:17:03:
         c0:e9:36:18:72:f3:a5:66:5e:1b:c3:cf:24:61:c2:5e:8f:e9:
         00:98:f7:09:16:9a:83:3c:8a:15:83:29:87:77:ce:7d:08:da:
         2c:6f:66:f7:55:f7:1c:9e:2b:cb:80:02:53:2e:c0:8a:73:98:
         57:32:8b:b3:c3:64:22:fb:33:a0:ac:6d:9f:62:71:50:e4:d3:
         2a:5f:5e:5f:0a:27:0d:83:62:c7:87:27:c3:e5:54:40:5f:86:
         d5:9d:f3:89:28:7b:f8:8c:e3:82:fc:ae:29:33:99:5c:95:59:
         e1:69:9b:ac:ac:fc:cf:b5:da:1b:75:aa:92:73:59:a4:c9:61:
         04:34:aa:ac:66:5d:39:88:60:60:77:83:eb:a7:ed:37:14:8b:
         96:a6:d5:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org