Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          kVCIw1upN7Agem5BDsyZU+6QykYnNrG4IF4qnwZBhOY=
Subject key identifier:   E4:59:E5:9F:A7:B5:0C:DE:49:F1:BA:F7:43:96:71:80:BC:40:50:FB
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7F1C65D232ED624243A416FFD91B60A52E9C9B1E
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:32 +0000
ROA not before:           Tue 04 Feb 2025 19:52:32 +0000
ROA not after:            Tue 03 Feb 2026 19:57:32 +0000
asID:                     273072
IP address blocks:        2803:cf90:3600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:65:d2:32:ed:62:42:43:a4:16:ff:d9:1b:60:a5:2e:9c:9b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:32 2025 GMT
            Not After : Feb  3 19:57:32 2026 GMT
        Subject: CN=E459E59FA7B50CDE49F1BAF743967180BC4050FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:2c:21:06:18:12:f4:72:e7:31:3f:25:0a:
                    b2:45:04:7c:a3:7f:0b:91:c8:bf:7a:df:94:a3:85:
                    83:dd:2b:c2:67:71:fd:71:46:6a:46:82:41:e1:e7:
                    59:92:06:13:f8:68:65:9b:9e:81:9f:e5:b3:3e:d8:
                    22:e5:ea:1a:b7:7b:e9:3d:96:ac:ad:b7:58:38:10:
                    34:c5:c7:b2:b9:f1:df:ed:99:36:7c:24:8d:2e:c4:
                    a4:f9:0a:18:ac:83:87:43:f0:5b:8c:4a:c3:bc:7c:
                    91:8c:ad:59:37:42:96:bd:88:a6:b5:d6:5a:a3:f1:
                    a9:59:d3:6d:27:0f:b8:70:49:ee:3a:0f:1a:63:22:
                    8f:54:0a:70:99:80:25:0f:ec:c5:71:c4:7e:dc:72:
                    4d:05:3a:ce:0d:36:ce:da:0a:47:b9:bc:92:07:30:
                    c4:e1:d5:99:5b:a4:2b:41:46:d0:cb:12:04:d0:79:
                    56:68:63:f7:7d:45:41:b2:76:45:57:dd:92:d7:92:
                    72:4a:5f:ca:d6:4f:fa:5b:7a:26:89:dd:86:a2:46:
                    e9:35:3a:e3:8b:fa:01:54:0c:61:e3:30:3d:62:26:
                    3b:00:c9:f4:b7:68:58:d3:0d:d2:bd:03:76:b6:36:
                    17:b6:47:0e:50:4b:b8:ee:d7:0e:6a:3f:41:6e:12:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:E5:9F:A7:B5:0C:DE:49:F1:BA:F7:43:96:71:80:BC:40:50:FB
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:27:95:3e:60:18:e1:d8:7b:6a:e9:cf:05:6f:b0:02:0e:12:
         9a:24:e4:d6:cc:ed:c3:aa:ab:3a:f5:6e:70:27:f2:bd:98:1d:
         e2:a0:c8:27:96:ce:3a:2e:aa:c3:af:2d:6b:10:6f:49:e0:08:
         f3:b7:81:f6:0d:36:31:2a:51:98:77:64:10:9f:65:26:93:7e:
         df:67:13:0a:84:21:ad:f1:b8:ac:ce:e0:22:cf:ee:1c:85:f9:
         3e:95:0c:87:4b:ff:94:1e:d1:b2:37:a3:4e:4b:09:65:ad:21:
         7b:62:50:1a:7a:9d:fb:01:65:c2:3d:0b:ab:bc:57:f0:98:4a:
         e5:f0:0e:a2:59:1e:6a:5e:f1:1e:ef:f3:51:7d:45:7b:0c:db:
         15:2b:d7:74:dc:a9:54:81:b4:f2:d4:5d:68:f2:3f:90:c0:14:
         57:4b:ef:f5:42:7e:79:ee:7e:82:b1:89:dd:60:cc:d0:69:13:
         c7:1e:66:76:1b:4a:4c:73:50:d1:6f:e6:70:50:be:66:fa:67:
         05:89:da:56:14:b8:43:18:d0:94:d1:63:6c:26:db:17:36:b0:
         c6:f0:39:48:87:08:af:c3:f0:cf:40:3e:a0:23:a9:7a:af:7e:
         b2:50:69:1c:63:e8:70:16:be:01:21:a5:47:71:87:e3:73:66:
         de:59:50:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:09 2025 by rpki-client