Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ixXeZmPAJxoHxhfwvu8l1Xjwh5dg3eBquJE0bl3DCrk=
Subject key identifier:   5B:07:BA:5F:55:93:9B:B9:63:CB:5A:76:91:91:47:31:54:30:C2:8D
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       6760D6AFC9758474C2786E9894EBCC842E244032
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     273072
IP address blocks:        2803:cf90:3600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:60:d6:af:c9:75:84:74:c2:78:6e:98:94:eb:cc:84:2e:24:40:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=5B07BA5F55939BB963CB5A76919147315430C28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:10:1a:20:7a:d5:e6:bd:2c:20:3d:92:d9:
                    82:be:be:34:c4:97:c4:fb:b7:1d:de:db:ee:14:25:
                    2c:dd:c7:e0:a1:99:43:1f:46:94:03:c3:d4:42:b0:
                    25:ea:1d:e2:d2:92:7f:02:f1:da:f7:3e:90:a3:70:
                    21:bd:98:b5:0a:bb:ab:4f:1e:39:95:ab:84:55:d7:
                    97:4e:a4:10:8f:c0:c8:61:86:4b:1b:04:3d:8e:cc:
                    8e:1e:0a:18:f6:81:71:85:9e:c3:0f:18:69:57:9c:
                    d5:db:36:db:2d:16:0b:eb:4e:f8:71:46:ad:f2:8e:
                    22:9d:1a:f9:81:9d:8d:ad:44:de:ab:1d:23:80:62:
                    f5:95:35:43:41:63:28:b9:de:87:cb:37:05:76:ee:
                    2b:25:c4:b8:2f:89:3c:46:7d:2c:ac:b7:6c:d5:2a:
                    c1:6d:71:db:1d:71:a4:b4:96:d4:bb:87:c9:52:4f:
                    d8:8c:1c:e8:0e:33:74:03:a6:ef:e4:48:8f:d5:da:
                    a5:cf:53:d7:03:b2:78:34:ef:b9:24:7a:16:44:01:
                    69:dd:a7:21:dc:fa:30:18:ad:86:64:60:ab:0f:bd:
                    dc:5d:57:51:d4:c1:80:e8:03:be:a6:e5:28:49:fd:
                    4a:68:06:7a:e7:07:fc:12:ea:62:ff:9a:23:0e:d6:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:BA:5F:55:93:9B:B9:63:CB:5A:76:91:91:47:31:54:30:C2:8D
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333630303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:4f:79:90:90:a2:53:51:a6:37:10:e0:48:92:27:65:9e:
         40:af:e4:7e:92:9d:b6:cf:17:8d:e1:d5:93:7a:60:2d:f7:2e:
         c0:69:7d:68:e2:37:ac:36:3f:a1:36:c1:94:15:94:0d:5a:14:
         71:5a:c8:55:60:49:cf:87:69:65:b5:45:27:d1:73:67:2d:9f:
         7e:68:3a:0a:bb:af:7d:b7:5a:52:3d:25:5e:35:70:36:ba:b1:
         b4:f0:73:8d:6a:74:b3:16:bc:c8:88:9e:58:84:10:30:63:27:
         6d:b8:e0:16:b1:b5:ff:75:3b:6b:46:d6:20:ff:e9:ee:2b:ac:
         34:2e:34:61:68:78:aa:ac:5f:25:8a:8a:72:75:71:35:66:55:
         e3:a5:f1:48:5c:3a:99:a9:12:36:8e:f2:3e:1e:78:71:44:08:
         24:93:0e:8e:f9:a7:4f:ed:7a:16:5b:b5:12:aa:0b:d7:c3:72:
         f2:ab:7e:a7:d3:2f:c4:24:61:49:36:94:c7:d3:94:0e:b1:74:
         14:e1:39:ef:55:07:3a:01:5f:09:d4:5c:97:05:ab:0b:75:f1:
         cc:15:4a:1b:3c:15:41:9b:15:23:ea:b0:99:3c:bd:dc:99:00:
         68:9a:eb:18:44:00:62:2e:8f:80:ba:cf:1d:1e:84:21:54:d8:
         f0:3f:12:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org