Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          wmTMa57Zns6T8L52yGuMMsMbHTFrwNBO4qxvF2d4pik=
Subject key identifier:   C6:05:A5:C4:4C:D9:90:F6:F7:24:97:69:E8:52:06:0B:C2:2B:1F:4C
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       2195B9AA7F31842EBE40DD08797196950A0C08B6
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:29 +0000
ROA not before:           Tue 04 Feb 2025 19:52:29 +0000
ROA not after:            Tue 03 Feb 2026 19:57:29 +0000
asID:                     273072
IP address blocks:        2803:cf90:3700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:95:b9:aa:7f:31:84:2e:be:40:dd:08:79:71:96:95:0a:0c:08:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:29 2025 GMT
            Not After : Feb  3 19:57:29 2026 GMT
        Subject: CN=C605A5C44CD990F6F7249769E852060BC22B1F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:28:ea:97:fc:c4:e4:b8:0e:ea:e0:32:6a:11:
                    38:0e:e4:53:1f:97:65:59:8f:8b:1d:cc:d8:b9:42:
                    a4:e4:52:41:8a:1d:6f:2f:3e:94:5c:dc:65:b3:d6:
                    89:d9:69:b4:ba:d0:d3:c0:13:2c:f6:63:9a:1c:7e:
                    03:bd:83:2e:6b:42:c5:8d:3a:a0:7b:3e:18:0e:33:
                    f5:e7:51:51:fa:3d:3d:21:e4:f2:e8:08:33:e4:37:
                    c6:89:68:24:6b:10:b3:ef:87:cd:4e:fd:cf:d5:7c:
                    6f:7d:d7:2e:44:4c:71:81:a0:a1:ca:b7:6f:0d:15:
                    09:0e:b4:84:91:5d:e8:77:f1:58:51:c9:e1:fe:71:
                    61:19:18:7b:a6:e9:13:46:88:07:52:93:32:2d:cc:
                    e4:e4:bb:9d:a5:5e:5c:9f:39:de:e1:39:1c:6b:4a:
                    8c:de:68:cc:f3:b9:20:09:69:cb:d1:41:15:01:9f:
                    71:5e:aa:96:cc:95:30:72:91:b7:00:73:77:63:ac:
                    a3:9d:16:ec:95:14:b5:45:a9:43:c3:f5:b4:1f:0a:
                    b7:21:46:ec:54:55:f7:11:2b:03:6a:f7:37:f3:66:
                    cc:19:ee:f0:86:48:f7:56:4a:0d:ed:e7:57:c2:21:
                    dd:36:8a:28:c3:39:ea:45:25:5b:a3:e2:9a:55:08:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:A5:C4:4C:D9:90:F6:F7:24:97:69:E8:52:06:0B:C2:2B:1F:4C
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a333730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:7a:0a:96:ed:25:8c:67:57:8f:5a:fa:6c:ce:c9:8d:ac:
         eb:99:63:6a:2e:a7:8e:80:25:41:ba:b4:51:dd:64:3b:32:bf:
         43:3b:c3:fa:8f:77:c7:90:de:23:c1:f9:f4:0f:b0:0e:46:22:
         fd:b5:8f:e4:72:30:20:63:42:7e:39:64:67:1c:b3:da:b4:60:
         01:4f:b9:82:c2:fa:95:4c:48:7a:60:9d:cc:6f:b2:68:19:8d:
         1f:26:b9:28:7f:49:ea:9c:a2:68:bc:9d:14:01:27:ec:b9:16:
         c9:af:a1:32:63:f9:8c:4f:33:86:d2:1d:9a:cf:0c:c7:fa:a5:
         df:ca:f1:ee:f1:ca:86:09:0f:e0:33:da:61:a5:e6:c8:ed:6c:
         34:3b:01:12:61:bc:ba:b7:c2:6d:ec:c4:79:cc:34:9e:1c:23:
         86:bd:30:c1:be:86:8f:f3:1e:74:26:cc:19:58:c9:2b:fd:c2:
         ad:6b:e8:ea:dd:10:a5:30:cc:0d:69:53:5b:3a:67:c2:ba:91:
         9f:89:2d:cf:eb:f5:57:8a:64:d7:a4:c2:48:a8:a3:9a:08:a4:
         11:ec:89:01:d4:99:94:eb:09:2e:f2:75:b1:07:44:4c:22:2e:
         d0:a1:e7:42:e7:b5:e2:ba:ff:b6:92:59:7c:76:6c:5f:b2:73:
         7a:3a:b9:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:26 2025 by rpki-client