Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          JGOlETS+dpY3Fz4mZUi2ju562ri1pFRHkc0u8/vnwIU=
Subject key identifier:   E7:EB:A6:05:3D:7E:C5:85:94:B5:BF:D6:02:A2:CB:B0:A1:85:5D:A9
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       13358825A9AE858065ED8E62791508BEB5A5C48C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:18 +0000
ROA not before:           Tue 05 Mar 2024 17:59:18 +0000
ROA not after:            Tue 04 Mar 2025 18:04:18 +0000
asID:                     273072
IP address blocks:        2803:cf90:3b00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:35:88:25:a9:ae:85:80:65:ed:8e:62:79:15:08:be:b5:a5:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:18 2024 GMT
            Not After : Mar  4 18:04:18 2025 GMT
        Subject: CN=E7EBA6053D7EC58594B5BFD602A2CBB0A1855DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:15:23:b2:aa:9a:3b:6f:eb:f8:71:7a:c9:
                    2b:07:23:45:40:79:15:db:39:ee:1a:01:1f:b2:22:
                    1d:73:bf:d3:a7:8c:69:e3:af:0e:3d:17:b4:0d:f3:
                    14:63:b0:a8:06:a8:f2:75:40:d0:0b:99:10:9d:34:
                    6d:aa:8b:0a:24:26:b4:6d:dd:26:5e:11:90:39:fa:
                    9c:af:f5:ca:b8:f2:2f:f2:ba:6f:9a:70:a5:a8:54:
                    db:be:3a:f9:4a:a6:a0:c0:32:45:9a:9c:af:d1:1d:
                    54:22:0b:92:a4:7b:73:24:f1:67:1b:31:53:47:4a:
                    3d:c3:86:03:5b:28:9c:05:21:69:0a:41:4b:c6:88:
                    97:8b:2b:67:ab:91:87:5a:9d:ff:00:dd:34:57:eb:
                    4a:53:99:c1:e1:fa:26:aa:a2:0d:a1:b7:a8:53:96:
                    ea:82:52:cf:02:d6:6a:0f:61:67:99:de:f4:47:70:
                    26:27:3d:c2:7d:43:75:03:7f:03:50:21:db:5b:66:
                    e9:13:a8:af:f0:f9:58:a0:81:d2:10:0a:34:b9:1e:
                    85:b4:aa:2e:d2:db:85:4a:35:02:a4:72:d3:95:fa:
                    7f:09:b8:0d:85:6b:c3:5b:c8:41:3c:c8:1c:6a:83:
                    9c:20:d3:64:e8:08:c5:dc:8a:b5:42:48:53:21:ca:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EB:A6:05:3D:7E:C5:85:94:B5:BF:D6:02:A2:CB:B0:A1:85:5D:A9
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336230303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:94:5f:7e:d4:8b:bf:78:f8:ad:30:49:34:88:30:32:2d:89:
         60:aa:79:35:c3:a4:d7:18:bd:36:fa:54:33:f7:61:3a:d4:7d:
         56:2e:cd:7c:6a:6c:0c:99:50:1e:e9:01:a3:fc:81:25:fc:12:
         03:5c:f3:a1:b5:74:7e:cf:13:2c:85:f1:0e:3a:9f:39:47:8d:
         3f:6a:1b:bd:d4:65:b1:11:4b:06:7c:bd:2b:76:b5:23:70:7e:
         26:90:d6:37:be:09:e0:87:dc:13:35:2b:52:f1:b2:88:85:04:
         4c:d3:a4:f5:8b:31:38:ff:bf:a6:b6:58:2a:21:85:cc:67:b8:
         7e:37:26:d9:fb:ab:b6:f9:fd:d0:a5:a5:8a:7c:08:51:31:a9:
         22:17:b5:a1:79:59:f0:7f:7f:32:48:25:e8:38:c5:36:ee:bc:
         b4:45:a4:46:49:fd:d6:9b:45:1d:bc:29:24:48:23:09:7f:4f:
         cc:44:66:d4:9a:ad:4f:e8:6f:ae:65:b8:60:fd:2d:d8:22:a1:
         e2:8a:2a:6a:ac:cb:6f:dc:14:56:9c:7d:9d:01:fa:74:04:d2:
         3e:95:6b:88:d1:a0:9d:0f:71:fa:cf:05:13:01:c1:8d:14:16:
         9d:4a:6a:3d:50:e7:6f:e5:19:59:3e:0a:4c:c7:49:ca:67:95:
         20:dc:a5:6b
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUEzWIJamuhYBl7Y5ieRUIvrWlxIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNDAzMDUxNzU5MThaFw0yNTAzMDQxODA0MThaMDMxMTAvBgNV
BAMTKEU3RUJBNjA1M0Q3RUM1ODU5NEI1QkZENjAyQTJDQkIwQTE4NTVEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjRUjsqqaO2/r+HF6ySsHI0VA
eRXbOe4aAR+yIh1zv9OnjGnjrw49F7QN8xRjsKgGqPJ1QNALmRCdNG2qiwokJrRt
3SZeEZA5+pyv9cq48i/yum+acKWoVNu+OvlKpqDAMkWanK/RHVQiC5Kke3Mk8Wcb
MVNHSj3DhgNbKJwFIWkKQUvGiJeLK2erkYdanf8A3TRX60pTmcHh+iaqog2ht6hT
luqCUs8C1moPYWeZ3vRHcCYnPcJ9Q3UDfwNQIdtbZukTqK/w+ViggdIQCjS5HoW0
qi7S24VKNQKkctOV+n8JuA2Fa8NbyEE8yBxqg5wg02ToCMXcirVCSFMhyqFDAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU5+umBT1+xYWUtb/WAqLLsKGFXakwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzM2
MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA8+QOzANBgkqhkiG9w0BAQsFAAOCAQEAZpRfftSLv3j4rTBJNIgwMi2J
YKp5NcOk1xi9NvpUM/dhOtR9Vi7NfGpsDJlQHukBo/yBJfwSA1zzobV0fs8TLIXx
DjqfOUeNP2obvdRlsRFLBny9K3a1I3B+JpDWN74J4IfcEzUrUvGyiIUETNOk9Ysx
OP+/prZYKiGFzGe4fjcm2furtvn90KWlinwIUTGpIhe1oXlZ8H9/Mkgl6DjFNu68
tEWkRkn91ptFHbwpJEgjCX9PzERm1JqtT+hvrmW4YP0t2CKh4ooqaqzLb9wUVpx9
nQH6dATSPpVriNGgnQ9x+s8FEwHBjRQWnUpqPVDnb+UZWT4KTMdJymeVINylaw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org