Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ezRwGSDGtRx4RqQcEGiZfs6a4Ain2wQLHHkrrn5a6MI=
Subject key identifier:   6C:C7:8C:B2:7E:11:55:5C:93:14:66:BB:0D:DB:B1:69:A3:E3:08:EE
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       0B7C204BB2F03681DE827B904FD91335120E6480
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     273072
IP address blocks:        2803:cf90:3d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:20:4b:b2:f0:36:81:de:82:7b:90:4f:d9:13:35:12:0e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=6CC78CB27E11555C931466BB0DDBB169A3E308EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:c8:34:82:ef:65:df:79:48:cf:28:cb:bd:
                    34:69:e3:a2:8d:ee:44:ad:a4:d2:b9:de:7a:e8:fe:
                    eb:83:38:72:5f:ba:a9:78:79:c1:52:47:2a:bb:32:
                    e1:37:f9:18:15:68:cd:62:ba:ae:2f:bd:33:3d:f5:
                    2e:a7:a8:2e:7b:4f:58:41:18:d3:8c:ae:c8:17:e3:
                    4a:cc:f0:d7:07:34:7e:03:f3:46:2e:a2:05:7b:59:
                    fd:53:b0:09:03:a7:df:c4:75:e0:29:46:66:e3:f4:
                    a3:5b:ad:de:5c:12:32:2f:4d:1a:2f:98:27:30:9f:
                    c5:e1:79:9d:72:ad:5a:9c:56:59:88:6b:a5:30:ed:
                    b8:d9:45:6d:c2:5e:f4:66:b7:14:f1:0b:61:c6:e2:
                    88:ae:37:e3:f1:6e:3d:f7:79:3a:c8:87:c2:61:6d:
                    2e:8d:3e:97:e3:c3:3c:bd:94:f3:9e:8a:75:09:31:
                    62:1b:b7:29:e8:9a:99:e3:bb:c8:d7:47:21:2e:41:
                    0e:af:ac:15:2c:a3:fd:32:3b:6e:05:4c:3d:62:4c:
                    46:2d:a3:df:57:14:6c:31:25:97:46:63:a8:ed:a2:
                    20:82:ce:6b:1d:8f:13:42:d4:b8:39:e7:dd:c4:83:
                    75:26:28:34:56:39:12:aa:d1:61:cf:5c:32:27:6e:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:8C:B2:7E:11:55:5C:93:14:66:BB:0D:DB:B1:69:A3:E3:08:EE
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:7e:76:7e:9d:43:99:20:90:c1:07:61:ac:86:ff:ba:3a:
         28:a3:8c:16:f0:51:03:8f:29:e9:d1:25:7f:34:83:7b:d6:44:
         21:3b:e8:bf:3e:67:a4:76:58:17:c9:2d:c0:35:b0:33:83:35:
         a8:b4:98:a7:2b:10:2a:62:22:57:70:d6:ef:79:50:8c:e6:f6:
         c4:d9:0b:78:ba:72:7c:ef:0f:f3:b4:97:fd:d7:a2:7f:fc:21:
         44:5a:88:ac:f7:86:b0:24:b2:2b:95:d5:64:8f:de:99:a3:34:
         e3:be:75:59:d5:03:4a:0e:a0:9a:c9:87:46:02:c5:98:66:23:
         52:9f:2c:3b:b9:2d:2c:be:c2:d3:83:21:f6:34:fb:22:c3:ab:
         c6:18:17:82:50:6c:11:cc:03:3c:fd:91:4f:fc:fc:de:33:00:
         44:6e:03:4e:d8:ff:51:57:6d:8c:03:d5:c3:fd:c0:05:85:0d:
         8a:eb:21:de:04:64:e1:31:db:06:0d:83:2e:4f:a3:fa:15:7a:
         4e:96:ff:a7:9c:e9:dc:46:f2:08:bc:05:5a:4a:47:37:24:67:
         3a:9b:1f:ad:04:93:f8:26:54:d9:49:dd:71:70:3d:0b:f1:36:
         52:62:df:6d:16:02:7d:69:7a:2b:3d:ab:ee:43:4a:66:08:30:
         5c:eb:dd:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:49 2024 by rpki-client on console-fra.rpki-client.org