Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          s+NhYuiS4sIQZJDpTpjyDpDt3Xdj69GNw4T/2uqg2p8=
Subject key identifier:   0B:2E:57:CF:77:1D:FC:B7:6B:BE:D4:6B:74:2E:1E:A4:87:D1:23:51
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       02928BEF87B1CC013162004245B87B266FBE9AB3
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:42 +0000
ROA not before:           Tue 04 Feb 2025 19:52:42 +0000
ROA not after:            Tue 03 Feb 2026 19:57:42 +0000
asID:                     273072
IP address blocks:        2803:cf90:3d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:92:8b:ef:87:b1:cc:01:31:62:00:42:45:b8:7b:26:6f:be:9a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:42 2025 GMT
            Not After : Feb  3 19:57:42 2026 GMT
        Subject: CN=0B2E57CF771DFCB76BBED46B742E1EA487D12351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:f9:47:d9:f2:d6:e6:36:65:fc:7d:aa:ad:
                    dd:8b:38:08:75:ee:02:7b:5c:ad:de:da:ad:00:36:
                    f0:1b:1f:02:73:d4:55:cb:c0:80:80:61:b4:61:71:
                    81:58:94:b7:20:16:a4:15:05:37:1e:13:99:d6:67:
                    47:85:21:5d:1d:d7:8d:a6:47:79:26:f4:91:cb:72:
                    ab:fb:52:2e:81:55:3e:20:5d:b8:1d:51:a5:26:62:
                    74:4b:17:11:41:4f:b3:e9:ad:b6:92:d4:7f:2f:f2:
                    c4:2c:9d:50:96:64:9e:09:a1:d8:15:a4:60:6f:bf:
                    1c:29:df:02:91:41:75:db:1e:ab:09:da:69:ce:8e:
                    95:bd:5e:38:96:e5:db:33:04:9c:45:32:8c:07:db:
                    61:1d:67:c1:b0:96:83:e2:41:7c:e8:08:c2:64:93:
                    b5:2d:d3:86:c7:36:60:23:8a:29:45:ec:5d:f5:fc:
                    be:29:36:e9:5a:8c:f0:67:d3:0d:38:5c:cd:b1:36:
                    09:48:75:86:83:d4:1a:30:69:92:1a:f6:8c:a1:f7:
                    b0:b4:e7:c2:4f:b2:f8:43:a2:45:5d:db:54:12:28:
                    60:8b:e4:d7:5c:fc:e3:8e:64:cc:69:05:8e:be:31:
                    98:bb:00:40:55:0d:d0:56:11:65:55:ee:8c:cd:84:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:57:CF:77:1D:FC:B7:6B:BE:D4:6B:74:2E:1E:A4:87:D1:23:51
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:0d:23:be:d7:63:0a:b1:15:c1:df:5c:9c:62:21:2b:6a:
         7c:63:64:1b:c7:63:55:1e:17:0f:bb:65:99:d1:fb:f9:d4:b1:
         34:23:e1:ae:6c:c3:f4:60:15:b1:1a:a5:a2:e1:fd:8d:ec:21:
         ac:d3:10:28:df:ca:d4:18:48:e2:78:ad:27:08:be:d8:92:00:
         8e:aa:e1:e6:b8:bc:cd:3a:a0:14:bc:af:9f:80:d3:d7:25:9a:
         2b:86:58:03:09:a4:45:91:5f:2f:c3:f5:9e:f9:b6:dd:da:bd:
         36:10:2f:69:64:2c:10:62:ba:e5:1e:34:29:10:e7:df:cd:16:
         3d:4b:4b:25:c6:50:0e:27:51:6f:c6:7e:4d:74:00:99:40:ea:
         55:c9:de:b1:af:ef:3b:17:c2:f1:d8:d8:cc:9f:8e:de:e5:5f:
         18:d2:bb:15:54:c6:e4:1e:30:fe:38:18:75:56:19:e2:5c:11:
         05:4e:2d:ec:d0:f1:10:f9:61:7b:78:cf:1d:7c:0c:1e:0e:ad:
         18:c8:69:57:bd:13:ce:df:d6:d6:c1:17:7f:7a:18:59:96:21:
         d7:de:d7:65:4b:10:a4:25:61:ad:c5:dc:04:1f:da:60:ad:2a:
         48:d0:cd:09:0f:bf:bd:8d:1a:65:1d:64:13:26:a1:ab:ff:e9:
         e9:65:1b:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:57 2025 by rpki-client