Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a336530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          u+W46x6d2PGC4t2A+f9osfp4lP2bHVjXSdEdBrhpn8w=
Subject key identifier:   65:1F:F3:3A:8B:D1:C2:5D:57:C7:F0:52:99:DF:C1:80:49:5A:0E:2D
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       4934890A190C32755EC2D3C2BC42EE00EED1CA14
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:15 +0000
ROA not before:           Tue 05 Mar 2024 17:59:15 +0000
ROA not after:            Tue 04 Mar 2025 18:04:15 +0000
asID:                     273072
IP address blocks:        2803:cf90:3e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:34:89:0a:19:0c:32:75:5e:c2:d3:c2:bc:42:ee:00:ee:d1:ca:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:15 2024 GMT
            Not After : Mar  4 18:04:15 2025 GMT
        Subject: CN=651FF33A8BD1C25D57C7F05299DFC180495A0E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:0f:f7:ef:bd:f1:d3:88:5e:1d:d7:0e:23:
                    15:b8:c8:32:c2:8f:06:d1:f5:40:1f:fc:8c:97:95:
                    47:74:3e:63:5e:a5:4f:8d:90:33:24:47:f9:93:83:
                    b6:e4:ba:d2:03:f4:a1:32:07:59:08:a8:7d:91:d8:
                    8c:78:45:ef:36:e6:1a:e7:b6:7a:49:97:f8:3b:78:
                    71:e0:3e:fb:9a:d1:3e:e6:59:31:b5:52:89:76:b9:
                    09:63:9a:55:16:d6:0e:7c:81:b3:aa:c4:f6:4d:26:
                    9e:49:98:55:04:5e:a9:95:fe:df:fb:85:12:da:df:
                    6f:a8:df:37:10:27:dc:35:db:f4:18:9e:68:26:4f:
                    41:9c:ca:15:95:07:f9:f3:fa:f7:c3:ea:db:af:12:
                    38:14:33:5e:1e:26:82:86:75:03:09:e2:f8:e3:c4:
                    1a:29:4d:fe:f8:df:00:3a:45:1d:6f:26:81:62:40:
                    f3:fc:a2:2b:b2:69:3e:1e:68:02:65:03:98:f6:d9:
                    5f:0e:27:17:ba:b1:9f:d1:e8:7c:10:30:ca:e8:af:
                    11:93:98:3a:7f:60:67:53:02:be:8c:ec:36:67:6b:
                    60:20:f9:88:8e:66:0b:01:c5:ca:b9:68:c3:eb:b3:
                    b6:77:ae:e2:fc:69:c9:56:6b:af:d5:83:0b:f0:07:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:F3:3A:8B:D1:C2:5D:57:C7:F0:52:99:DF:C1:80:49:5A:0E:2D
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a336530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:f7:2d:b9:a2:9a:02:e8:78:34:76:bd:d6:06:23:5e:fe:
         17:84:e5:ed:80:96:f9:ad:83:86:67:0f:81:47:0c:25:bd:06:
         ba:13:fb:b3:79:08:84:ca:d0:8c:fd:a1:86:13:65:72:7c:e8:
         32:4e:a4:ea:af:98:ac:25:4a:b7:59:b4:5a:0b:2b:a8:df:ae:
         6f:33:71:8c:1a:dc:c6:86:4e:91:8e:17:39:8e:8a:14:44:f1:
         25:7f:5b:cc:a0:fd:7b:f3:9b:6d:c1:20:4e:02:65:92:a9:69:
         13:51:42:a8:3a:67:73:0b:40:7d:32:bc:53:64:9e:2c:f5:48:
         91:e8:9a:eb:a5:6a:da:f2:70:38:38:d6:03:d9:31:db:88:83:
         67:2f:41:65:75:3b:1e:5e:f7:c8:7b:ca:63:dd:9f:1e:2d:9f:
         79:0a:39:fc:53:84:70:18:91:fc:70:8b:c8:66:06:35:7a:f2:
         de:69:ad:5d:a3:01:02:e5:a6:b7:b4:68:63:e9:f8:39:e3:ec:
         2b:c3:bb:b0:46:41:93:28:60:10:84:b9:a3:8b:fb:b2:da:aa:
         b0:a2:e4:05:cf:84:72:71:40:e6:78:81:4d:90:1d:df:29:75:
         8b:e1:73:69:39:cf:9a:9d:74:f2:c7:0d:6b:1a:d0:d1:88:99:
         f3:1e:88:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org