Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          qCLmApCJKd6XS1o99bAjD6PCn6V6ib5hsJBSpDyFe4k=
Subject key identifier:   6C:B9:9F:26:80:5F:E0:7B:F4:AF:04:17:92:02:33:6F:EC:F8:F7:2F
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       123401EC1BF20384C5B069662EC62218BAFFB4DC
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:39 +0000
ROA not before:           Tue 04 Feb 2025 19:52:39 +0000
ROA not after:            Tue 03 Feb 2026 19:57:39 +0000
asID:                     273072
IP address blocks:        2803:cf90:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:34:01:ec:1b:f2:03:84:c5:b0:69:66:2e:c6:22:18:ba:ff:b4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:39 2025 GMT
            Not After : Feb  3 19:57:39 2026 GMT
        Subject: CN=6CB99F26805FE07BF4AF04179202336FECF8F72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:c2:fc:5e:31:70:7c:37:61:30:3c:d2:76:
                    4f:e7:40:5f:19:e2:42:5e:c0:f2:dc:3e:27:26:9d:
                    56:0a:db:a8:95:38:a1:eb:cd:a1:8c:3e:c7:3e:6d:
                    88:aa:0c:db:ca:c5:21:68:61:04:64:61:87:9e:bf:
                    1d:93:8a:1a:cd:25:a1:f6:1e:86:36:ad:8a:de:c9:
                    38:00:b5:5f:01:ab:0b:5f:5e:43:c8:a5:0e:7a:3b:
                    1d:9b:28:c6:26:61:91:96:23:21:37:2e:db:0b:5b:
                    ec:a1:25:22:97:04:49:d3:ee:a5:79:db:0c:c7:2b:
                    0c:ee:0d:1f:fc:8f:21:3f:f9:52:3e:af:03:39:e3:
                    f8:00:ea:59:7a:c7:e6:55:ff:b4:f4:8a:da:8f:f4:
                    54:89:47:b0:2e:71:69:e3:6b:ae:22:e1:2a:b1:4e:
                    7a:c0:70:ad:a8:b3:ee:06:85:b7:fe:6e:53:0d:55:
                    c8:7d:0a:0e:49:69:4d:e6:32:9f:08:59:18:87:ae:
                    5b:17:56:bb:9b:0f:5a:93:99:6c:96:bb:8f:1a:05:
                    08:13:db:e3:65:4a:11:5f:b8:15:8c:02:3a:24:d3:
                    d0:d6:70:0f:f0:f5:75:1e:1d:4c:7e:cc:81:09:96:
                    3e:62:e7:6f:b1:80:c1:df:f7:2a:5f:26:60:e8:3c:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B9:9F:26:80:5F:E0:7B:F4:AF:04:17:92:02:33:6F:EC:F8:F7:2F
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:65:10:5a:43:7e:4c:1e:0d:8f:0f:9a:08:e7:cf:91:86:
         8d:52:8b:48:27:47:58:c4:8d:78:10:f2:05:53:ad:87:c4:6b:
         7b:de:76:fc:73:3c:fd:28:84:e4:73:28:39:57:85:62:c1:00:
         15:c1:cf:82:78:e4:5f:89:26:72:57:43:a8:0a:f5:45:1c:1c:
         84:7e:a0:69:2d:7b:4b:56:b1:60:10:17:1c:a3:ac:f5:38:9e:
         c3:a7:b5:f6:a9:0a:50:ef:ab:c3:30:58:b9:dc:b1:d7:6f:38:
         04:d7:5a:1f:14:56:c2:5d:e1:1b:52:d5:6e:0c:9b:92:39:4e:
         50:1e:08:57:fb:b2:32:1c:4b:ac:aa:58:b0:6c:75:38:f6:06:
         0e:ef:36:a3:90:ff:d9:90:b6:d3:96:59:6b:b0:e4:71:47:c7:
         14:69:e0:1c:fc:f5:32:98:03:61:0e:58:ac:b4:26:8e:2c:45:
         82:6e:07:4e:41:55:ff:bf:bd:17:30:e4:a4:f8:3e:0e:7f:2c:
         bf:74:9d:0f:12:c8:77:cc:29:b7:d5:89:35:5c:0f:24:0f:6c:
         d6:ae:6d:20:be:27:0f:69:6d:90:73:1a:22:37:48:51:e7:ed:
         df:7c:7f:84:4d:59:c6:29:63:c0:c1:92:b4:4b:dd:0c:ed:ba:
         17:24:79:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:34 2025 by rpki-client