Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          Zb43OgWPDOfjVBGFfa8tWs8OqXGSe1x1tYNrDV7eC4M=
Subject key identifier:   88:FB:FB:92:93:92:44:BE:18:D3:94:92:AF:42:F0:79:08:9E:AA:37
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       5E0013E7274A0AC50D505CB8E0A5704533FA0A92
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:11 +0000
ROA not before:           Tue 05 Mar 2024 17:59:11 +0000
ROA not after:            Tue 04 Mar 2025 18:04:11 +0000
asID:                     273072
IP address blocks:        2803:cf90:400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:00:13:e7:27:4a:0a:c5:0d:50:5c:b8:e0:a5:70:45:33:fa:0a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:11 2024 GMT
            Not After : Mar  4 18:04:11 2025 GMT
        Subject: CN=88FBFB92939244BE18D39492AF42F079089EAA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:87:5a:83:0d:7c:37:45:64:ce:1f:20:b3:
                    78:68:3d:65:6c:82:17:d0:04:1d:a3:ce:62:3c:5d:
                    27:80:a6:1f:45:d2:0a:79:de:ec:4c:59:92:2a:4d:
                    03:b9:e4:a2:0d:21:de:65:a0:d7:a8:56:b8:ac:d3:
                    8e:d9:62:b7:8f:88:33:64:04:a6:b0:97:ed:67:bd:
                    31:e1:b3:1e:91:59:40:5d:c3:6f:f6:88:78:e5:ba:
                    d9:cd:7f:89:94:c3:11:01:cf:18:7b:b7:92:b8:42:
                    78:9f:04:35:3b:2c:74:7c:c3:dc:52:90:52:88:7f:
                    e3:ed:9e:60:22:7f:36:c7:f7:88:17:4a:77:06:ac:
                    f8:1d:d1:f8:93:d8:04:7b:f4:0a:73:c2:8e:cb:01:
                    be:55:d4:c6:c6:71:66:68:13:e0:68:f3:a4:08:94:
                    b5:dd:09:35:19:62:4b:6f:02:b0:d0:0f:5f:e2:a9:
                    f4:29:54:95:d8:c5:83:cc:e5:37:ab:80:a8:7a:dc:
                    37:95:ef:ba:9f:5c:0a:b6:99:19:69:0e:bd:26:4f:
                    46:f3:b3:c3:19:87:ec:e9:14:d8:2d:f5:a0:bb:24:
                    42:76:77:64:79:84:b4:e8:d0:13:48:b1:a1:fe:07:
                    b8:3a:4e:f1:6a:58:00:72:7d:9c:a2:a1:41:31:71:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:FB:92:93:92:44:BE:18:D3:94:92:AF:42:F0:79:08:9E:AA:37
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:42:fb:29:bf:dc:05:1e:da:8b:fc:32:71:85:66:18:d7:72:
         ff:30:c1:80:9a:a4:eb:73:65:29:cf:94:f7:14:4f:29:58:57:
         cb:d4:05:64:9b:04:2e:31:99:de:67:f2:eb:e3:69:83:0c:30:
         f9:06:f9:9c:17:1b:0f:62:f5:ca:8f:9c:e5:8b:32:5b:f8:1a:
         31:72:fa:ee:9a:48:a5:5d:b1:74:a8:8f:02:e4:a7:da:86:01:
         a1:72:fd:e1:32:1e:7a:3e:6c:f8:e9:37:88:e9:59:9f:ae:05:
         5d:84:81:be:45:af:92:5a:8b:a1:61:83:65:93:8d:6d:59:f3:
         4a:d5:8c:e9:78:15:6d:3b:45:d7:94:5e:e5:a1:94:3c:9e:85:
         00:c3:93:78:22:47:aa:06:b0:cc:96:12:95:64:8a:00:9a:4d:
         d4:cf:31:1b:4e:1a:ad:e7:62:79:43:20:68:75:a7:f2:de:cb:
         f7:a6:b3:aa:ef:53:39:bd:0b:98:7c:05:e6:85:bd:03:5b:21:
         50:ad:2c:b2:67:0c:e1:7a:8c:36:98:49:03:2b:55:2a:4a:fd:
         11:81:db:0a:85:86:08:1a:12:fb:91:91:17:6b:8f:9c:9f:d3:
         49:44:ec:ab:39:49:47:d6:31:fc:d4:f2:56:84:c0:d8:29:56:
         40:b8:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org