Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          1pu/OrEY86tBf3SUvnvycBt8J8gC+TA1JIPCXqdo18M=
Subject key identifier:   A7:15:8F:C8:AF:72:2F:58:D9:3F:F9:3D:4D:8B:EE:71:2F:0D:57:FD
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       645FFB5D4773D92CABB648FB3A3F54715D2031B3
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:40 +0000
ROA not before:           Tue 04 Feb 2025 19:52:40 +0000
ROA not after:            Tue 03 Feb 2026 19:57:40 +0000
asID:                     273072
IP address blocks:        2803:cf90:4100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 00:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5f:fb:5d:47:73:d9:2c:ab:b6:48:fb:3a:3f:54:71:5d:20:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:40 2025 GMT
            Not After : Feb  3 19:57:40 2026 GMT
        Subject: CN=A7158FC8AF722F58D93FF93D4D8BEE712F0D57FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:e3:a4:2a:3b:9b:2d:e1:b9:d0:77:6d:ae:
                    79:67:43:4a:c5:09:02:75:e8:6c:81:c7:fb:8e:78:
                    3a:80:5a:1c:72:40:4c:0b:4a:cd:e6:ff:95:86:e5:
                    b9:a7:78:1a:9f:6c:f1:5f:97:12:af:32:91:ad:ea:
                    34:3e:7c:78:12:d6:a5:e9:83:a2:17:64:ee:4d:cd:
                    2f:56:ed:22:e6:3a:31:04:04:3c:bb:f4:d2:9f:25:
                    b8:f5:17:24:fc:5f:93:8a:6f:e7:a8:3e:77:52:84:
                    c4:c7:30:12:d6:4e:f7:8c:1b:cd:66:73:51:43:e0:
                    2e:67:d6:7d:fd:54:86:a1:85:3c:b3:7b:bf:d5:79:
                    86:11:97:87:a6:54:88:3b:56:6e:42:d7:b5:04:56:
                    06:b0:dd:78:d6:48:b2:db:a5:87:61:d2:7d:10:89:
                    e2:20:e8:1d:94:c9:22:56:c4:5f:60:bf:c8:b3:62:
                    75:04:48:04:99:ce:0a:62:64:e1:d7:8b:1b:72:3d:
                    f8:e0:a6:95:1c:f4:c8:5e:6c:a0:77:eb:98:a1:b6:
                    38:e4:3e:c1:d8:d0:ed:4a:a7:89:03:c3:e6:15:ff:
                    9e:39:8a:cf:63:c5:9e:b1:86:16:3c:5e:c6:5e:9d:
                    a2:6f:36:7e:ef:6a:90:e4:6e:a7:2c:d3:8a:df:9a:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:8F:C8:AF:72:2F:58:D9:3F:F9:3D:4D:8B:EE:71:2F:0D:57:FD
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343130303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:31:b6:f1:75:26:cd:1a:4d:96:68:cf:11:3d:7c:bc:c4:
         ee:01:59:96:d3:b2:39:32:d1:fe:f1:c4:d9:3a:68:0a:27:b6:
         00:83:2f:b6:57:81:61:9b:ee:ab:28:aa:a1:36:0a:38:6b:e5:
         19:ce:be:1b:d0:cc:e3:68:19:e8:b1:13:a9:e9:da:97:21:23:
         0b:c7:14:fa:4d:69:f4:35:b7:6d:a2:28:ec:f0:3b:cf:64:75:
         6e:11:6b:81:cc:b8:ce:2d:62:06:34:cd:4d:eb:b9:d2:37:df:
         eb:c0:2d:ac:1f:26:6a:fd:26:6b:75:0e:ae:18:85:09:46:f5:
         d2:0b:ba:32:e6:8e:a1:6f:35:5b:02:cc:39:2a:ca:b4:39:c5:
         1d:2d:83:d6:91:4e:4d:c2:01:af:98:6d:a0:9c:20:11:9b:cb:
         20:ee:9b:45:35:c7:04:80:2f:3f:34:f0:60:51:40:e5:92:59:
         b7:c4:41:da:b5:17:e4:3a:79:40:db:11:e9:9e:e6:f0:ff:0b:
         73:b8:7f:6d:12:d7:0d:c7:a4:e0:43:b6:7d:ac:a3:96:cd:3a:
         44:24:5c:52:2a:81:ec:cb:34:1c:4e:76:89:5b:5d:a7:9b:d4:
         3b:cb:ff:24:81:90:06:ad:de:4a:b5:e8:82:b9:4a:17:05:e4:
         97:5c:2c:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 00:39:12 2025 by rpki-client