Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          yWF5Ft+sRVvszBLqvu8F2o9O3UMWqxz6FcRVdwoZoy0=
Subject key identifier:   D1:08:93:60:17:9C:FA:52:88:C8:35:7B:28:BA:AC:DC:60:A7:FB:33
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       0EBB3EC2A3AF7FFD9F3BE9397972455A172ECB25
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:34 +0000
ROA not before:           Tue 04 Feb 2025 19:52:34 +0000
ROA not after:            Tue 03 Feb 2026 19:57:34 +0000
asID:                     273072
IP address blocks:        2803:cf90:4500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bb:3e:c2:a3:af:7f:fd:9f:3b:e9:39:79:72:45:5a:17:2e:cb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:34 2025 GMT
            Not After : Feb  3 19:57:34 2026 GMT
        Subject: CN=D1089360179CFA5288C8357B28BAACDC60A7FB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:ff:9d:80:ce:84:22:1e:a7:be:12:9f:fc:
                    77:c8:38:83:e3:71:50:31:5e:df:99:64:2a:3f:b2:
                    63:19:b2:7a:06:a6:29:6a:8e:7e:ff:bd:14:3e:92:
                    1b:d0:f4:3f:1f:de:c8:17:70:81:16:01:00:e0:67:
                    61:0b:c1:f9:17:1d:75:fc:7f:30:bd:28:a6:76:1f:
                    af:83:19:93:2c:a0:6f:6c:eb:d9:86:f8:59:c3:18:
                    ff:c7:27:16:4f:2f:87:c0:a1:23:75:83:53:ca:ec:
                    1d:fe:4b:89:41:df:34:e2:ed:d6:d4:4b:d1:09:3c:
                    ad:cf:ae:87:dc:e6:84:a2:aa:12:44:60:a5:00:8b:
                    92:cc:1b:c3:00:b6:cf:c4:6e:c1:d7:66:e8:3f:ec:
                    b9:05:09:41:4b:4b:e6:44:9d:45:6e:04:92:2f:08:
                    b7:60:5f:a3:71:ee:12:f3:96:1b:8b:15:d3:b1:07:
                    17:07:7a:7d:f8:d5:07:8d:f7:65:30:6f:f1:2d:06:
                    e4:8d:cc:99:1f:5d:c7:c4:dd:1d:33:29:ac:a2:1e:
                    c3:e5:ce:6e:f3:a9:66:0c:23:56:a8:78:4b:5f:df:
                    c5:38:58:6a:9e:8c:8a:0f:9d:82:28:88:70:c9:8b:
                    2d:e1:71:07:76:a1:1e:8c:e8:d2:09:9c:bb:cf:bd:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:93:60:17:9C:FA:52:88:C8:35:7B:28:BA:AC:DC:60:A7:FB:33
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:22:be:9f:b0:47:a7:6e:c3:b2:15:db:f7:27:e6:48:13:2e:
         28:2e:f9:c1:b8:3c:ac:55:be:ee:fc:c8:da:d3:4b:49:f0:8b:
         cb:1d:9a:20:7b:7f:86:98:d2:48:2a:44:c0:b8:56:d4:b3:b2:
         66:ff:c6:08:6d:af:1b:93:76:4c:28:75:e4:af:36:48:80:8e:
         54:46:83:e4:e6:09:94:a7:8c:02:aa:8c:7a:2e:7e:5b:37:bb:
         c9:e0:a1:79:60:16:1f:7d:c0:8f:d2:c9:66:4c:78:c3:19:ba:
         b3:e7:ee:6b:91:dc:1d:f8:b3:ab:e2:28:c9:34:a0:1a:65:b6:
         83:2b:b6:18:3e:fa:44:eb:1d:e8:80:6e:29:3d:23:ed:e8:d0:
         c8:15:3b:42:97:11:dd:71:12:15:5f:68:a5:5c:9e:de:35:31:
         6f:38:72:d5:aa:0e:67:48:98:77:3b:03:21:b2:5c:89:b9:02:
         6f:23:93:b3:02:62:16:95:e7:c4:69:8d:5b:48:69:23:18:02:
         ce:52:35:74:81:3b:89:dd:24:64:62:12:47:d2:ae:9b:2e:d3:
         6c:00:7e:dc:66:13:9e:53:43:cc:72:15:b7:f6:71:e1:b4:dd:
         ab:4f:d9:95:1c:be:8c:53:0f:17:2a:50:42:73:fa:88:52:4d:
         4a:4e:bb:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:52 2025 by rpki-client