Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a346430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          3QNfGQElYwWNww9O8lgvAz5ysXL9MPt0Y6ZBIKqo77Y=
Subject key identifier:   1E:6D:A3:94:D6:44:B1:9A:0D:63:7C:3A:FF:D4:4D:56:C7:7B:E7:1A
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       11CFE7035BE437D2E7376548520431C88BFDC42C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:23 +0000
ROA not before:           Tue 04 Feb 2025 19:52:23 +0000
ROA not after:            Tue 03 Feb 2026 19:57:23 +0000
asID:                     273072
IP address blocks:        2803:cf90:4d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:e7:03:5b:e4:37:d2:e7:37:65:48:52:04:31:c8:8b:fd:c4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:23 2025 GMT
            Not After : Feb  3 19:57:23 2026 GMT
        Subject: CN=1E6DA394D644B19A0D637C3AFFD44D56C77BE71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:4c:af:a1:af:af:d0:9e:15:58:73:de:37:
                    97:04:ae:b0:89:6e:eb:d3:6f:74:c5:3b:83:6c:81:
                    3c:2a:7b:8e:3d:a2:30:bf:ba:dd:bf:2e:81:78:16:
                    b5:38:36:e9:60:be:05:92:7c:d3:9e:d9:bd:62:fb:
                    af:b6:d1:54:9c:9f:d4:40:9d:13:e5:34:0e:c8:17:
                    48:30:d9:e5:7e:e9:a1:08:17:f8:b3:70:8e:98:52:
                    f4:31:f5:fa:33:f1:ff:93:ef:39:a8:ad:ec:f8:ce:
                    b1:15:26:6d:f0:41:8c:ca:3f:31:6e:1b:bf:03:a2:
                    c6:61:7f:a5:af:73:c7:29:c4:4c:91:cb:a0:f6:13:
                    e5:6b:5e:a0:ce:88:d0:02:3a:17:e4:99:a8:48:53:
                    fc:1c:fe:21:a7:f6:7b:f3:c1:8b:49:1a:ad:09:ae:
                    c3:94:8b:21:2f:36:fd:66:91:bc:a6:d8:cf:81:69:
                    ae:d0:c7:7e:b1:34:01:35:f9:35:67:c9:10:18:35:
                    eb:52:0d:b6:af:af:85:ec:44:a2:d8:e6:68:7f:a7:
                    34:a4:4a:30:a0:2e:16:6c:4a:58:ac:e6:49:78:93:
                    38:fb:63:21:ce:7a:e1:a0:57:7d:60:38:ce:a2:84:
                    38:41:e8:8b:f8:af:66:a4:95:ef:6e:0b:87:36:22:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:A3:94:D6:44:B1:9A:0D:63:7C:3A:FF:D4:4D:56:C7:7B:E7:1A
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:5d:6a:e4:07:90:df:93:bf:d0:3a:19:c7:ba:89:89:84:
         b4:c2:e3:19:4e:0a:b1:3f:a7:77:55:4a:7f:75:b6:3f:4e:52:
         0c:ea:06:bd:0b:b5:68:8a:b7:ac:3f:dd:78:68:e3:6c:3c:ba:
         6e:a3:c1:c4:9f:24:8a:a9:2a:94:2c:0b:e8:36:15:80:f4:2c:
         7c:ce:91:40:da:6f:f0:c5:8a:fb:69:f0:1c:fa:86:82:ab:3d:
         22:b1:73:b5:d6:ac:6e:2c:21:9f:17:d0:ac:fe:66:3f:b9:a6:
         17:09:84:5e:f3:53:58:94:c2:c0:fc:d4:1a:e1:00:9c:ec:9f:
         11:1d:7e:27:3e:46:aa:91:80:29:1f:a5:38:98:55:8b:e5:96:
         93:8b:00:39:8e:c5:51:a5:4d:69:6e:46:d3:33:ba:ed:42:5a:
         46:64:3c:35:3f:e9:37:7d:f7:07:b9:20:93:ae:cd:a7:f2:c8:
         c6:dd:d9:b0:8e:90:98:eb:0b:6b:1c:91:fa:9b:94:00:96:01:
         ae:a7:0a:07:b4:6a:c6:be:78:94:ed:87:70:39:14:b4:8c:79:
         e1:3a:bc:fe:0e:b2:55:69:6e:2c:44:58:26:14:2e:3e:29:4b:
         de:0e:b0:c7:45:a9:f4:88:ed:2d:96:43:cc:cc:fd:6a:f8:10:
         35:e4:9a:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:01 2025 by rpki-client