Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          s+GnjsTV8z2C/ChJU3TcftiaqW85UhBHsmhbMSXruAg=
Subject key identifier:   97:27:7F:39:2C:C5:0B:6C:6E:8C:C0:9F:F9:68:2A:80:19:F7:6A:C8
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       24552A6CCF74C3474DEC3CDDD58153B7DA7EDFFA
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     273072
IP address blocks:        2803:cf90:4e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:2a:6c:cf:74:c3:47:4d:ec:3c:dd:d5:81:53:b7:da:7e:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=97277F392CC50B6C6E8CC09FF9682A8019F76AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:96:c7:7b:47:46:c2:87:79:8c:eb:b7:c3:
                    78:20:09:af:1c:51:5a:b6:46:05:2f:e1:29:4d:18:
                    26:f8:c4:e6:29:e1:65:ae:6d:cf:a8:43:7f:b7:4d:
                    c0:9b:ef:f6:e2:54:f0:24:a6:18:97:b6:a2:33:cc:
                    b5:e1:1c:de:0c:d7:20:8c:c9:d3:01:f0:2a:1d:91:
                    1e:fa:bd:eb:93:89:bd:26:b7:70:e1:1d:63:f7:1b:
                    7f:40:fa:86:61:e7:fe:ad:50:5f:74:26:d2:a2:1a:
                    b8:3e:04:46:c6:bb:11:61:75:6c:29:7d:73:ca:6b:
                    a1:b5:b0:b8:7c:56:2a:ec:b8:89:b7:05:cd:f7:f4:
                    26:9e:4e:a4:0f:48:cd:7b:b2:01:dc:f9:55:eb:46:
                    1f:79:7e:5c:79:dd:db:9f:5b:ea:a9:1a:88:72:fa:
                    d5:42:fd:c8:5a:16:c6:ab:44:cb:dc:42:65:12:71:
                    61:56:8d:2a:7f:df:9c:2c:e3:f4:e2:a9:6d:07:d4:
                    dc:76:b8:58:fc:0e:62:01:0b:c2:bd:73:23:0f:a9:
                    e4:8d:37:29:63:56:62:90:fb:f2:ae:51:d5:87:f3:
                    c1:ea:e1:cb:d9:ad:03:10:16:bc:a2:fc:47:25:59:
                    e6:35:60:1f:f9:bf:6a:53:07:a7:0a:59:5f:fb:01:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:27:7F:39:2C:C5:0B:6C:6E:8C:C0:9F:F9:68:2A:80:19:F7:6A:C8
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a346530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:47:54:96:59:0b:9b:e5:13:8f:01:1e:8b:19:0c:ea:fb:
         71:eb:f5:7c:1f:ef:aa:6c:05:ea:d9:5e:3e:2b:20:49:bf:b8:
         06:e8:de:1b:6a:cf:75:71:3d:cc:e7:67:50:4a:9d:49:80:fa:
         7b:1b:84:65:28:cf:0f:26:cb:4d:be:6d:9b:54:de:31:81:92:
         47:8c:c8:f7:c7:aa:0e:53:54:8e:88:50:bc:11:e1:e2:52:e8:
         d9:ad:52:69:9f:a6:c5:34:2c:c5:b5:cf:78:93:75:27:40:7c:
         e4:3b:c9:88:30:b0:71:e8:9d:b7:a9:74:1c:3d:3e:b6:38:62:
         40:bc:4c:50:08:d5:f1:23:6b:a4:10:7d:20:d0:7e:a8:f5:e0:
         07:12:1c:8c:3e:c6:d5:a9:0c:4d:1e:f1:45:1a:c7:45:8e:5b:
         7f:b6:3d:d0:3e:07:88:be:ed:20:60:31:e2:83:43:9b:ab:ea:
         5a:e9:8d:d8:b8:20:92:92:83:4f:85:22:d5:25:6f:22:d8:7f:
         b5:3a:e8:09:72:5c:0c:ad:cb:b7:c9:60:c7:2d:97:03:a3:b6:
         4a:4b:f0:66:7f:d8:65:4c:f0:0e:da:61:1d:03:af:d9:29:b3:
         64:3a:11:a7:26:57:82:62:ec:2e:3d:9b:ee:e8:bc:91:5c:f9:
         f8:13:58:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org