Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          MNQa3rQM95WSI0fZKZLUIFoTgtCHG5DaIOivGPOCnaE=
Subject key identifier:   B1:77:40:3F:CA:8A:A9:1C:00:48:2C:93:1E:D4:70:8F:2A:00:33:C9
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       3C1E89B05CC61ACDA59ECEEA0D019645DDB8C3B3
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:13 +0000
ROA not before:           Tue 05 Mar 2024 17:59:13 +0000
ROA not after:            Tue 04 Mar 2025 18:04:13 +0000
asID:                     273072
IP address blocks:        2803:cf90:700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1e:89:b0:5c:c6:1a:cd:a5:9e:ce:ea:0d:01:96:45:dd:b8:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:13 2024 GMT
            Not After : Mar  4 18:04:13 2025 GMT
        Subject: CN=B177403FCA8AA91C00482C931ED4708F2A0033C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:a8:d7:77:54:bd:ef:14:75:67:08:38:01:
                    b9:f6:fd:7a:aa:d5:18:1e:82:f5:f5:8d:7d:52:ac:
                    3b:d6:c6:70:e7:07:ed:f5:45:5b:2f:66:37:ae:5c:
                    47:a9:08:83:6e:93:70:10:ae:57:5e:80:8f:a4:0b:
                    73:cf:12:a1:58:d8:33:6c:34:72:37:31:e8:20:e8:
                    04:05:cd:ee:12:9d:37:e8:84:4a:e5:7f:bc:95:00:
                    52:a4:c4:b6:84:f7:09:f9:a8:87:9f:83:e9:7c:f6:
                    06:74:f2:ab:c0:d8:87:9e:7f:b4:38:a5:60:61:a3:
                    28:ec:b1:79:da:e4:7a:99:df:5b:d4:37:ff:52:37:
                    94:cc:2f:f8:7f:a9:9c:42:f5:75:a8:8b:7e:f6:32:
                    ed:17:8c:50:79:d1:ad:bb:0e:38:24:18:f6:04:ed:
                    f1:06:f9:a1:8f:67:95:c7:23:84:84:90:21:8f:df:
                    ee:a8:a8:3f:22:c3:72:d0:ad:7c:64:18:4a:f6:b9:
                    85:8f:3b:49:8d:db:25:86:47:89:32:d0:c2:c6:7a:
                    2a:a6:01:36:27:be:50:91:eb:89:92:27:86:8a:71:
                    8d:c6:8f:27:7f:ef:03:57:a9:cc:37:07:c2:1d:3a:
                    aa:38:5c:d1:bb:4b:f7:d1:a8:f0:a6:3f:9c:94:b8:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:40:3F:CA:8A:A9:1C:00:48:2C:93:1E:D4:70:8F:2A:00:33:C9
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3730303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:30:0c:4e:0f:7f:05:b8:2d:64:af:70:d7:2a:2e:f0:8a:
         e8:87:34:c1:55:36:70:ac:10:fc:d3:7d:3f:7c:b3:64:f6:a7:
         32:1f:53:95:60:eb:3f:b4:85:3d:6d:74:ac:31:a5:da:62:dc:
         9c:2f:5a:cc:65:6b:17:da:22:dd:0e:95:a3:0d:9a:d4:0f:a5:
         05:0c:46:bd:07:bf:9d:95:1c:1a:26:57:d6:d8:61:c6:74:13:
         ee:98:6a:52:eb:39:f5:f1:c8:4b:36:0f:d1:34:54:7f:9c:cd:
         41:bc:c2:2f:48:05:56:cb:f7:8e:d0:eb:6c:5a:91:3b:97:1b:
         14:18:3b:65:2b:27:b3:10:ee:ca:a1:63:83:7c:f4:32:ff:13:
         cd:51:a3:9c:24:28:68:a3:32:e2:9c:31:a9:d3:bf:87:ca:e8:
         63:54:1f:2b:3f:c9:88:f5:bb:c9:90:69:3b:75:48:0f:57:82:
         a1:5f:08:27:c7:8e:24:55:41:75:a6:10:ff:fb:4f:c1:32:c4:
         59:96:db:1f:90:f3:9c:99:7a:c5:2c:8e:b3:91:50:ab:40:e1:
         0e:32:12:c7:1f:c6:00:39:f6:df:d7:d1:e7:d1:24:61:cb:8c:
         20:de:f0:56:27:a9:54:eb:41:9d:c2:39:6c:b6:b8:1e:a4:ab:
         95:de:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org