Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          OI4TsJXN4e18QVyf/pPmVeihfOlwe1vl4NQ2BQB4hms=
Subject key identifier:   06:F6:A5:60:95:11:AE:5E:21:3B:AF:9E:F2:76:1C:2E:68:5C:69:C1
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       58EDB90AF9F2369FF41167D23DF93E8B1FD5089E
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:41 +0000
ROA not before:           Tue 04 Feb 2025 19:52:41 +0000
ROA not after:            Tue 03 Feb 2026 19:57:41 +0000
asID:                     273072
IP address blocks:        2803:cf90:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:b9:0a:f9:f2:36:9f:f4:11:67:d2:3d:f9:3e:8b:1f:d5:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:41 2025 GMT
            Not After : Feb  3 19:57:41 2026 GMT
        Subject: CN=06F6A5609511AE5E213BAF9EF2761C2E685C69C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:ad:c8:ac:49:eb:6b:f7:24:b5:5d:94:64:
                    a3:6f:c9:e9:de:1a:d9:90:46:56:b2:9f:c0:73:64:
                    7d:66:e8:6f:fb:17:0f:0e:93:e2:83:9d:fa:b1:6a:
                    75:63:2a:9a:84:ba:f9:96:62:e8:53:e4:a7:20:c5:
                    1c:c4:33:81:ef:f4:84:eb:8e:a5:3c:4f:b0:25:6a:
                    ec:6b:88:87:df:db:0b:e1:e8:99:44:47:fc:e8:de:
                    99:24:8d:0c:ce:d2:f0:27:5e:fa:73:3c:af:08:33:
                    4a:8e:17:21:63:97:3a:65:b4:d2:5c:97:64:c5:ee:
                    e8:a9:22:29:d5:b6:f1:ed:53:7d:6b:be:92:e1:42:
                    81:83:76:5a:0c:c1:d1:57:aa:0e:21:d1:e9:31:4c:
                    fc:a2:61:c2:79:2b:c1:a4:10:6c:22:86:ed:8f:0f:
                    9f:df:af:df:14:e8:8c:9e:39:65:07:5d:6d:2c:82:
                    6c:c6:c0:fe:d5:45:91:22:7a:1d:85:70:22:11:48:
                    c2:70:8d:db:96:4a:49:16:ac:c7:69:6a:a3:f3:22:
                    7e:98:53:5b:8d:7f:57:a8:7c:5b:3d:e5:14:4e:ba:
                    5e:33:da:40:85:c6:46:b3:d8:73:a3:15:31:2a:96:
                    5a:a3:26:93:1e:6f:8f:75:ee:47:e0:de:7a:54:7b:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:A5:60:95:11:AE:5E:21:3B:AF:9E:F2:76:1C:2E:68:5C:69:C1
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:76:d4:5c:a8:12:15:dc:3a:36:00:bb:7c:cd:1d:b2:66:cd:
         b5:29:ed:4a:9f:22:da:da:f3:93:49:0a:49:db:e0:ce:f9:a3:
         46:46:61:64:11:70:c8:13:5e:0b:b9:ef:9c:e1:32:ec:29:6e:
         e6:63:aa:00:5f:f5:0e:f8:70:0c:b6:c2:88:3d:f6:15:35:87:
         41:94:3c:ab:32:38:a0:12:9c:97:dd:ac:62:ce:f6:22:e4:0e:
         9a:10:2f:67:ee:bc:15:31:98:d1:93:96:3c:a4:ad:84:33:67:
         ce:ab:d7:18:06:f9:60:1d:67:33:1b:42:b3:0c:30:44:ad:fa:
         32:ce:b7:8a:bd:4a:ab:d3:a2:65:b3:03:98:ec:65:e8:67:1c:
         14:0b:72:cb:e1:ef:0e:a8:e8:ca:3d:14:b8:20:d9:30:08:85:
         70:b3:5f:e7:fc:62:06:1d:48:07:a5:62:36:87:05:15:9e:19:
         bc:a4:4a:21:16:be:c0:98:e4:0e:9c:98:03:4a:78:e5:5a:27:
         1a:aa:b6:94:26:64:ee:6e:e2:4a:3e:9f:66:05:95:a8:06:a8:
         46:20:40:d1:56:79:3e:f8:d9:5b:9e:29:55:1a:b9:d9:25:c3:
         af:aa:38:c2:6d:22:a7:bf:04:7a:d5:8b:2c:58:d6:2a:59:42:
         29:af:3c:cd
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUWO25CvnyNp/0EWfSPfk+ix/VCJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND
NEQ1QzQxQTAeFw0yNTAyMDQxOTUyNDFaFw0yNjAyMDMxOTU3NDFaMDMxMTAvBgNV
BAMTKDA2RjZBNTYwOTUxMUFFNUUyMTNCQUY5RUYyNzYxQzJFNjg1QzY5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwtK3IrEnra/cktV2UZKNvyene
GtmQRlayn8BzZH1m6G/7Fw8Ok+KDnfqxanVjKpqEuvmWYuhT5KcgxRzEM4Hv9ITr
jqU8T7AlauxriIff2wvh6JlER/zo3pkkjQzO0vAnXvpzPK8IM0qOFyFjlzpltNJc
l2TF7uipIinVtvHtU31rvpLhQoGDdloMwdFXqg4h0ekxTPyiYcJ5K8GkEGwihu2P
D5/fr98U6IyeOWUHXW0sgmzGwP7VRZEieh2FcCIRSMJwjduWSkkWrMdpaqPzIn6Y
U1uNf1eofFs95RROul4z2kCFxkaz2HOjFTEqllqjJpMeb4917kfg3npUe9qpAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUBvalYJURrl4hO6+e8nYcLmhcacEwHwYDVR0j
BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx
QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG
RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3
NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw
MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzgz
MDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNzMzMzAzNzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPPkAgwDQYJKoZIhvcNAQELBQADggEBAFN21FyoEhXcOjYAu3zNHbJmzbUp
7UqfItra85NJCknb4M75o0ZGYWQRcMgTXgu575zhMuwpbuZjqgBf9Q74cAy2wog9
9hU1h0GUPKsyOKASnJfdrGLO9iLkDpoQL2fuvBUxmNGTljykrYQzZ86r1xgG+WAd
ZzMbQrMMMESt+jLOt4q9SqvTomWzA5jsZehnHBQLcsvh7w6o6Mo9FLgg2TAIhXCz
X+f8YgYdSAelYjaHBRWeGbykSiEWvsCY5A6cmANKeOVaJxqqtpQmZO5u4ko+n2YF
lagGqEYgQNFWeT742VueKVUaudklw6+qOMJtIqe/BHrViyxY1ipZQimvPM0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:35 2025 by rpki-client