Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          A//sftzid7/sV2DM7ZU4cELxc/RdaJZ4KBHaVcQlOYg=
Subject key identifier:   FD:5E:2B:AE:F2:37:17:27:2B:6E:4B:3D:76:CC:E4:42:CE:B5:90:9B
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       35EC14D502844743423FB872CC93370AFB832C6C
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:19 +0000
ROA not before:           Tue 05 Mar 2024 17:59:19 +0000
ROA not after:            Tue 04 Mar 2025 18:04:19 +0000
asID:                     273072
IP address blocks:        2803:cf90:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:14:d5:02:84:47:43:42:3f:b8:72:cc:93:37:0a:fb:83:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:19 2024 GMT
            Not After : Mar  4 18:04:19 2025 GMT
        Subject: CN=FD5E2BAEF23717272B6E4B3D76CCE442CEB5909B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:d9:d5:87:3b:82:76:ab:4c:01:d6:16:01:
                    54:8e:e5:f0:93:d3:04:4c:2f:f6:5a:f0:51:c0:df:
                    1b:e7:1f:91:f4:2d:09:8c:56:ff:d0:22:b8:b8:32:
                    34:81:e1:1c:63:04:65:39:89:48:62:81:6c:16:8d:
                    c9:3f:ff:72:7a:63:5f:00:ad:c9:e2:6d:8c:6b:60:
                    be:29:e9:15:1e:1d:a5:3c:e0:5f:f3:9c:00:56:8e:
                    60:10:9a:8f:ae:ee:a8:b2:dd:79:4a:34:e6:0c:9a:
                    68:c8:62:5d:ad:c4:a6:2a:cb:42:37:95:3e:b3:14:
                    bb:34:3f:89:6e:d0:ad:9b:2d:a0:aa:96:b3:a1:0a:
                    a5:2a:04:38:01:3f:e6:6c:00:c2:c2:66:5c:6d:04:
                    56:8e:4c:91:22:52:1b:cd:72:65:ac:b9:27:86:9c:
                    dd:09:69:72:89:7e:86:ed:53:d1:ed:73:ae:8c:c2:
                    a7:91:a2:70:f0:59:69:20:9a:a0:72:46:80:6b:91:
                    ce:bc:8d:a7:07:eb:e7:2d:d8:b5:cb:c3:9d:23:5a:
                    27:65:0f:8a:b1:a4:35:d1:d0:aa:f1:5a:8e:e6:06:
                    84:b9:47:04:39:d6:d5:ec:c4:61:cd:d6:1b:23:d1:
                    40:1f:77:b9:21:1a:01:23:ad:93:b3:bd:2f:c6:28:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:2B:AE:F2:37:17:27:2B:6E:4B:3D:76:CC:E4:42:CE:B5:90:9B
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3830303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:16:72:c4:39:0f:ca:d5:08:45:d9:02:f9:cc:c1:75:c6:
         6f:73:52:f8:dd:fe:9e:a8:73:a8:76:90:cc:86:af:ff:12:13:
         c3:9b:d2:6f:fb:a4:77:67:d8:b7:dc:b0:cf:dd:a7:e9:41:c0:
         7d:c7:b5:68:8f:38:b3:8e:00:7f:d3:72:8f:4d:7d:1d:44:36:
         0e:f1:38:60:55:fb:3f:09:46:e1:eb:3e:b6:ee:1f:ff:eb:34:
         9e:ed:51:b9:a9:f1:2a:58:d1:3b:b3:0e:b6:d2:39:e8:78:fe:
         21:6f:16:dc:3e:bc:72:b1:12:a7:af:28:f9:ee:f1:df:11:21:
         83:f9:53:9b:12:84:68:ae:94:79:52:22:00:59:59:52:54:1e:
         3e:66:03:d9:d2:af:02:95:b6:e4:08:2c:70:10:26:75:18:ea:
         e8:48:59:15:1a:b0:61:f3:0f:c0:e2:17:a7:6e:2d:a0:5b:40:
         76:6e:04:bf:f3:ee:5e:4d:70:54:8b:80:98:e9:f1:ee:1d:77:
         02:b7:e1:3a:48:6e:e8:32:6e:8c:cc:6c:74:41:3b:fa:92:2d:
         5d:61:3c:35:a7:27:fe:e2:a8:cf:4d:bb:40:64:64:44:5b:96:
         d8:21:fd:94:6b:07:57:33:2a:fe:ea:b1:85:52:9c:99:c9:d0:
         08:03:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org