Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          jAdRRVgDj4JV8ZTSbg5kdJUe8dQprUEInKsTxQGKeOw=
Subject key identifier:   EF:B7:F1:40:90:50:5E:D1:41:66:8E:6B:79:FD:06:05:93:0C:0E:B6
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       3358FC3AD3B2D6C416A0F48AEEC4CA9DC01304D5
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:22 +0000
ROA not before:           Tue 04 Feb 2025 19:52:22 +0000
ROA not after:            Tue 03 Feb 2026 19:57:22 +0000
asID:                     273072
IP address blocks:        2803:cf90::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:58:fc:3a:d3:b2:d6:c4:16:a0:f4:8a:ee:c4:ca:9d:c0:13:04:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:22 2025 GMT
            Not After : Feb  3 19:57:22 2026 GMT
        Subject: CN=EFB7F14090505ED141668E6B79FD0605930C0EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:16:a8:6b:48:7c:69:f9:4f:97:1c:15:38:
                    fa:20:29:73:0d:87:a6:a4:d0:d5:a2:20:1b:21:17:
                    2f:49:f1:5c:3a:aa:a1:ea:e7:4f:00:c4:11:ef:8c:
                    81:62:a1:3b:b1:e3:8b:37:16:2c:ed:ff:f2:9b:93:
                    83:55:d8:d3:60:79:63:4a:0f:73:88:c0:9a:20:d5:
                    e3:c5:e6:c0:27:30:6b:ea:bb:29:d6:4b:64:ad:6f:
                    91:a2:f7:55:3a:96:85:56:cc:0d:84:29:8c:9d:04:
                    84:8f:b4:64:2a:72:98:08:f2:5e:be:f8:82:8f:ef:
                    e1:b6:56:ff:60:d6:23:07:da:11:da:64:83:d3:f7:
                    03:18:1b:f9:52:f1:87:26:a8:80:65:62:63:fe:53:
                    5b:22:b3:a2:12:42:3e:c8:d8:0b:90:59:45:01:b5:
                    bc:a2:76:93:b6:98:48:da:bc:5a:38:52:a6:57:83:
                    ed:4e:19:66:45:7d:4d:9c:66:2f:73:3d:cc:13:55:
                    3e:2a:8f:dc:a0:f1:bc:18:1c:e3:c8:17:73:46:ff:
                    52:84:16:f8:fb:68:e2:df:7b:ae:d6:97:af:0f:76:
                    79:4c:c2:ed:fc:a0:12:70:4b:31:8c:4b:19:eb:a0:
                    18:4f:d2:83:10:11:01:48:b0:6b:bc:70:fd:27:0c:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:F1:40:90:50:5E:D1:41:66:8E:6B:79:FD:06:05:93:0C:0E:B6
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:70:1f:68:c6:a2:c0:aa:01:89:dc:aa:d9:49:0c:50:9c:10:
         14:82:94:bf:b7:d4:4b:34:bf:ea:2a:07:07:16:4d:47:4a:e8:
         71:6a:f6:39:5c:c4:5c:07:48:e5:41:a3:10:cc:64:f7:72:b3:
         59:ee:c0:2a:73:16:2c:ba:00:bd:ad:98:60:ee:25:af:62:75:
         6d:2b:03:66:5d:6f:a9:30:93:a9:05:68:7e:f7:85:04:31:a3:
         e3:e2:67:9c:e0:54:b6:c5:14:09:93:e8:18:64:fa:48:9f:67:
         41:1e:1b:dc:f8:66:d9:d1:5a:25:41:41:a8:85:33:45:a4:b5:
         e1:9a:f4:28:9e:04:62:42:28:bb:17:a8:3f:7a:b3:9f:60:ca:
         33:1b:12:a7:7e:9b:1f:2c:17:42:56:f4:fa:4d:22:20:94:9b:
         cb:24:0e:f6:63:44:0b:54:07:ef:d1:bd:5f:c9:1a:b9:a3:fd:
         4d:98:55:33:ac:79:e6:57:c1:7d:31:46:6a:8c:bd:bb:14:27:
         67:de:df:90:19:03:88:a5:b0:b6:23:8d:e3:2e:42:dd:cc:6b:
         9d:0f:20:68:7b:e0:4b:d3:25:66:78:83:84:05:51:2f:ff:78:
         aa:6e:d2:86:80:d1:f2:70:5f:1f:ef:b8:6c:eb:db:2d:6a:e7:
         4b:02:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:52 2025 by rpki-client