Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          XWcyJpK88xzyclZ6udH8x+p6ZE678ooOQ6UwNKQALa0=
Subject key identifier:   6E:F2:28:44:A7:2A:6B:DB:23:1D:2D:D1:74:C4:27:36:32:08:FD:1A
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       7A2311264AB060E3C2A13B029C73DC95F3E1437F
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:21 +0000
ROA not before:           Tue 04 Feb 2025 19:52:21 +0000
ROA not after:            Tue 03 Feb 2026 19:57:21 +0000
asID:                     273072
IP address blocks:        2803:cf90:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:23:11:26:4a:b0:60:e3:c2:a1:3b:02:9c:73:dc:95:f3:e1:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:21 2025 GMT
            Not After : Feb  3 19:57:21 2026 GMT
        Subject: CN=6EF22844A72A6BDB231D2DD174C427363208FD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:c8:7c:73:92:88:d5:f6:a0:2d:fd:98:10:
                    6c:c7:a4:76:3f:8c:bf:31:48:a7:9d:41:3b:a3:92:
                    31:0d:27:6b:37:1a:0f:e0:e9:26:8c:8e:ea:8d:97:
                    90:34:f3:d7:47:34:bb:ea:9e:87:29:f6:34:11:af:
                    09:a2:fc:44:72:e1:5e:62:34:8d:a2:7f:70:26:75:
                    44:f4:f1:f7:c9:15:b3:a1:79:90:cd:02:42:7b:06:
                    9d:6a:f2:b2:38:30:22:59:6f:9b:c9:3a:4f:40:c5:
                    c8:41:ac:1b:3d:3d:39:1e:ac:09:d8:29:01:c3:2d:
                    94:ae:f7:0a:11:1e:22:c7:51:d6:23:13:9f:96:a5:
                    b6:96:d7:2c:8c:1b:88:c2:52:a1:3b:89:21:78:02:
                    d3:f1:4c:c8:ef:e6:88:ce:86:5b:b6:b6:8a:e5:6a:
                    30:ec:fe:9f:48:7b:4d:77:58:d5:e0:21:bb:15:2a:
                    33:ea:8e:69:28:17:c3:f2:6a:33:a1:73:7e:5e:1c:
                    76:63:40:38:df:7f:78:1f:54:f1:80:5f:bd:cc:74:
                    f9:56:61:da:af:72:05:e5:a3:5f:61:41:6f:01:05:
                    b2:2f:21:b3:8a:80:34:da:eb:31:a6:cc:dc:64:bf:
                    98:5b:6a:19:fc:ff:d6:df:d3:6e:8e:80:c3:cf:5c:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:28:44:A7:2A:6B:DB:23:1D:2D:D1:74:C4:27:36:32:08:FD:1A
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6430303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:cb:35:8c:0b:fb:52:5e:b3:08:60:c6:b8:4c:fd:a1:ba:
         79:ad:61:b7:33:47:92:03:30:e0:cf:5a:02:0f:31:12:e7:c1:
         a9:f2:0d:5d:4b:73:6a:ea:c9:42:c7:0d:5a:44:e2:0d:da:17:
         bb:de:b3:31:74:09:b6:d9:cd:c2:24:b0:5d:7a:ab:2a:ae:33:
         00:46:0b:17:4c:47:2a:4c:17:67:3d:ff:22:a8:3b:ed:21:e0:
         20:83:e0:22:16:e5:82:93:9e:3b:9c:54:19:35:61:cb:79:ca:
         c5:69:68:a8:03:98:19:d7:0d:67:65:46:e2:32:27:33:7d:99:
         7b:ad:a1:08:9e:42:49:fa:8c:31:45:1d:c6:4e:69:89:d1:d7:
         1f:b1:24:e8:44:a6:b0:94:fe:a3:0c:5d:9d:51:99:20:9f:5c:
         f9:3e:bc:af:23:42:4f:0a:bf:49:6e:1d:b6:40:de:82:a9:5a:
         28:e0:4b:0c:cf:54:3f:c0:b3:99:20:66:8a:ca:d4:ad:f6:fc:
         77:27:cd:90:57:a7:73:07:60:80:af:10:46:28:5c:80:24:c3:
         1b:e3:32:68:db:b6:d6:dc:01:81:34:e2:5e:19:60:f4:b5:82:
         20:96:a8:ba:98:a1:6f:e3:95:2b:ad:d4:f0:34:aa:76:1a:ec:
         81:fc:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:47 2025 by rpki-client