Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          ohRNDITxRh/ElASEC2xLA6ylnxJBFu9bwaU9mTWiQBY=
Subject key identifier:   12:AA:56:A7:D2:C0:B6:24:77:77:58:EE:C7:6D:A9:DB:25:D6:47:1C
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       55928EB588CEB1BD81FA68195BC34D6A6133682F
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 04 Feb 2025 19:57:31 +0000
ROA not before:           Tue 04 Feb 2025 19:52:31 +0000
ROA not after:            Tue 03 Feb 2026 19:57:31 +0000
asID:                     273072
IP address blocks:        2803:cf90:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:8e:b5:88:ce:b1:bd:81:fa:68:19:5b:c3:4d:6a:61:33:68:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Feb  4 19:52:31 2025 GMT
            Not After : Feb  3 19:57:31 2026 GMT
        Subject: CN=12AA56A7D2C0B624777758EEC76DA9DB25D6471C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:b9:b5:5d:65:d0:e1:fc:9a:53:dc:b8:5b:
                    e5:41:7a:16:6d:a2:c6:ce:24:a3:7a:9c:f1:7c:23:
                    6c:66:7d:3d:2c:45:27:56:6f:c2:57:98:10:5f:e1:
                    c2:1b:fa:f9:99:6b:02:b9:79:32:3a:ac:1e:72:30:
                    2c:b0:26:2d:04:70:ec:4f:ed:87:25:c4:be:c0:04:
                    f5:e6:f2:33:e2:17:4a:0c:b0:45:45:c0:0f:e4:35:
                    3f:9f:d1:16:b4:d8:d3:f4:e5:fa:63:95:d0:50:f5:
                    fe:7b:2e:d1:59:6d:27:58:ee:33:b8:42:64:9a:51:
                    00:0e:90:44:be:3f:30:8f:c3:b3:4f:2b:76:7e:c5:
                    f4:a8:8f:6a:91:13:1c:e3:e5:f9:a6:ed:15:03:94:
                    5b:99:3a:89:fc:6c:b2:30:90:a5:50:37:75:cb:19:
                    50:90:ba:6a:f2:c9:63:cb:22:57:fd:56:c1:1a:04:
                    8a:30:fa:99:d1:f1:e3:e4:bb:b1:90:1e:87:0b:4a:
                    b6:cd:e8:1e:6c:86:64:a9:ce:2e:2c:2f:9e:08:ee:
                    49:88:96:85:92:3a:a9:49:52:06:8a:be:08:da:21:
                    be:08:77:4a:8b:1e:14:2b:d5:44:3d:7c:47:56:68:
                    8a:7b:f2:36:0d:59:7a:73:8f:6d:c1:54:33:71:56:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AA:56:A7:D2:C0:B6:24:77:77:58:EE:C7:6D:A9:DB:25:D6:47:1C
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:76:7a:42:86:1c:9e:55:c1:35:b1:84:9a:bc:65:54:fc:56:
         82:17:50:fe:96:b6:4f:bd:f9:2a:17:70:c2:7d:64:5e:9c:e7:
         d2:e4:5a:5d:ac:1e:e3:40:65:5f:5a:2e:06:78:e6:78:17:df:
         45:3f:68:fd:97:b9:d2:21:20:f7:32:5e:c7:e8:81:23:9f:c6:
         71:f2:a4:f8:e4:be:7c:73:c8:31:ec:79:9d:42:e6:41:56:26:
         ba:56:9a:32:06:b6:ea:05:9d:dd:d7:ed:1c:9a:08:e4:4d:c2:
         b7:5f:d5:28:35:81:1c:bc:c6:15:1f:9e:94:2a:a7:26:00:d3:
         4c:50:86:1d:48:9d:4d:7d:5f:f5:b2:a7:6d:e4:d5:da:8d:2c:
         9b:de:87:cd:84:7e:6f:37:89:73:f0:99:bb:11:86:e2:16:07:
         5b:18:17:08:08:f6:bd:b2:f3:61:d0:4c:b8:5c:fe:79:00:bf:
         48:28:76:bd:08:b4:be:0b:53:0d:49:c4:38:32:69:cc:b3:bb:
         55:bc:8f:01:fe:8e:6f:68:21:e3:00:c2:63:dd:81:31:64:fa:
         cf:87:12:1b:c2:d2:8a:a9:a4:60:b0:7d:4b:df:50:05:29:66:
         26:98:56:82:1a:f1:92:50:b7:db:5f:f1:b3:40:46:b4:42:7b:
         e8:67:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:03 2025 by rpki-client