Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa
File:                     323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa (raw, json)
Hash identifier:          b/mpwQhmqHQ+OFHeXupf+bBsgKxJtZGzN0wQbv+ywDM=
Subject key identifier:   00:F2:AF:7C:8F:53:6A:5B:F4:68:75:86:47:A4:C4:29:0A:4C:09:54
Certificate issuer:       /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
Certificate serial:       1BED91934CC1B549F32670ADC24301804D08C2ED
Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa
Signing time:             Tue 05 Mar 2024 18:04:20 +0000
ROA not before:           Tue 05 Mar 2024 17:59:20 +0000
ROA not after:            Tue 04 Mar 2025 18:04:20 +0000
asID:                     273072
IP address blocks:        2803:cf90:e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ed:91:93:4c:c1:b5:49:f3:26:70:ad:c2:43:01:80:4d:08:c2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A
        Validity
            Not Before: Mar  5 17:59:20 2024 GMT
            Not After : Mar  4 18:04:20 2025 GMT
        Subject: CN=00F2AF7C8F536A5BF468758647A4C4290A4C0954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:35:c6:d8:4d:9a:eb:a8:51:81:47:c4:24:
                    02:41:74:54:bc:49:c6:7d:0b:3e:7d:de:4a:df:9a:
                    31:7c:88:3a:47:0a:44:27:64:45:b5:73:8a:83:0f:
                    8f:4c:59:d0:75:f2:13:83:80:4b:14:61:5d:0a:32:
                    65:7b:39:bc:67:56:2e:00:b7:a6:96:65:c1:22:46:
                    01:ac:34:27:a5:dd:f5:81:af:9b:07:46:29:c1:a3:
                    a2:e6:b8:6e:38:82:5c:b3:02:fe:0e:1b:42:2c:12:
                    3e:9f:be:01:26:ba:45:1b:7e:07:f3:77:1f:25:b0:
                    aa:dc:87:c6:a2:e8:23:f6:8a:5d:f4:cd:73:dd:98:
                    c8:96:9e:36:a6:47:33:d5:22:d8:b4:7c:b8:4c:bb:
                    dd:7c:a6:d9:67:de:7d:7b:07:70:f8:4c:c3:37:98:
                    75:b1:45:72:2e:1f:5a:b2:dd:11:be:e0:cc:d5:e0:
                    83:74:4b:9a:53:88:8c:7d:f1:e7:45:d4:aa:93:bc:
                    62:c4:1b:7a:00:76:5b:79:c0:c4:c2:ce:22:ac:e3:
                    92:88:45:f7:21:90:32:eb:3a:d9:ff:2a:98:97:8a:
                    6c:f5:1e:be:4a:fa:fb:9a:fc:28:ca:46:d4:5a:96:
                    da:e5:c0:18:47:29:39:49:e6:75:6f:ca:24:68:ec:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:AF:7C:8F:53:6A:5B:F4:68:75:86:47:A4:C4:29:0A:4C:09:54
            X509v3 Authority Key Identifier:
                keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a6530303a3a2f34302d3438203d3e20323733303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:ad:63:ad:bb:00:86:4a:2e:d9:4f:bd:ba:ab:a1:6b:c1:
         7d:55:eb:61:cd:83:0a:2a:ef:48:5a:c2:a2:d3:0a:f0:70:77:
         2e:51:bf:37:a0:a3:8e:cf:30:5e:ac:0d:70:49:97:cd:ee:29:
         fb:3f:91:62:4c:5f:17:6a:a8:66:fa:6f:0b:6e:16:cd:d0:1b:
         be:a4:51:13:53:48:dd:b3:fe:d6:93:be:80:21:8c:cb:22:30:
         16:5c:69:f7:4d:07:63:20:d3:67:43:c3:65:ac:c4:89:4f:d8:
         b5:19:c8:14:29:60:e9:05:6a:71:43:f2:58:57:dc:ce:e7:39:
         5f:b0:1f:d2:97:6c:04:48:ec:e7:99:84:22:c1:1d:ea:c1:69:
         5e:d6:1b:60:81:e1:ea:43:41:a7:1d:7e:8c:ea:f0:23:2a:3e:
         a4:48:e7:7b:00:22:96:56:28:63:cf:62:af:37:14:9f:88:33:
         97:a1:ad:55:ee:e5:12:9d:8c:a8:a6:92:e5:a4:d7:c7:c7:df:
         a7:1a:4a:b1:fe:40:29:1d:58:5b:08:c7:4a:2e:89:2e:31:b7:
         d0:16:97:8b:ff:8a:91:b4:40:a6:42:38:4a:ee:5b:32:27:6b:
         78:f5:fe:dc:d6:48:a7:5a:55:c4:72:af:4f:4a:7c:88:5f:17:
         c7:3e:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org