Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa
File:                     323830333a346365303a3a2f33322d3332203d3e20323639393035.roa (raw, json)
Hash identifier:          B2WodQgUpa0yidsrFqcxAUd4TIbRdbb9VSo319XQADk=
Subject key identifier:   93:31:3E:6A:97:E7:2F:CB:9A:AF:C5:8E:53:9F:22:F1:85:35:6A:DE
Certificate issuer:       /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial:       7F474B9D40E8071817759877DA704AD2D64B0B56
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa
Signing time:             Tue 05 Mar 2024 18:21:53 +0000
ROA not before:           Tue 05 Mar 2024 18:16:53 +0000
ROA not after:            Tue 04 Mar 2025 18:21:53 +0000
asID:                     269905
IP address blocks:        2803:4ce0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:47:4b:9d:40:e8:07:18:17:75:98:77:da:70:4a:d2:d6:4b:0b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
        Validity
            Not Before: Mar  5 18:16:53 2024 GMT
            Not After : Mar  4 18:21:53 2025 GMT
        Subject: CN=93313E6A97E72FCB9AAFC58E539F22F185356ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:54:32:5d:46:97:75:6d:c6:2a:4c:a9:8b:
                    b9:af:40:fc:86:31:3f:6d:67:e3:1e:94:1a:6d:2a:
                    10:a1:b8:52:6c:45:bb:32:d7:c1:52:60:64:a5:20:
                    68:e1:0a:b4:e8:4f:7e:e7:32:4b:c5:e5:76:00:ba:
                    55:02:bf:e0:75:36:5d:05:e9:59:58:77:9b:ff:4b:
                    0e:0d:6d:7c:4c:d9:3c:5c:7b:95:9f:d4:14:3e:94:
                    1a:90:5d:62:9a:10:a4:3a:69:2c:cd:28:30:c7:c6:
                    db:db:8c:55:73:ac:39:07:79:1d:ec:2b:be:8f:31:
                    bb:58:4f:5c:6c:f3:21:67:cc:9e:f4:60:db:af:da:
                    da:00:55:45:15:84:92:57:34:6f:7d:c2:3b:f5:a6:
                    3f:13:98:28:56:0a:0f:34:39:62:f2:68:57:11:f4:
                    e1:73:a2:8c:69:90:21:49:cb:69:03:e1:56:32:9d:
                    83:bb:d3:b6:f2:c9:f8:6f:a2:01:5e:4e:ea:c8:53:
                    80:2d:26:82:96:40:5c:03:ba:2f:8d:af:95:eb:c1:
                    5e:b8:8b:08:b2:fc:21:68:68:1c:47:b5:21:9d:a6:
                    9e:43:14:1f:56:db:73:71:91:5b:62:1d:bc:76:69:
                    a5:8a:37:d1:8c:1d:94:a7:33:33:ca:9a:62:83:4f:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:3E:6A:97:E7:2F:CB:9A:AF:C5:8E:53:9F:22:F1:85:35:6A:DE
            X509v3 Authority Key Identifier:
                keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/323830333a346365303a3a2f33322d3332203d3e20323639393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:4e:40:61:fe:e5:24:2e:8e:5b:5e:56:17:7a:37:e7:bb:
         f4:60:59:3a:c9:ea:1a:37:81:8b:a2:38:38:2e:79:be:40:fb:
         b7:1f:7e:b9:70:34:e0:28:36:71:9f:e5:67:ef:03:4d:95:fa:
         ae:7f:60:1e:2b:56:56:bd:02:ed:38:42:76:91:0b:38:08:22:
         f4:ef:ac:8d:71:d0:95:c2:b3:09:72:d4:2e:a2:76:54:1e:98:
         db:fb:11:62:da:e3:5e:cf:52:61:78:d1:81:b8:fd:8e:5d:ce:
         f4:4b:25:c3:fb:53:52:1e:bf:b1:c1:63:bd:d9:a7:c3:a2:1c:
         b8:55:78:75:92:e6:91:72:07:b3:31:a5:17:b2:04:05:8d:50:
         51:7c:df:db:42:bc:8f:04:3a:38:77:51:9a:cf:dd:00:15:3f:
         38:83:1b:f5:5b:45:df:b5:f3:36:9f:23:27:5e:29:8f:6b:37:
         68:e9:e9:82:b2:ca:a4:d7:7b:2b:8f:af:7e:4b:18:02:d2:a6:
         87:ed:0c:48:2b:99:82:22:dc:0c:41:4b:38:10:2e:29:eb:84:
         63:85:2c:52:87:06:a3:dc:cc:04:5e:a3:11:53:06:4d:c3:c5:
         c6:7e:18:38:e4:64:c9:28:82:8c:44:d9:f6:ed:e8:14:41:1d:
         57:ff:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org