Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa
File:                     323830333a313665303a3a2f33322d3332203d3e20323639393735.roa (raw, json)
Hash identifier:          UcmG3C+0a2ySFgJ00A4j//pr7I4JaXjUwYZo0R49bZI=
Subject key identifier:   9A:E0:3B:D0:42:2F:11:D6:B3:CD:38:28:38:8A:39:BB:A1:F6:54:46
Certificate issuer:       /CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Certificate serial:       36B15F74D4FDA1702E16CCD975CF80A5E3A3D01B
Authority key identifier: 2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa
Signing time:             Tue 05 Mar 2024 18:22:15 +0000
ROA not before:           Tue 05 Mar 2024 18:17:15 +0000
ROA not after:            Tue 04 Mar 2025 18:22:15 +0000
asID:                     269975
IP address blocks:        2803:16e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:5f:74:d4:fd:a1:70:2e:16:cc:d9:75:cf:80:a5:e3:a3:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
        Validity
            Not Before: Mar  5 18:17:15 2024 GMT
            Not After : Mar  4 18:22:15 2025 GMT
        Subject: CN=9AE03BD0422F11D6B3CD3828388A39BBA1F65446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:65:92:f9:65:e4:d6:92:c0:81:fe:10:49:
                    af:18:f7:c3:38:5f:45:ee:0c:47:b5:0f:ca:33:13:
                    62:e3:6f:15:5a:b2:c3:70:d3:d2:8b:0d:c3:ad:e6:
                    bc:38:da:b5:c7:62:39:31:4e:e2:ac:3b:9d:52:c4:
                    65:e5:21:45:5e:5f:99:00:be:4c:5c:bd:c2:85:d3:
                    9f:38:e4:ee:b7:73:fa:53:9f:4b:13:ab:8b:80:f1:
                    3c:c2:95:66:aa:cc:b4:59:c9:96:57:2a:77:f4:63:
                    3e:22:4b:bf:e0:69:12:b7:a7:6b:61:c0:d4:8e:5e:
                    11:fe:a3:4f:a3:1b:63:b1:dd:e1:41:da:cf:a6:fd:
                    22:cc:33:67:69:ab:9f:e7:4b:23:ce:9e:fc:f3:ae:
                    c5:d9:1d:69:44:28:db:54:01:ae:6f:27:f9:4c:62:
                    a9:3f:e8:fc:e8:d7:a2:47:b6:9f:ea:c2:1d:fe:0a:
                    ef:c6:77:64:88:44:ee:59:c5:e7:ae:87:82:e5:ed:
                    ab:67:29:90:68:81:77:e7:1a:eb:51:b1:10:6c:be:
                    5d:7c:4a:c8:a5:15:bb:da:50:ee:06:12:22:5a:4d:
                    3f:0c:58:07:5e:e3:e4:69:78:80:96:00:5a:06:48:
                    ef:06:87:40:ef:24:72:58:a8:56:03:9c:bc:44:8d:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:3B:D0:42:2F:11:D6:B3:CD:38:28:38:8A:39:BB:A1:F6:54:46
            X509v3 Authority Key Identifier:
                keyid:2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/323830333a313665303a3a2f33322d3332203d3e20323639393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:19:ea:1b:2b:ef:1f:ca:59:1a:f4:51:23:71:f4:a9:71:a8:
         40:fb:0b:8f:63:30:ca:a0:ee:76:84:88:51:45:34:ee:e4:8f:
         9a:9e:32:85:00:d6:5d:db:27:d5:b0:08:e6:2c:97:9e:11:3f:
         f0:5e:70:e6:89:f8:c6:e9:f0:85:b3:3b:b1:8f:48:cd:4a:4c:
         56:d4:93:b7:80:64:2d:d6:c1:50:93:fe:57:68:3a:22:98:45:
         2a:3c:ec:74:60:76:43:32:ea:e5:98:94:af:09:9e:f7:bd:3d:
         7e:de:6a:0f:82:88:97:9b:1c:27:a7:37:cf:ea:af:19:9b:22:
         b8:19:0b:96:84:91:f1:f9:ca:78:07:59:76:11:1f:17:fe:11:
         4a:87:c8:21:d6:c3:29:3d:58:0e:6c:b7:36:18:a4:8f:b7:06:
         2c:8b:b9:f4:21:0f:e2:c8:c7:00:f6:ff:9e:e4:91:23:e0:35:
         cd:4b:a6:4b:e7:e0:15:55:9f:d0:b1:ed:08:66:2c:6f:b7:d3:
         cf:03:ca:9e:d3:8c:e7:cd:99:b2:ba:ea:fe:53:5b:23:32:24:
         24:d0:a5:dc:bf:b1:67:bd:e4:12:6e:55:9f:14:b9:c9:02:7f:
         2b:62:53:13:27:f1:d7:f9:6c:cb:35:3b:d5:7c:a0:5e:20:51:
         25:47:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:16:08 2024 by rpki-client on console-ams.rpki-client.org