Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa
File:                     323830333a313165303a3a2f33322d3438203d3e20323639393937.roa (raw, json)
Hash identifier:          e3wJZzZzGFxwRpZRmXQ8m0+7pQfXgXGEMIm46eST9Tw=
Subject key identifier:   E8:65:4D:1D:B2:DD:57:F4:29:A7:98:CC:64:3E:17:F9:6B:F7:B6:42
Certificate issuer:       /CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
Certificate serial:       7B835E637B4CD2019D5F8725DAB388DCE8FB3109
Authority key identifier: 76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa
Signing time:             Tue 05 Mar 2024 17:40:02 +0000
ROA not before:           Tue 05 Mar 2024 17:35:02 +0000
ROA not after:            Tue 04 Mar 2025 17:40:02 +0000
asID:                     269997
IP address blocks:        2803:11e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:83:5e:63:7b:4c:d2:01:9d:5f:87:25:da:b3:88:dc:e8:fb:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
        Validity
            Not Before: Mar  5 17:35:02 2024 GMT
            Not After : Mar  4 17:40:02 2025 GMT
        Subject: CN=E8654D1DB2DD57F429A798CC643E17F96BF7B642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:82:6e:53:8c:1a:1b:d8:22:da:1b:fe:bb:
                    44:79:eb:17:ad:06:da:9a:bb:c8:96:c2:79:bc:c1:
                    3f:fb:ab:bf:0f:4a:d9:54:b3:1c:40:89:30:aa:d7:
                    84:86:56:b5:31:1a:97:25:ed:93:68:3e:8e:dd:ad:
                    ee:d3:71:71:9b:65:dd:c5:4e:5b:c7:2b:09:ea:84:
                    7f:2a:cb:f5:9a:b2:b7:5c:7c:1e:70:a0:4d:cf:75:
                    b5:98:6a:aa:1e:29:9a:f3:d5:f6:a9:18:a3:ad:b2:
                    05:c0:3c:2c:2b:23:c5:53:6c:eb:d5:e8:86:b3:e0:
                    2f:36:9c:28:f5:11:ca:78:90:0e:b3:ff:36:13:d3:
                    a3:76:53:4a:29:d5:d9:fc:c4:50:42:a2:36:53:dc:
                    cf:cf:a7:fb:e0:0a:0f:a4:cf:69:f2:96:d5:fd:30:
                    f2:b8:74:df:d0:1d:a9:94:da:16:26:34:f6:01:92:
                    4c:47:13:43:7a:47:4d:e6:ee:38:a5:29:6f:b9:a4:
                    b3:63:79:48:fd:99:29:03:96:04:d4:00:02:d8:37:
                    f0:da:79:a4:c4:81:e0:a3:28:5f:64:c2:21:c4:7f:
                    ec:0c:56:ec:53:8f:4e:3b:95:63:68:ea:c6:81:66:
                    dc:e5:f5:fd:40:42:9e:c4:95:2d:fe:c4:04:d4:24:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:4D:1D:B2:DD:57:F4:29:A7:98:CC:64:3E:17:F9:6B:F7:B6:42
            X509v3 Authority Key Identifier:
                keyid:76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/323830333a313165303a3a2f33322d3438203d3e20323639393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:3d:19:fa:2a:1e:58:73:39:40:9c:54:dd:08:4e:b9:04:
         e5:a5:c1:fd:f1:84:6d:f0:bb:bd:9d:2e:10:51:57:91:e4:af:
         72:b6:02:92:a7:eb:ad:22:04:66:33:74:e0:e6:9a:48:1b:ac:
         c2:3f:29:6e:4a:0a:58:17:34:01:14:52:00:09:73:9b:80:2b:
         31:2a:e1:5a:2d:f9:7f:48:e3:8e:a8:cc:96:33:6f:89:0e:0a:
         41:64:c3:f1:ea:a5:0f:b1:f6:a6:18:e2:2f:62:3b:7a:8c:64:
         6b:39:32:a3:f6:bd:c1:f5:c0:0d:2b:8b:8a:d8:e2:1e:44:f0:
         08:2d:ec:96:13:60:c6:e9:51:6a:59:0e:0e:f8:56:4c:58:db:
         30:36:31:e9:b3:83:e9:d1:45:38:4a:a2:e3:9c:81:64:ad:c4:
         31:89:10:2e:da:23:44:26:32:59:b9:5c:9f:e9:66:c9:d6:0f:
         56:20:f4:f4:c3:cf:52:fc:03:6f:db:1a:52:f9:f0:62:80:60:
         38:16:da:aa:2f:2c:5a:be:fc:b7:40:fd:09:cf:ec:2f:fd:54:
         e6:94:f6:9b:ae:e3:bb:a7:d2:c2:d5:84:b6:a7:ac:c2:4e:51:
         17:7a:ba:9f:28:a5:65:06:3d:bc:d3:b7:31:14:30:fb:b5:65:
         bb:e0:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org