Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          t5xu4tQqlOw+5KcredKt9ry7R40UGIpapZa31q9HWdc=
Subject key identifier:   2D:4A:9C:C5:E3:B9:0D:27:50:F4:C5:0D:BC:B4:A2:2D:3F:65:A0:B0
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       69307ABC6E4E1EAE4236CC36A6A5FEBEE13F11A0
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 05 Mar 2024 18:12:37 +0000
ROA not before:           Tue 05 Mar 2024 18:07:37 +0000
ROA not after:            Tue 04 Mar 2025 18:12:37 +0000
asID:                     273114
IP address blocks:        2803:790:3000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:30:7a:bc:6e:4e:1e:ae:42:36:cc:36:a6:a5:fe:be:e1:3f:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Mar  5 18:07:37 2024 GMT
            Not After : Mar  4 18:12:37 2025 GMT
        Subject: CN=2D4A9CC5E3B90D2750F4C50DBCB4A22D3F65A0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:ca:21:25:ef:36:8c:f3:2a:f0:ca:55:3a:
                    f0:62:e0:fa:98:0e:d3:cf:a7:c5:a0:bf:f4:72:fb:
                    85:8f:98:7b:fb:a7:cf:e5:6d:e8:ba:e9:20:25:16:
                    87:94:f9:0b:59:92:9a:44:3a:05:b0:63:ca:9a:9f:
                    c3:27:e2:7c:a1:63:5f:c2:47:1b:6d:d2:70:0b:32:
                    87:6d:a3:e4:13:23:e5:94:69:18:cf:f6:18:11:1b:
                    54:d3:c6:43:0a:17:97:64:1b:7d:b6:84:ff:82:ad:
                    28:54:ed:cb:56:37:67:b3:16:84:01:be:b7:77:d5:
                    77:ad:96:2d:73:a0:bd:85:ab:77:b5:2e:ce:d4:63:
                    98:28:32:3d:1b:fa:2d:e0:28:87:3c:7a:b1:7d:d9:
                    f5:39:8f:84:9c:be:00:db:49:ca:7d:54:9b:73:50:
                    44:ec:27:16:d3:6a:39:de:03:be:b2:39:96:b5:e3:
                    b9:f3:46:30:43:0f:62:a5:44:82:7b:f4:bf:e0:ff:
                    83:3c:24:02:ff:92:72:b1:04:65:47:b6:72:9d:75:
                    16:63:a7:9b:e8:6e:fb:da:30:c9:91:60:32:2b:65:
                    ca:49:10:3b:a7:19:e5:32:c4:9f:8d:e9:a1:b1:59:
                    e9:7b:16:a0:c4:fe:eb:1a:66:9c:12:44:43:c9:dd:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:9C:C5:E3:B9:0D:27:50:F4:C5:0D:BC:B4:A2:2D:3F:65:A0:B0
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:93:d6:f3:c5:0f:40:1a:2c:ad:0d:95:4f:84:51:e3:ce:5e:
         af:91:e4:07:23:87:de:e7:70:cd:6c:7b:d8:ee:a2:27:74:c8:
         10:60:cb:94:00:44:24:17:2c:dc:f9:21:c7:9c:de:89:85:67:
         31:f9:d4:5f:4d:32:bf:b0:79:80:94:1f:94:ca:e9:a7:a9:33:
         80:e1:e5:8b:3c:28:37:97:e4:bd:70:56:77:c5:40:24:4b:d2:
         11:87:d6:36:a5:bc:a3:5d:d8:b8:ca:d1:68:ca:3d:bb:9e:64:
         66:20:58:bc:da:71:86:f7:c6:3a:88:52:65:a4:50:25:bc:26:
         09:72:d0:ae:7b:f2:8d:62:9a:70:af:5d:8d:a1:e9:e0:7e:16:
         16:f8:e5:fc:72:25:58:b6:d2:4c:d2:6e:93:18:3f:48:07:fa:
         a7:60:51:c0:f7:2a:16:fe:af:8a:77:7b:8a:b5:f8:a6:fc:a5:
         87:fc:b1:6d:56:58:a5:1b:16:9b:b0:d2:b3:ba:c9:e6:bd:6a:
         aa:7c:f6:74:43:80:bd:c8:71:b4:ed:49:7c:a3:1a:94:8d:2e:
         97:3a:b6:8c:2d:b5:f0:a3:0a:1a:33:af:75:45:37:ea:c0:89:
         fe:37:31:64:ee:d5:d3:46:06:cb:7c:d4:b4:90:27:d8:f6:73:
         d6:5b:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org