Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
File:                     323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier:          xxbGx2U9416rnpOePWTF0XfDzx8KcENgIr5ckpSJR/c=
Subject key identifier:   23:D8:67:46:25:E6:56:41:84:BF:33:31:F9:04:02:73:FA:8C:12:75
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       70B4D9ED767FBEAB81FEE7E2C3E736228A69A663
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa
Signing time:             Tue 05 Mar 2024 18:12:37 +0000
ROA not before:           Tue 05 Mar 2024 18:07:37 +0000
ROA not after:            Tue 04 Mar 2025 18:12:37 +0000
asID:                     273114
IP address blocks:        2803:790:8000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b4:d9:ed:76:7f:be:ab:81:fe:e7:e2:c3:e7:36:22:8a:69:a6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Mar  5 18:07:37 2024 GMT
            Not After : Mar  4 18:12:37 2025 GMT
        Subject: CN=23D8674625E6564184BF3331F9040273FA8C1275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:2f:b1:fc:59:d7:a5:c6:9d:5c:15:a7:8c:
                    32:a5:f4:9c:4e:d3:7e:28:22:b0:54:c9:23:80:8b:
                    c6:e8:48:66:e0:68:7c:e4:2f:b2:51:26:c5:13:5c:
                    ee:a1:9b:5a:98:8a:f0:03:4c:23:c1:7a:ba:2e:91:
                    ee:31:96:58:46:31:5e:60:13:c3:f5:da:30:3d:fb:
                    1b:53:8a:b9:a7:c8:39:2b:22:4c:d5:76:c7:5c:96:
                    9b:fa:bf:50:e3:f4:9e:99:0b:1e:10:99:0a:55:71:
                    27:60:39:1e:4f:df:86:14:a9:14:1f:30:41:30:4c:
                    53:35:9b:9b:03:b7:c0:f1:95:08:66:d8:47:32:00:
                    09:62:d7:51:53:dc:a7:97:d2:4b:6a:6e:d4:c2:c2:
                    7f:64:18:b8:4e:d1:5f:7e:41:3b:d8:2a:05:f4:67:
                    4f:a0:c4:61:a4:1f:8e:47:b9:16:57:2f:27:e5:f7:
                    5e:ab:45:4c:10:04:9b:d3:9c:62:5f:fd:73:a5:eb:
                    d5:56:a5:b6:b0:c2:b3:a8:a5:06:bf:77:91:cb:ee:
                    02:8f:7a:c0:9b:10:ff:1f:16:61:16:af:f2:f3:e3:
                    23:b1:92:1e:b6:0b:b5:ce:a9:fc:72:34:e1:0c:62:
                    a7:62:5d:5f:3d:db:62:26:31:af:97:5c:88:73:4a:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:67:46:25:E6:56:41:84:BF:33:31:F9:04:02:73:FA:8C:12:75
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:93:bc:4f:7f:ca:37:a0:a0:55:26:ff:28:dc:00:82:52:aa:
         dd:b6:7b:95:9f:bb:a1:a1:0f:ce:c5:ef:45:e2:8b:45:e7:3c:
         40:d7:18:2b:54:86:4b:8e:74:80:66:63:54:16:d9:50:52:53:
         1c:a1:97:87:d4:ef:6f:16:e7:07:09:df:73:57:a7:49:1d:78:
         52:69:49:b0:dd:10:67:cf:97:d0:cc:d9:b6:19:71:55:f1:2f:
         5a:f6:ad:4c:1f:ac:64:c1:53:d8:e3:3f:a6:61:32:ac:30:4d:
         a5:8a:ae:72:98:ae:a1:7e:fc:5c:90:cf:b3:66:86:d3:ee:91:
         12:48:9b:03:90:cd:45:3f:03:16:19:5b:53:4e:d1:86:f7:47:
         52:57:87:e2:4c:eb:d6:1a:80:fa:ab:2c:c7:b6:7d:db:8c:0b:
         30:f7:92:a6:ae:ad:ee:cd:c0:8c:91:22:a0:f7:56:02:2d:4a:
         0b:b0:af:c5:dd:53:a6:3f:32:cb:15:dc:b2:7e:50:0f:be:bf:
         9a:d4:8d:34:b2:30:20:d7:87:89:d1:69:90:a4:70:5b:e5:b0:
         da:65:b7:19:df:3a:50:e3:43:08:c9:b6:6f:50:3d:e0:d0:7d:
         8f:32:09:49:13:1b:ed:c5:0a:58:18:b0:4d:87:19:fd:58:df:
         42:b7:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org