Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          h6VUjag/bIQLgbg0uEnEN2hfhu2vImaj5e03Lq+ffTE=
Subject key identifier:   9F:C5:4B:38:77:79:2B:F6:83:D6:3C:1C:F8:0E:6F:A4:33:E8:DC:AB
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       13AD1A9F71BF18149BD384C602FD03F75F79242D
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 05 Mar 2024 17:53:24 +0000
ROA not before:           Tue 05 Mar 2024 17:48:24 +0000
ROA not after:            Tue 04 Mar 2025 17:53:24 +0000
asID:                     272939
IP address blocks:        2803:b190:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:1a:9f:71:bf:18:14:9b:d3:84:c6:02:fd:03:f7:5f:79:24:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Mar  5 17:48:24 2024 GMT
            Not After : Mar  4 17:53:24 2025 GMT
        Subject: CN=9FC54B3877792BF683D63C1CF80E6FA433E8DCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:86:51:44:ef:6f:76:54:0e:64:e2:30:cf:
                    2c:b8:2b:2a:c1:62:62:41:10:b3:bb:4d:08:60:0d:
                    76:ef:d0:e8:38:98:20:ee:15:e4:bd:1e:d0:fd:b7:
                    a3:7d:0d:65:cf:22:8c:4e:d3:fd:39:d5:9d:44:46:
                    33:4c:5d:9c:de:01:7e:12:11:26:2d:d9:77:dc:2a:
                    df:90:6e:3a:09:95:65:97:25:f6:64:fb:49:7b:1a:
                    4c:11:78:fc:8f:bb:10:ff:84:88:11:49:47:8b:49:
                    0e:e2:2b:e5:a9:82:a1:55:49:c2:f6:e9:eb:48:13:
                    9b:7e:8e:44:89:9e:67:14:09:ab:3a:b4:c5:37:df:
                    68:44:1f:eb:2f:16:df:24:72:27:1f:ef:38:dc:61:
                    b9:b2:6a:44:48:2e:b8:f9:97:9c:fa:3f:dd:7e:ab:
                    4a:ab:6f:24:ce:46:28:09:98:06:8d:00:3f:bc:52:
                    6c:6c:47:89:8d:aa:6f:22:b5:11:b7:59:a7:a5:c1:
                    e6:3c:ed:06:ec:ff:5b:66:cd:f7:a3:cd:9d:85:db:
                    41:0c:d6:15:ff:bf:35:e2:2f:58:f8:cc:f8:ee:9c:
                    6f:68:f7:1f:f8:f7:a1:c7:e6:2f:77:ac:f1:7b:2c:
                    4c:c9:a5:82:b1:2b:54:6c:c1:2e:84:b0:e2:87:55:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:4B:38:77:79:2B:F6:83:D6:3C:1C:F8:0E:6F:A4:33:E8:DC:AB
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:a8:44:ae:6f:39:ae:40:1d:de:be:ac:fb:31:63:44:8f:
         f5:16:18:ee:4c:41:ca:a1:62:4e:33:1c:e6:fc:3b:a6:63:25:
         b6:7a:61:6f:80:1b:87:1a:4a:e1:59:e3:8e:f7:e3:59:f2:0e:
         52:21:5e:9a:82:6a:02:91:3f:b7:58:98:0e:4e:13:fc:93:59:
         f1:e7:bc:90:27:c6:1c:55:77:ce:84:32:33:59:98:ba:a6:37:
         17:5f:f9:50:2b:0e:dc:f8:64:b6:07:c6:2b:47:c6:52:99:e3:
         a9:3f:f3:0b:a8:8c:3a:80:62:b6:28:23:f0:72:e4:3a:6c:8d:
         f2:39:50:4e:44:46:b5:75:b3:62:9e:93:8f:86:13:ea:e9:d9:
         2a:96:a1:fa:3f:59:36:5f:bd:d4:2c:d3:cd:b4:66:53:f1:8d:
         ea:cf:e5:09:4e:2c:b5:19:75:3f:5b:cb:50:f2:a9:90:7b:53:
         28:fc:92:68:1d:dd:9a:42:42:7a:b2:54:19:0d:37:af:57:41:
         c8:29:a6:09:20:d9:a1:2c:99:a4:d2:06:a0:8d:f1:a0:1e:86:
         bf:ee:29:d3:81:ef:0b:b3:e0:84:01:43:be:a6:78:37:84:d8:
         4b:99:af:c0:8f:14:d3:48:e0:27:e7:a3:96:9e:32:48:f8:5e:
         5a:b3:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org