Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/323830333a376136303a3a2f33322d3634203d3e203532333633.roa
File:                     323830333a376136303a3a2f33322d3634203d3e203532333633.roa (raw, json)
Hash identifier:          dB+ValnkSKy+AcdEg8ftMswiIzlLxx7TmBQRPLIs9BQ=
Subject key identifier:   9E:AC:2B:CA:64:79:27:2D:D1:5F:A3:A0:80:A4:22:16:E1:9C:99:C1
Certificate issuer:       /CN=E4DD02F783A1562385FCD20BEA3443AA69EBE6AD
Certificate serial:       48D9292554475C3E92E4684C13563773CE444CCE
Authority key identifier: E4:DD:02:F7:83:A1:56:23:85:FC:D2:0B:EA:34:43:AA:69:EB:E6:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/323830333a376136303a3a2f33322d3634203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 17:55:50 +0000
ROA not before:           Tue 05 Mar 2024 17:50:50 +0000
ROA not after:            Tue 04 Mar 2025 17:55:50 +0000
asID:                     52363
IP address blocks:        2803:7a60::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d9:29:25:54:47:5c:3e:92:e4:68:4c:13:56:37:73:ce:44:4c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4DD02F783A1562385FCD20BEA3443AA69EBE6AD
        Validity
            Not Before: Mar  5 17:50:50 2024 GMT
            Not After : Mar  4 17:55:50 2025 GMT
        Subject: CN=9EAC2BCA6479272DD15FA3A080A42216E19C99C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:ae:98:d2:27:c5:93:a5:57:1c:f8:c1:52:
                    d1:e0:5b:7e:54:8b:e7:d6:4c:4f:05:d4:fe:97:9e:
                    a6:ba:02:f5:cf:e0:3e:d9:75:2b:04:b3:26:69:66:
                    29:f3:e2:60:e7:ea:db:2f:0b:d2:25:79:37:66:5b:
                    29:1d:6e:c7:19:ec:56:d8:78:c8:a4:ba:ce:ea:a3:
                    d2:28:8d:f3:e3:87:0d:be:9d:37:12:7b:b7:5b:e5:
                    06:4b:8a:d3:dd:8b:d7:00:7f:53:bc:2d:b4:37:ed:
                    9a:1d:34:0c:8e:31:8a:df:cf:0e:bc:32:11:b3:8b:
                    4c:f1:27:56:6e:2a:99:85:6e:7e:ec:4c:85:1e:9c:
                    a8:c0:03:5c:d9:df:bf:d4:24:56:cc:4a:c4:e7:32:
                    e4:47:16:34:3c:57:0e:3e:6d:c2:6a:7d:05:ee:13:
                    d9:8a:c5:5c:fa:a3:6a:cc:19:02:f4:2b:dc:69:fb:
                    f1:f5:68:43:8f:0c:0f:7b:e5:58:b9:89:24:5d:76:
                    75:c9:08:06:6a:cb:d0:3b:94:21:e8:3b:f1:2a:92:
                    8e:f6:cd:e5:6b:33:41:40:58:68:bc:99:68:68:60:
                    33:55:cb:d4:49:0b:4c:a7:39:03:b3:36:4d:15:db:
                    85:50:41:b4:8e:1b:75:c0:15:0b:e9:43:b2:bf:be:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:2B:CA:64:79:27:2D:D1:5F:A3:A0:80:A4:22:16:E1:9C:99:C1
            X509v3 Authority Key Identifier:
                keyid:E4:DD:02:F7:83:A1:56:23:85:FC:D2:0B:EA:34:43:AA:69:EB:E6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/323830333a376136303a3a2f33322d3634203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:e2:be:44:fc:9e:9c:58:19:a1:81:b4:0d:e5:dc:71:98:
         2b:a2:45:39:37:03:41:1b:a6:76:fe:1a:32:1b:8b:30:13:c1:
         36:77:bd:cc:0d:d6:dd:90:1d:b2:2f:a3:03:67:b7:7b:82:72:
         a8:77:26:2e:b2:c4:ef:60:76:84:80:d9:e4:bf:22:80:64:66:
         42:6d:58:2f:d3:1c:c8:de:a1:c9:02:51:3a:c1:61:f3:90:8b:
         b9:d4:5f:fe:71:49:dc:59:41:fa:29:30:46:3a:d9:0d:a5:1e:
         c6:bf:d9:bd:cb:c6:1b:b8:06:f5:94:41:f0:dc:e9:01:c0:7e:
         09:cc:8e:02:c9:e3:b0:c6:4b:b9:34:b0:ed:6d:8d:53:cf:a4:
         a6:73:13:96:79:dd:1b:0f:fd:63:1a:35:ba:8c:20:ed:73:33:
         9f:4c:67:3a:6a:e8:97:a2:92:18:0f:f0:98:73:af:c1:26:14:
         e8:32:31:bd:16:71:df:26:3e:d4:91:7c:30:5b:84:6a:26:ac:
         17:e2:18:8b:5e:99:9d:c2:0d:de:22:32:2d:d6:9e:e3:a6:1a:
         df:07:ee:a4:a4:24:71:7b:ed:f2:b9:53:bb:bc:0d:c2:72:10:
         ca:0a:b7:60:4f:c1:4e:57:9b:c1:6c:b5:eb:25:e8:cc:ed:ee:
         37:12:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:55 2024 by rpki-client on console-ams.rpki-client.org