Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa
File:                     323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa (raw, json)
Hash identifier:          TcHd7flgl/daXbsWOMrDALAqdd9MSxETRrUA7PNUCLA=
Subject key identifier:   6E:45:F0:89:E8:97:06:0A:71:40:BF:F1:8B:8A:99:BB:E4:22:D6:27
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       713C5CF8730DF20A7EDD253F9EE618A9A162AE5E
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     270081
IP address blocks:        2803:8be0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3c:5c:f8:73:0d:f2:0a:7e:dd:25:3f:9e:e6:18:a9:a1:62:ae:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=6E45F089E897060A7140BFF18B8A99BBE422D627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:13:dd:65:8d:cc:ea:08:35:b8:b8:9d:4f:
                    ac:0a:ee:e6:31:43:2b:ad:f5:70:b7:14:a8:0e:09:
                    ba:8b:38:ea:68:0c:34:5f:5a:2e:cd:b6:45:0e:75:
                    22:3a:5a:73:d0:6b:5e:66:9b:90:d0:3d:e5:08:4d:
                    a3:4a:1c:80:19:32:fb:eb:b2:f9:e7:f7:86:2f:47:
                    4e:16:68:b6:93:79:b7:89:fc:0d:76:f6:ac:64:8e:
                    74:3d:0d:47:b4:83:27:66:18:68:9e:2d:ed:95:38:
                    ca:cf:58:f4:2b:71:b5:53:c8:51:59:4a:4f:a8:ba:
                    30:c3:05:b8:ea:82:da:8a:4a:1e:01:10:b4:40:85:
                    41:c4:ad:91:5c:4b:f0:2e:bb:22:25:6c:0b:5e:6d:
                    5c:c3:b8:95:e8:d6:1d:f5:de:d4:26:72:ed:1e:e0:
                    be:6a:43:85:e9:b9:4f:c8:49:ca:5b:e4:2e:b9:3d:
                    0c:87:6e:e5:cc:bc:f4:3f:db:62:fa:53:0e:55:6d:
                    d8:f0:53:1b:3c:1f:9c:2a:f6:2c:88:7b:10:2f:76:
                    5a:8e:53:6d:2e:5d:a1:74:fb:ee:21:c4:65:34:5b:
                    65:08:8e:d3:f7:50:27:0a:a9:2b:5c:3c:8e:d1:d3:
                    a5:32:24:8b:e8:b7:a3:45:a6:cf:97:43:31:c7:95:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:F0:89:E8:97:06:0A:71:40:BF:F1:8B:8A:99:BB:E4:22:D6:27
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:81:89:b6:e4:af:ad:95:01:b1:de:ad:96:dd:16:d7:a4:a2:
         e3:73:a1:d0:7d:16:19:a4:09:6b:4f:d7:d0:40:4d:c3:9d:50:
         74:dd:09:93:a2:fc:d4:d5:4b:21:e4:7b:7a:f9:2b:54:fa:19:
         2f:b8:13:82:51:8f:f7:d7:f9:47:97:89:c5:72:b9:3e:b9:50:
         3b:3f:0a:31:4f:bb:73:6c:fb:57:0f:92:29:49:fe:44:18:03:
         f4:29:f7:52:8d:a3:c9:40:86:fa:62:13:62:75:a1:4a:6d:40:
         7b:e7:79:35:c9:87:19:89:c3:4e:9e:cf:e0:77:b4:fb:11:9a:
         0c:8d:e3:80:16:c6:8b:71:4a:30:fe:06:9b:c6:94:27:8d:ca:
         c9:80:08:10:11:ab:e1:0b:f1:fd:7e:72:fb:fb:7f:5d:3e:4c:
         32:1f:bd:49:e5:70:ae:4b:f5:10:c7:fb:7b:9c:8b:fb:ee:2f:
         a4:b4:66:83:3b:ca:89:96:02:26:44:c9:f9:88:04:f1:c4:cd:
         0e:91:4a:83:af:a5:10:a5:ac:da:24:a3:fa:d8:4b:f1:75:3d:
         26:a9:21:bd:a2:1e:16:98:4e:fb:6f:20:37:d3:9d:e3:a8:b4:
         6d:59:82:1b:93:7c:67:5c:3c:f5:77:db:74:bd:a8:7e:6b:85:
         53:6f:7a:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org