Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa
File:                     323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa (raw, json)
Hash identifier:          0xvtmnUrkacjcr1w7urzpEAa2n9s6APdw9sBFGVGqm8=
Subject key identifier:   1C:90:9A:95:CB:44:C3:9F:27:6E:1D:D1:03:0C:5D:EA:76:CF:3A:94
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       03AD858DDB8B1CC1E0AD9D8F1B11FF5E504CFF02
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     270081
IP address blocks:        2803:8be0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 19:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ad:85:8d:db:8b:1c:c1:e0:ad:9d:8f:1b:11:ff:5e:50:4c:ff:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=1C909A95CB44C39F276E1DD1030C5DEA76CF3A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:41:ce:44:44:d9:ca:4e:a0:03:36:e0:7a:
                    79:78:d9:81:1a:f3:55:36:af:91:f1:8f:8e:0d:d4:
                    aa:76:20:69:33:67:6e:c6:10:84:b0:2e:6c:4f:16:
                    d0:63:f0:d7:a6:4a:84:15:4f:6f:16:a8:4a:13:6c:
                    1f:35:ee:83:98:75:dc:26:da:d0:61:19:7a:1f:a6:
                    4a:ba:6c:7c:7b:c0:95:22:8b:33:dc:b0:8a:ec:93:
                    68:f9:ea:c8:16:55:ef:9d:4c:4b:11:94:4e:bf:93:
                    97:29:46:81:73:f0:ae:79:4b:c1:8d:a7:55:d6:e4:
                    21:be:c2:ed:b7:12:34:c5:cf:40:35:d4:2b:12:c6:
                    e0:3a:b9:4d:3d:28:90:21:22:96:74:63:6b:1d:a4:
                    20:28:0a:90:97:da:e6:a3:ea:a8:6a:b9:0e:f9:59:
                    b4:c0:55:66:e6:00:55:27:9e:64:78:06:2d:55:a4:
                    d3:be:f7:8f:41:31:ac:bd:4a:3d:40:69:f4:ef:a7:
                    a3:3b:6b:ee:20:b7:c8:f9:9a:0c:d2:28:3d:8b:a9:
                    46:12:80:1f:26:8f:06:8e:09:f2:dc:ae:90:7a:46:
                    22:ff:08:7f:3a:cd:c4:15:20:eb:6b:37:ef:1f:39:
                    6a:35:4a:a2:22:fe:a9:a5:6c:4c:dc:58:bc:a8:18:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:9A:95:CB:44:C3:9F:27:6E:1D:D1:03:0C:5D:EA:76:CF:3A:94
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33342d3334203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:72:28:bf:d7:e6:c4:e0:84:11:31:f9:03:d5:8a:b9:61:
         cb:37:94:80:bb:9f:1e:ac:81:3f:55:a1:be:27:ad:71:14:7f:
         dc:6f:de:8b:9e:8b:9c:aa:4b:37:cb:6b:ec:a5:94:69:18:c0:
         22:08:89:d7:ae:2f:d8:44:77:13:ba:a4:7d:29:b9:d2:a9:ec:
         e3:bd:78:6f:81:40:1e:88:e3:00:69:3d:6d:24:d5:a8:a2:fa:
         f3:00:c4:1b:90:f0:d2:08:e3:9a:c1:b1:71:8b:66:ad:18:f9:
         29:3f:42:be:fc:55:5a:e9:75:6b:7e:58:bd:1a:48:29:fc:8c:
         fd:4f:38:06:73:72:5c:e4:3e:c6:0a:17:ad:16:7d:96:d7:9b:
         4b:44:35:96:ab:75:a7:7a:12:8c:75:e4:dd:24:48:27:71:0e:
         78:cd:f5:43:45:ee:09:74:00:ee:f5:98:10:07:d0:b3:1e:15:
         78:a6:12:d8:28:d6:21:bd:79:5e:cc:04:ff:9c:3d:4c:d2:2f:
         f3:77:91:a9:14:08:12:58:72:c4:66:f2:4b:c5:4d:81:ec:24:
         f3:4c:6f:e4:6b:33:2e:0b:ca:dc:20:75:a7:63:25:7b:85:7d:
         b3:5c:93:ce:a6:0d:d9:60:9f:b8:8d:34:56:e8:ba:51:c0:83:
         ca:82:07:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 13 14:27:42 2024 by rpki-client on console-ams.rpki-client.org