Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa
File:                     323830333a386265303a3a2f33332d3333203d3e20323730303831.roa (raw, json)
Hash identifier:          g0peCdR3KmhwxeewfLp8BKILrnStHXfsPlPB77tR/4c=
Subject key identifier:   F3:C4:BF:B9:70:96:A1:B9:28:A0:6A:C9:C0:C6:D2:76:16:65:D5:5B
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       026A7B5BDDDBFAAD1164C2BA63C9CA873C6844A9
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:19 +0000
ROA not before:           Tue 05 Mar 2024 17:42:19 +0000
ROA not after:            Tue 04 Mar 2025 17:47:19 +0000
asID:                     270081
IP address blocks:        2803:8be0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:7b:5b:dd:db:fa:ad:11:64:c2:ba:63:c9:ca:87:3c:68:44:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:19 2024 GMT
            Not After : Mar  4 17:47:19 2025 GMT
        Subject: CN=F3C4BFB97096A1B928A06AC9C0C6D2761665D55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:3a:2d:e2:6d:51:25:c9:62:9f:0a:e6:a6:
                    8e:a3:cd:f1:9c:84:f1:a9:08:0e:24:51:06:3f:9c:
                    22:fa:21:db:36:12:3b:cc:ac:89:53:17:cc:0f:8e:
                    73:0d:bf:4a:bf:6d:81:1c:f4:f6:07:98:9a:e4:a4:
                    f6:27:9f:b8:82:a9:d1:b9:85:a4:71:de:89:10:5f:
                    8a:3e:c7:a8:8b:21:02:3d:82:69:c8:b9:a8:11:9c:
                    f7:af:93:88:6f:1f:c2:5f:98:af:b8:63:16:52:89:
                    f9:2f:7b:5f:e5:46:41:39:8e:29:4a:52:b0:e5:c9:
                    5a:36:da:c8:09:0b:a3:35:66:e0:8a:d8:45:92:63:
                    db:89:cb:0f:6c:e5:da:10:5e:c7:83:41:6c:3b:bd:
                    a9:a1:c9:fc:90:b4:a8:5d:91:9d:ff:85:4c:f3:c9:
                    00:5d:31:64:1c:5c:1a:6c:18:7e:8d:8e:5a:42:b5:
                    e7:d3:f2:1d:2a:e0:42:96:dc:19:13:da:be:88:38:
                    c8:87:c3:75:9b:e7:9b:d8:4c:f9:88:38:1e:44:36:
                    55:59:36:5d:ca:72:06:06:60:dd:f5:25:44:f1:b4:
                    b8:0b:ec:5d:0c:ca:5e:50:1b:ec:dd:86:7a:e4:3e:
                    80:7f:28:3c:d1:8d:80:fa:ff:b0:7d:25:90:90:f0:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:BF:B9:70:96:A1:B9:28:A0:6A:C9:C0:C6:D2:76:16:65:D5:5B
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a3a2f33332d3333203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:c5:2f:68:77:55:71:ee:fa:38:8e:0f:dc:d0:7a:9b:b5:
         9b:bd:93:15:18:00:dd:88:ce:06:e9:f6:09:3b:c9:fd:42:ec:
         6b:45:e2:da:c0:69:ba:8f:ae:e5:68:8b:70:b9:db:93:44:a5:
         a5:ce:9d:e0:a7:a3:81:1c:ea:3c:6e:80:c4:25:eb:5d:17:fe:
         2e:e6:33:aa:b9:2c:2d:13:4b:65:1b:73:fb:e6:84:6f:45:08:
         dd:c4:fc:34:78:ef:7b:db:f3:65:74:f7:9b:04:2f:18:6a:be:
         c3:86:02:d5:99:c9:82:71:f2:fd:22:5d:76:67:df:57:9c:6b:
         c2:7c:45:82:1c:54:0f:32:7b:d3:e7:ef:a0:7b:eb:0a:ab:98:
         45:39:59:b8:a5:77:fe:87:0d:d2:4f:d4:4d:c9:d7:b6:29:55:
         2e:6f:9c:6c:49:98:e8:ae:92:28:e6:d1:c3:a8:a0:ab:7b:42:
         9c:14:ef:a1:9b:ed:3c:df:3c:0b:d1:0a:6a:bd:5d:3c:45:f6:
         41:80:ff:e5:01:95:e6:58:67:12:cf:19:e8:7c:5b:d5:95:81:
         05:d0:c7:25:ba:a7:dd:f5:91:0b:f6:0d:5c:c9:be:dc:d3:93:
         41:c9:a4:a2:34:f0:28:da:40:b3:57:a5:17:94:c9:50:a4:ab:
         ab:9d:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:39:50 2024 by rpki-client on console-ams.rpki-client.org