Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a633030303a3a2f33342d3334203d3e20323730303831.roa
File:                     323830333a386265303a633030303a3a2f33342d3334203d3e20323730303831.roa (raw, json)
Hash identifier:          thAeqT89Iy9VZg/bHt91A2RnI0//F9LF7cfy6A9GyA0=
Subject key identifier:   EC:4C:9C:AC:7F:75:20:A5:4C:0E:84:24:A8:21:F7:0D:F1:85:EF:38
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       2A205E986B980582AEEFE8494D18BDCD5788C62D
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a633030303a3a2f33342d3334203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:18 +0000
ROA not before:           Tue 05 Mar 2024 17:42:18 +0000
ROA not after:            Tue 04 Mar 2025 17:47:18 +0000
asID:                     270081
IP address blocks:        2803:8be0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:20:5e:98:6b:98:05:82:ae:ef:e8:49:4d:18:bd:cd:57:88:c6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:18 2024 GMT
            Not After : Mar  4 17:47:18 2025 GMT
        Subject: CN=EC4C9CAC7F7520A54C0E8424A821F70DF185EF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:b1:f7:8c:48:11:23:02:f8:81:03:00:57:
                    6f:81:15:6b:78:12:1c:af:77:35:76:b4:8a:08:d3:
                    c0:b2:b6:c9:7b:6f:84:93:c8:7f:1e:6c:9a:3a:e5:
                    a1:f7:a5:be:3a:f1:ec:91:d2:7a:48:2b:18:0c:1a:
                    9a:25:29:f9:11:79:b0:f4:9c:aa:e5:9c:d3:c3:7f:
                    1e:dd:49:d4:2c:8c:35:a3:14:a4:d3:e5:d1:6d:6b:
                    ce:63:da:fc:f8:16:d4:b9:16:77:81:e0:b0:a8:95:
                    0d:1d:ed:1c:f2:66:a3:a0:7b:ff:23:e8:f6:96:af:
                    a6:e2:45:20:e8:c3:13:78:dc:1c:3d:72:bc:21:38:
                    b0:98:35:29:1c:ea:66:bd:56:92:35:bd:d4:ad:25:
                    23:97:38:49:92:d4:a5:a7:91:e2:88:f0:2b:78:18:
                    c2:a9:f3:c0:9f:e2:35:9b:4e:32:08:ee:f5:14:5c:
                    28:74:71:ba:ad:0e:b9:4a:67:50:04:ca:20:cb:7f:
                    de:95:14:7d:7f:0c:e8:94:df:0a:a0:f2:2c:1f:4c:
                    7b:95:00:79:b3:b7:5a:92:b0:c0:8f:d9:fd:f9:33:
                    0e:34:4c:16:86:ef:8e:7e:99:d7:92:00:97:ab:dd:
                    7b:59:61:3c:80:a2:50:53:3a:f4:2a:0e:1d:1d:6b:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4C:9C:AC:7F:75:20:A5:4C:0E:84:24:A8:21:F7:0D:F1:85:EF:38
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a633030303a3a2f33342d3334203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:48:46:12:78:11:98:e1:9c:eb:b4:49:37:c7:c7:f6:af:f9:
         ac:8b:43:65:cf:09:75:d5:18:fc:7e:7a:b5:1f:b7:55:29:03:
         53:6d:dd:e2:3d:77:0c:f8:fc:1c:2f:de:8d:c2:a6:e5:33:fe:
         75:99:73:8b:ab:72:72:77:a6:5d:58:3a:1e:34:f0:30:71:f4:
         48:db:63:65:4a:35:dd:f1:b8:a1:6a:db:71:ee:68:27:4b:64:
         df:59:32:72:8c:e5:9d:29:6a:9a:14:e8:0d:68:46:34:93:ba:
         79:1b:0c:b7:c9:a6:1a:d4:ea:56:6c:f3:a6:78:79:ad:15:e1:
         61:b1:c4:30:7d:6e:28:a1:b2:1e:13:67:5d:23:db:6e:be:ad:
         d5:9e:b9:a7:ae:92:32:f4:c6:c8:35:66:7a:74:84:ff:a3:6f:
         ad:91:0d:ab:0a:ba:8e:10:5f:48:d4:0c:16:a9:82:6e:0d:64:
         76:ba:28:3c:a1:6c:15:1d:69:e9:30:93:41:1a:29:57:b3:7b:
         0a:33:a2:b7:96:9b:24:bb:31:08:f9:b7:9d:4c:4d:18:a8:32:
         cf:76:9d:f1:df:0e:40:d9:d7:ce:28:28:ba:6f:80:4a:f6:19:
         d2:eb:bf:89:d2:2e:2c:e7:2b:72:0b:13:19:e2:65:ca:bd:fb:
         c5:e7:81:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org