Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa
File:                     323830333a326538303a3a2f33322d3332203d3e203238313030.roa (raw, json)
Hash identifier:          tjjOSJWxeG4jgj3jM2156oCgLkfdZaUGyawZ494boKk=
Subject key identifier:   80:5B:78:59:AA:EF:71:19:4E:69:30:A7:7E:D1:D5:CE:A9:B9:4D:DD
Certificate issuer:       /CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
Certificate serial:       7149D23F5EF584F3D88291AC1DEE3A557F624A06
Authority key identifier: 1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 18:05:02 +0000
ROA not before:           Tue 05 Mar 2024 18:00:02 +0000
ROA not after:            Tue 04 Mar 2025 18:05:02 +0000
asID:                     28100
IP address blocks:        2803:2e80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:49:d2:3f:5e:f5:84:f3:d8:82:91:ac:1d:ee:3a:55:7f:62:4a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
        Validity
            Not Before: Mar  5 18:00:02 2024 GMT
            Not After : Mar  4 18:05:02 2025 GMT
        Subject: CN=805B7859AAEF71194E6930A77ED1D5CEA9B94DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:70:1c:d5:0f:a3:8f:8b:24:11:4d:27:e4:
                    64:4e:51:21:87:2a:3c:cd:52:5e:77:e8:ec:60:b1:
                    2d:67:c2:e9:f1:c6:75:f6:80:f4:0d:2e:d1:3c:3d:
                    ec:71:d4:59:af:50:a7:e4:d5:9e:8a:de:d5:70:b9:
                    a9:09:8d:6d:bd:a3:60:3f:9f:11:19:c2:f0:79:43:
                    52:20:fd:5f:59:3e:72:fa:71:fe:ac:7e:7e:5a:b9:
                    7a:ed:2b:29:47:8b:b2:fb:d2:59:3c:5c:5b:78:87:
                    15:e5:fe:5e:29:00:93:32:d8:8b:bf:15:3f:60:08:
                    51:d6:4e:ae:d9:dc:08:ce:ea:3c:96:5f:d3:2d:0e:
                    cc:ce:7c:bc:5a:9c:1b:31:f3:42:b7:8f:0c:d4:75:
                    e1:b3:24:ca:bd:88:4b:01:e7:e0:aa:26:2a:00:58:
                    f2:22:ec:46:69:89:07:01:d1:c6:b8:02:5e:a4:3b:
                    f3:f5:35:b4:9e:cc:73:ee:c3:c1:31:48:81:43:44:
                    04:b9:8a:42:56:08:5f:f0:b1:f6:13:1a:30:70:b8:
                    8a:b5:e1:c3:50:f2:07:f9:ac:80:ab:b7:59:17:5f:
                    92:20:6f:70:5e:31:5b:5d:fd:8e:8d:62:03:e8:66:
                    80:01:af:5a:ec:40:c0:bc:85:9e:41:f3:65:1d:d0:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:78:59:AA:EF:71:19:4E:69:30:A7:7E:D1:D5:CE:A9:B9:4D:DD
            X509v3 Authority Key Identifier:
                keyid:1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/323830333a326538303a3a2f33322d3332203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:83:e3:de:09:a0:ae:ad:ed:27:d6:2a:2c:3b:b4:94:e3:
         00:ba:91:4b:48:d5:6c:79:0f:d7:11:d4:f4:09:af:df:43:71:
         4b:75:5e:9a:c8:88:5e:b3:16:0f:e6:2c:3c:72:2b:4a:11:1c:
         aa:56:b7:a5:7b:cb:55:7c:57:24:71:ac:63:0c:b0:92:d0:75:
         43:07:c0:d1:ef:60:04:9d:89:16:fc:28:f0:bf:89:a5:e1:d8:
         7a:d7:2e:0a:63:d3:f0:c4:3c:1b:ad:83:df:c4:4a:f7:fe:b5:
         2c:2c:67:ba:a6:6d:a7:55:39:d5:e3:0c:84:52:34:92:7e:7f:
         6b:d4:b3:b8:6c:46:69:09:cf:5a:45:60:16:a4:18:df:02:25:
         23:06:5e:73:99:33:52:f3:00:14:32:62:83:a1:cb:35:76:4d:
         ac:90:dd:a8:21:b6:7c:3e:54:37:68:60:d8:d1:69:94:59:62:
         2a:20:52:05:b7:00:10:e6:d2:34:06:0e:75:4c:0a:42:16:15:
         06:b3:83:3f:29:56:87:85:b4:56:02:ab:83:b6:cb:a4:bd:27:
         3a:8b:46:67:8a:48:60:1d:91:9e:5d:34:c0:39:4d:5c:1c:24:
         11:b8:6d:f8:0a:b6:c3:0f:89:2b:6a:92:a7:04:a1:d9:2f:23:
         dd:3d:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:28 2024 by rpki-client on console-ams.rpki-client.org