Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f33322d3438203d3e20323732393432.roa
File:                     323830333a3939303a3a2f33322d3438203d3e20323732393432.roa (raw, json)
Hash identifier:          kIKqXSKx6P9BisbSZfmB3tU1xCY6PFzeI9/RJzOMPH8=
Subject key identifier:   45:BF:BB:21:96:17:A6:69:6C:ED:FA:66:E4:32:9F:5F:67:53:E0:1A
Certificate issuer:       /CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
Certificate serial:       2E36D95292E90EC7A2DFF0A1F84F346A459DCEB7
Authority key identifier: 1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f33322d3438203d3e20323732393432.roa
Signing time:             Tue 05 Mar 2024 17:59:27 +0000
ROA not before:           Tue 05 Mar 2024 17:54:27 +0000
ROA not after:            Tue 04 Mar 2025 17:59:27 +0000
asID:                     272942
IP address blocks:        2803:990::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:36:d9:52:92:e9:0e:c7:a2:df:f0:a1:f8:4f:34:6a:45:9d:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A
        Validity
            Not Before: Mar  5 17:54:27 2024 GMT
            Not After : Mar  4 17:59:27 2025 GMT
        Subject: CN=45BFBB219617A6696CEDFA66E4329F5F6753E01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:21:6c:f6:d7:7a:b6:b0:1f:60:6b:90:e7:98:
                    c6:a7:fe:d6:3a:9b:70:cb:a2:42:a5:89:f4:47:f7:
                    45:5d:b1:de:77:14:87:7a:0a:c4:24:ee:e2:ad:d7:
                    be:86:a0:df:e7:2a:15:4b:1e:de:20:1e:1b:f0:a8:
                    89:f3:02:9d:83:9a:84:5b:86:b8:ec:b2:23:d6:fd:
                    68:7f:38:e9:ea:d6:21:43:e2:4f:22:60:b9:57:8c:
                    ce:21:2f:06:ca:2b:31:c1:26:50:53:3a:09:e7:fd:
                    00:7b:4c:20:97:74:f5:b7:af:8c:e4:fa:bb:9d:e2:
                    dd:3c:a6:a7:cb:18:18:b1:6d:31:1b:a3:05:3f:4d:
                    9b:50:e3:f1:ad:63:4d:41:54:08:5d:7b:d9:3c:37:
                    ec:1b:ad:b9:2d:06:4a:40:d4:b7:66:3c:98:24:fb:
                    aa:24:dc:00:4a:69:97:4d:d1:86:5b:79:e7:81:a7:
                    b1:51:12:1b:4b:ab:47:14:65:25:63:50:88:6c:44:
                    da:5f:00:ad:dd:71:06:b9:23:21:ee:cd:5b:e7:77:
                    10:88:58:ae:89:d6:e9:89:49:b5:34:b3:46:2a:c0:
                    86:7a:39:cf:c8:80:d8:89:ed:5b:02:86:d2:5e:66:
                    11:6e:23:98:e8:0a:41:09:89:0a:4f:99:e1:1b:bd:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:BB:21:96:17:A6:69:6C:ED:FA:66:E4:32:9F:5F:67:53:E0:1A
            X509v3 Authority Key Identifier:
                keyid:1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/323830333a3939303a3a2f33322d3438203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:990::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:97:d3:a4:c9:69:26:15:10:e1:a2:a9:d8:c1:63:f2:64:c9:
         cb:57:07:4a:1b:ea:25:be:7e:1a:26:66:f0:ae:86:58:d1:d5:
         7f:35:ca:1c:fa:b6:c1:e6:42:2a:a6:db:37:cc:b8:dc:29:af:
         3d:ab:d7:e7:b9:42:1d:6e:53:e8:f5:97:1b:00:e1:a5:45:d0:
         d5:48:be:a4:b4:19:c1:20:42:85:5e:f1:31:ac:7c:30:15:09:
         bf:3b:92:48:de:8a:4e:2f:ac:45:94:4e:dc:3c:6f:c6:bd:de:
         7d:ba:02:35:83:60:aa:9d:31:e2:51:65:6b:7f:4b:49:b6:6f:
         35:e7:73:ed:f7:88:65:fe:ae:9b:28:30:61:b7:7d:94:4f:3e:
         12:16:d8:18:89:d3:8c:9f:30:b9:3c:3f:0f:62:40:fc:83:02:
         ec:2b:5e:9a:2f:a3:f4:f5:06:7c:53:a8:65:38:a8:68:82:38:
         e5:4d:fc:b3:72:00:f2:e0:2a:32:be:24:0c:f1:5b:04:67:71:
         b5:8c:c5:b7:1e:83:20:18:ad:fd:8e:3e:ae:c6:0d:16:8b:34:
         7d:45:95:2a:f5:1a:31:79:3b:7b:be:37:0f:a3:4f:b2:0b:83:
         29:71:ba:e9:14:da:61:43:7e:37:d9:b6:59:c7:10:15:cd:37:
         12:59:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org