Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a383030303a3a2f33352d3335203d3e20323732313239.roa
File:                     323830333a376631303a383030303a3a2f33352d3335203d3e20323732313239.roa (raw, json)
Hash identifier:          xm8opuhTiJA1VEL1nyB0o41sgyqtEWr6kQZW83ezSl8=
Subject key identifier:   57:FC:64:BA:32:B9:5E:72:61:B7:D2:8E:73:EE:78:A2:A7:A0:9E:C7
Certificate issuer:       /CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
Certificate serial:       50A2B30D334D67BAA891331732A21EB7274DC4EA
Authority key identifier: 71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a383030303a3a2f33352d3335203d3e20323732313239.roa
Signing time:             Tue 05 Mar 2024 17:43:05 +0000
ROA not before:           Tue 05 Mar 2024 17:38:05 +0000
ROA not after:            Tue 04 Mar 2025 17:43:05 +0000
asID:                     272129
IP address blocks:        2803:7f10:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:b3:0d:33:4d:67:ba:a8:91:33:17:32:a2:1e:b7:27:4d:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
        Validity
            Not Before: Mar  5 17:38:05 2024 GMT
            Not After : Mar  4 17:43:05 2025 GMT
        Subject: CN=57FC64BA32B95E7261B7D28E73EE78A2A7A09EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:f8:75:a4:b7:b0:7b:8b:68:16:62:c4:d2:
                    31:6a:17:0d:c9:fe:46:31:16:e0:3e:28:82:ed:d6:
                    81:20:9d:ef:35:8a:79:68:e1:46:14:7a:5e:c4:ac:
                    66:57:14:29:2f:87:81:3c:aa:e9:22:a1:64:f8:86:
                    a0:7c:d6:15:ac:f6:6e:70:c7:e7:8e:b0:1f:6e:15:
                    f8:e3:c3:40:00:1d:a6:4e:b6:c5:53:be:53:54:bc:
                    00:55:84:34:41:64:fc:e7:ef:35:23:e5:9f:7c:8f:
                    7a:2e:32:a2:c5:fb:f9:07:ff:ce:09:a1:bb:c9:47:
                    61:32:3c:0a:ce:b8:39:35:db:a2:6a:5f:b2:d6:44:
                    e7:a2:89:c1:ba:a4:f0:77:9f:15:2b:f0:fa:5d:91:
                    a9:be:05:d7:ad:ee:c0:a8:7d:68:c8:5b:c8:a3:1e:
                    84:81:68:97:c6:e7:13:8d:16:83:bb:3c:68:b0:d3:
                    d6:26:f3:92:e2:e8:27:88:00:85:f5:f4:8f:4f:ed:
                    7f:ca:43:24:79:5b:a0:d7:00:19:59:0a:1a:12:9a:
                    af:71:6b:27:62:ea:17:ea:48:63:fe:20:ed:06:18:
                    fc:1f:bf:b1:1c:df:c9:80:77:e8:43:ae:60:64:05:
                    94:81:bf:bb:ab:c6:f6:bb:58:43:79:b0:74:57:1c:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:64:BA:32:B9:5E:72:61:B7:D2:8E:73:EE:78:A2:A7:A0:9E:C7
            X509v3 Authority Key Identifier:
                keyid:71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a383030303a3a2f33352d3335203d3e20323732313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         78:4e:86:d3:79:de:56:c9:8c:b6:73:49:0b:fc:98:6f:30:d5:
         ba:b7:a2:40:29:53:6f:f7:33:20:11:cd:cc:3b:c3:da:b8:60:
         a4:fa:8b:42:e7:c0:ab:1f:4a:f3:b6:3b:18:73:14:d3:e2:80:
         ec:fd:63:f3:da:b8:f0:63:75:eb:66:f5:dc:10:81:18:e1:00:
         96:b3:b9:bf:4f:f0:90:11:b6:7a:0c:33:85:38:a2:e0:4d:ce:
         73:ef:04:dd:3e:ac:cc:09:60:8c:af:cf:2d:35:df:8a:6d:19:
         84:1d:6c:c6:9d:28:db:2a:52:5c:36:a3:f1:b3:f6:c7:29:af:
         46:5f:74:9a:17:b3:54:33:0d:97:a0:6d:55:da:c6:31:44:d5:
         69:12:be:68:dd:5f:22:a6:c1:6a:83:38:1a:a3:5e:55:96:ed:
         1a:53:2a:0a:85:6d:43:f2:70:04:27:a7:5e:bc:94:2b:18:08:
         b5:ee:dd:93:36:26:74:d1:6c:19:2c:c4:7f:70:37:0d:b5:17:
         ee:d5:50:36:21:ec:50:4b:ff:f9:8c:df:88:46:9c:a7:08:bd:
         35:d9:6c:9a:cc:75:51:8d:cd:92:8d:d0:bc:63:a2:47:29:c7:
         ca:ae:83:65:0f:a5:f8:35:34:cc:42:36:5c:d5:70:ea:70:a6:
         85:36:6d:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 20 17:20:46 2024 by rpki-client on console-ams.rpki-client.org