Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3332203d3e20323732313239.roa
File:                     323830333a376631303a3a2f33322d3332203d3e20323732313239.roa (raw, json)
Hash identifier:          oWrjijtw5f9wHpE8ZhjA4t0MxxLrs28r2mds5yv9euE=
Subject key identifier:   CC:98:44:A0:A7:DD:38:B2:8B:DE:E5:B6:6F:1C:00:CC:F2:9E:A5:6F
Certificate issuer:       /CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
Certificate serial:       79B6A6808BD53C94C32CEF39966D85AFBF850D71
Authority key identifier: 71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3332203d3e20323732313239.roa
Signing time:             Fri 19 Jul 2024 19:45:00 +0000
ROA not before:           Fri 19 Jul 2024 19:40:00 +0000
ROA not after:            Fri 18 Jul 2025 19:45:00 +0000
asID:                     272129
IP address blocks:        2803:7f10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:a6:80:8b:d5:3c:94:c3:2c:ef:39:96:6d:85:af:bf:85:0d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
        Validity
            Not Before: Jul 19 19:40:00 2024 GMT
            Not After : Jul 18 19:45:00 2025 GMT
        Subject: CN=CC9844A0A7DD38B28BDEE5B66F1C00CCF29EA56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:f9:ea:2d:62:c0:4d:d0:27:b9:63:d8:0a:
                    d1:0d:6d:6a:53:3e:d6:7a:22:b5:f2:56:45:6f:f2:
                    60:e3:f7:d8:36:43:70:a6:96:7b:be:f5:d7:a1:6e:
                    ff:89:9f:97:ab:a8:63:13:b9:8e:ec:9d:8b:e4:2e:
                    e2:49:7e:03:cb:ce:f3:47:26:56:65:66:d8:a3:ae:
                    77:db:8e:b7:81:94:59:7f:d0:6b:c6:fe:ae:b8:bf:
                    c3:b3:32:1e:98:53:7b:74:61:bc:3f:ec:fe:9a:f9:
                    75:3b:d8:9a:0b:11:02:6b:a9:d0:4f:e0:39:14:f0:
                    e3:29:95:50:23:c7:ca:b4:c9:73:6b:ba:bc:02:53:
                    b7:fa:b8:71:c0:56:b7:99:19:ad:0d:70:60:27:00:
                    11:10:c9:10:f6:94:25:51:d4:5a:a1:0b:5b:a3:3d:
                    1b:15:4d:15:97:06:02:72:45:2f:45:a1:d5:d8:b9:
                    ff:ac:4e:3f:8b:9c:bc:41:1b:04:cf:68:c9:f8:35:
                    be:f0:5e:80:a7:4d:41:ae:34:a5:90:68:6c:44:05:
                    c0:5d:01:db:e8:03:96:91:52:84:b3:ff:76:e2:49:
                    5b:a0:8d:13:ee:11:6c:7b:cc:64:36:a9:7e:a4:f4:
                    f9:a9:0d:46:31:8d:4f:55:a7:2c:e5:be:b2:b2:5f:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:44:A0:A7:DD:38:B2:8B:DE:E5:B6:6F:1C:00:CC:F2:9E:A5:6F
            X509v3 Authority Key Identifier:
                keyid:71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3332203d3e20323732313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:38:22:e6:99:5d:7e:f8:e3:c5:38:d2:36:4c:fd:e2:82:
         58:4e:f1:bd:67:4a:0c:18:81:6f:ae:41:df:60:df:7e:e5:a8:
         c8:ed:95:a9:fa:98:ee:25:8f:2d:20:d3:e2:e7:23:0d:52:1f:
         1d:91:52:8a:eb:a5:64:4a:4f:f2:98:a5:39:e1:17:bd:74:76:
         57:86:eb:40:9f:eb:f8:17:1e:16:56:7d:48:3c:58:93:5c:a8:
         18:03:7e:13:84:5d:e5:40:e7:d8:c0:30:c7:cc:0c:6e:38:10:
         d9:bb:d1:41:4f:f1:ae:d9:40:2a:d9:f2:6b:cc:2d:f6:26:ac:
         24:62:68:aa:0e:7f:dc:35:89:fe:a7:43:ba:08:e1:74:6e:00:
         d5:dc:02:dc:93:2d:70:99:93:ae:54:26:59:10:6b:ec:6b:8e:
         0f:db:e6:c0:78:fc:9e:4e:83:45:2e:b2:e6:44:b1:13:fd:f4:
         23:58:80:ed:cc:1e:92:63:f7:ae:3b:56:6c:1b:56:63:77:02:
         a1:df:12:3f:a1:b7:b2:3e:3f:92:9a:79:be:86:d1:bc:14:d5:
         dd:09:4e:0b:9c:eb:3a:09:c8:e3:26:f9:3b:33:bd:6e:ea:54:
         84:ca:e7:78:bc:1e:70:1a:71:bb:9c:a4:3a:79:10:a4:c8:c4:
         d1:c6:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org