Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3335203d3e20323732313239.roa
File:                     323830333a376631303a3a2f33322d3335203d3e20323732313239.roa (raw, json)
Hash identifier:          wzVONEzLwpSqbRr/n+njtHDxuwI/UPZrY3zev0Ynp4I=
Subject key identifier:   51:23:09:91:94:3C:F2:41:34:42:9D:FF:42:BE:2D:BA:DA:C2:7D:CC
Certificate issuer:       /CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
Certificate serial:       24636E794690A896F788DB3629DDFBF36D8FDD48
Authority key identifier: 71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3335203d3e20323732313239.roa
Signing time:             Tue 05 Mar 2024 17:43:04 +0000
ROA not before:           Tue 05 Mar 2024 17:38:04 +0000
ROA not after:            Tue 04 Mar 2025 17:43:04 +0000
asID:                     272129
IP address blocks:        2803:7f10::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:63:6e:79:46:90:a8:96:f7:88:db:36:29:dd:fb:f3:6d:8f:dd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
        Validity
            Not Before: Mar  5 17:38:04 2024 GMT
            Not After : Mar  4 17:43:04 2025 GMT
        Subject: CN=51230991943CF24134429DFF42BE2DBADAC27DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:c9:33:46:76:3f:80:bf:8d:c3:f4:2b:24:
                    4d:fe:4e:64:70:89:94:51:66:cf:0f:d2:b2:4c:6b:
                    7f:8c:86:9e:db:8d:e5:2f:13:63:e6:42:9e:c0:ea:
                    d7:48:d5:16:a3:d9:4c:9e:6e:cd:86:86:bc:47:6f:
                    21:ff:6c:e4:14:44:6e:6f:47:6c:b3:ae:27:f2:e3:
                    37:e1:41:6a:7b:e6:56:3f:13:45:0c:9f:35:58:67:
                    a6:e0:17:8f:eb:17:66:06:fa:50:50:51:0a:67:df:
                    65:f0:d9:51:2a:b1:89:89:99:71:72:13:f8:43:c5:
                    53:fa:1c:70:7b:c8:7d:91:54:b8:ab:72:68:8e:34:
                    8f:1b:61:6f:c8:7a:89:1c:8e:8b:69:46:f9:65:2d:
                    32:94:59:ee:c5:f2:dc:60:d9:4c:66:c7:e0:dc:c7:
                    77:5a:d7:51:36:00:ea:d4:44:81:0d:a9:ab:51:66:
                    a0:08:7c:58:ef:11:a9:2c:b8:35:1e:3a:28:31:57:
                    46:3b:41:ca:34:a8:12:a1:37:e2:5c:82:ef:21:fd:
                    21:82:a9:fc:8b:30:6c:33:fd:cc:ae:37:80:d4:cb:
                    2c:5a:44:64:34:bd:7f:ce:50:5f:a4:7b:a7:11:7b:
                    41:c6:aa:b1:94:05:d5:f3:32:a9:8d:a0:2a:ee:87:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:09:91:94:3C:F2:41:34:42:9D:FF:42:BE:2D:BA:DA:C2:7D:CC
            X509v3 Authority Key Identifier:
                keyid:71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33322d3335203d3e20323732313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:49:72:67:28:3d:f5:21:54:4c:a7:42:79:3f:d1:ae:e0:
         41:26:74:19:62:7d:f6:ca:31:40:51:a9:ae:98:0e:9d:a4:0b:
         a9:4a:ee:03:51:3b:01:98:85:25:ec:8a:1b:9e:8a:26:c2:da:
         e4:88:c2:e1:e6:b8:71:67:42:ed:0a:c3:df:33:30:9e:bb:e0:
         d9:67:ba:e0:23:ab:73:f6:08:2c:ef:37:72:ca:cd:fe:a7:ec:
         07:a9:98:49:86:06:fe:03:13:14:9c:1d:74:64:4e:c3:ca:fb:
         27:79:0e:2a:89:40:90:d1:fc:d3:e0:7c:c8:55:fb:ea:ca:d5:
         74:dc:04:6a:41:1d:b2:e9:1c:2d:62:89:83:3d:57:95:b3:54:
         b6:8d:cf:ab:24:15:84:fd:b6:9a:65:ba:7c:59:0d:32:5a:02:
         8c:d1:31:60:7d:ff:95:80:2f:74:08:27:cc:0a:a9:3a:4b:c0:
         66:ce:83:34:42:a4:c4:d5:28:01:7d:e7:1e:52:1c:99:74:1c:
         fd:fc:2d:94:4d:30:61:68:ea:46:be:9f:41:3c:15:59:3b:9c:
         a6:f7:7a:4c:71:42:9b:56:da:3b:df:e2:41:60:ef:47:47:30:
         e4:b2:e6:3d:bd:41:95:7e:2b:28:72:b5:79:7c:8c:1c:b8:54:
         52:1b:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:20:46 2024 by rpki-client on console-ams.rpki-client.org