Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33332d3335203d3e20323732313239.roa
File:                     323830333a376631303a3a2f33332d3335203d3e20323732313239.roa (raw, json)
Hash identifier:          isp8CwUgVY+vvEBHRDu3NuzrNexjWzBYIkR4NJ+l0yc=
Subject key identifier:   C0:BE:B0:62:47:63:7A:BA:6D:1A:76:64:89:F4:EA:9F:E8:4A:4E:28
Certificate issuer:       /CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
Certificate serial:       3132DA6C712B078FCC034A48A993230C38ABADF2
Authority key identifier: 71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33332d3335203d3e20323732313239.roa
Signing time:             Tue 05 Mar 2024 17:43:05 +0000
ROA not before:           Tue 05 Mar 2024 17:38:05 +0000
ROA not after:            Tue 04 Mar 2025 17:43:05 +0000
asID:                     272129
IP address blocks:        2803:7f10::/33 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:32:da:6c:71:2b:07:8f:cc:03:4a:48:a9:93:23:0c:38:ab:ad:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
        Validity
            Not Before: Mar  5 17:38:05 2024 GMT
            Not After : Mar  4 17:43:05 2025 GMT
        Subject: CN=C0BEB06247637ABA6D1A766489F4EA9FE84A4E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:c1:67:cb:80:e9:ea:e4:db:b9:fe:26:34:
                    a6:fa:ba:55:c0:e7:cb:28:65:78:12:72:c0:c6:cc:
                    0f:52:4d:d3:00:ab:22:16:25:3a:d6:31:b2:e8:15:
                    b5:1f:76:d4:0a:6e:33:73:48:bf:83:31:c3:81:3c:
                    44:9c:ed:6b:a5:ef:d3:38:39:bb:0d:3e:be:a9:0d:
                    8e:8e:d1:06:d9:b6:3a:1a:21:cc:b2:6a:ea:b0:3d:
                    d5:d1:48:df:68:ba:4d:32:e2:3a:a4:b2:ad:fa:b6:
                    76:29:a5:2b:ed:99:97:04:8c:f7:3f:3f:77:1c:76:
                    02:d5:3a:e7:d2:02:48:50:50:f6:7d:e5:8e:34:0e:
                    a5:58:2a:df:59:f5:e7:e7:bf:7b:b9:e4:22:52:8d:
                    e4:a3:2c:7c:29:6a:bb:74:ad:ac:eb:d4:55:23:04:
                    56:8d:78:e2:7d:25:2c:ef:7e:79:15:b5:93:8c:36:
                    8d:ab:d7:8b:ed:0b:d3:37:bf:49:4c:ce:a7:38:92:
                    0c:dd:bf:d3:42:29:ae:2e:8d:72:bf:ac:76:ce:35:
                    9a:37:bf:c4:ac:d8:ba:64:ad:32:d9:1f:21:75:4d:
                    3a:dc:d3:69:a3:dd:05:e6:e3:8a:0d:70:e1:06:ee:
                    49:51:ba:22:23:1c:8a:1d:a8:92:97:31:a0:54:c6:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:B0:62:47:63:7A:BA:6D:1A:76:64:89:F4:EA:9F:E8:4A:4E:28
            X509v3 Authority Key Identifier:
                keyid:71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/323830333a376631303a3a2f33332d3335203d3e20323732313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:73:fb:f2:3d:a2:1f:fe:74:9f:28:d6:72:95:b2:30:c8:
         43:3e:e8:5b:7b:e3:22:69:4a:35:9c:fa:2b:c8:dd:61:37:41:
         06:a3:87:be:2f:a4:f5:b4:85:2e:fe:7f:f8:5e:7b:8c:78:32:
         8f:6b:3c:12:77:f3:88:38:bd:3d:f9:4b:fa:7f:43:2a:02:9b:
         54:7c:18:72:87:35:5f:2a:a0:65:6a:b9:42:4a:67:c9:82:e7:
         88:3b:a4:e7:e3:a1:d7:48:ac:9e:b3:37:96:a7:21:c6:83:23:
         c7:1e:4f:5c:99:fe:b5:eb:ff:78:a3:e5:dc:10:35:4d:16:68:
         b9:51:0f:88:af:fa:6f:ac:d7:94:95:ad:0b:49:cd:9c:e4:9a:
         3f:0a:0a:c2:0b:3c:e1:af:5b:b5:bf:7e:05:d7:dc:7c:6c:13:
         0e:00:54:aa:15:74:bb:0e:3c:3f:be:c5:93:f3:54:42:1c:a6:
         c7:9a:03:f2:c6:b8:a0:4c:51:ac:31:c5:02:99:32:f2:45:ca:
         7d:89:da:b0:d2:a8:6d:96:21:52:d4:dd:58:9c:87:24:4a:8b:
         a6:8f:dd:9a:07:a9:1a:72:2b:80:44:8d:83:3c:3a:61:cd:5b:
         d8:eb:4f:80:a8:8a:35:62:cc:fb:21:ba:ee:73:3b:f7:0e:19:
         8f:40:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:20:46 2024 by rpki-client on console-ams.rpki-client.org