Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          IFwiZcZBhRGWBITvXF4oxHKFggJfyz0DYo2bmjTjwlQ=
Subject key identifier:   89:C0:51:95:63:B8:20:CE:56:03:5C:8C:BF:D3:D9:5C:32:3A:EC:05
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       7AA145B8802BFE95F18F810C852291E1DF0AE206
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 29 Nov 2024 16:15:00 +0000
ROA not before:           Fri 29 Nov 2024 16:10:00 +0000
ROA not after:            Fri 28 Nov 2025 16:15:00 +0000
asID:                     263750
IP address blocks:        2803:9ba0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Dec 2024 04:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:45:b8:80:2b:fe:95:f1:8f:81:0c:85:22:91:e1:df:0a:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Nov 29 16:10:00 2024 GMT
            Not After : Nov 28 16:15:00 2025 GMT
        Subject: CN=89C0519563B820CE56035C8CBFD3D95C323AEC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:e3:71:50:22:f3:06:8c:f3:c8:bf:b6:9f:
                    bd:1a:20:3e:6f:de:c3:19:23:a5:66:35:44:b9:01:
                    06:e2:2d:08:a9:6a:04:1d:48:2c:f1:c4:7d:15:8b:
                    b7:66:34:c0:b7:d6:23:c9:8f:12:13:c8:81:59:e3:
                    46:4b:57:f8:33:b0:84:8b:ff:1d:8e:bb:28:49:b4:
                    55:34:ac:d1:9a:f3:4c:2d:86:59:76:9a:51:89:df:
                    10:fb:fd:aa:6e:15:c6:de:48:a2:33:e4:8c:e2:a0:
                    61:45:a0:56:9c:bc:dc:db:76:df:91:26:a2:a7:d4:
                    91:b9:43:bf:0c:18:10:00:38:8d:8f:31:a8:15:26:
                    aa:15:bc:cc:06:34:26:65:45:63:44:7f:60:5f:24:
                    19:22:0a:af:e2:3a:47:be:a5:f6:20:2c:61:0a:13:
                    4f:2e:8d:50:bb:c2:c0:a9:5a:0f:b2:5c:a7:aa:a0:
                    b4:ab:94:f2:81:35:7c:60:63:78:c6:51:39:ff:79:
                    4a:5e:4b:4f:0e:98:e0:48:ed:4a:7d:56:be:bd:41:
                    40:96:9b:6b:b8:cd:82:28:85:9a:c5:e2:e2:b4:be:
                    30:f5:44:1c:ae:8e:2e:ed:58:17:40:d9:8b:82:77:
                    d4:47:8c:6d:03:fa:e4:b6:06:3b:e9:1a:21:1c:78:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C0:51:95:63:B8:20:CE:56:03:5C:8C:BF:D3:D9:5C:32:3A:EC:05
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:85:a7:8a:f0:65:89:cf:d7:2e:a3:ee:6e:a6:78:24:e8:ed:
         3b:8c:c6:53:b4:ae:03:b6:8b:c3:e5:d3:31:2d:30:98:3e:1e:
         a5:a9:b7:fb:e3:5e:04:32:17:8f:8f:fb:9c:61:fe:2a:3b:d1:
         81:b1:bb:4f:39:a9:b0:66:e6:d5:8c:ae:bf:fb:3c:bb:08:fb:
         55:3b:d2:1d:db:a0:7d:ab:97:5e:01:6f:4a:77:0b:80:d5:83:
         91:5c:a2:63:4b:a4:1c:52:e1:eb:4a:a9:3d:57:3f:74:30:7e:
         0d:71:c0:b2:1e:02:c3:85:69:b1:24:d1:8e:1d:94:29:3d:f6:
         1c:e4:d8:bd:1e:18:07:ac:6b:b0:5a:4a:38:a6:69:a3:74:06:
         dc:40:03:f2:df:8f:e8:fa:dc:88:1d:42:b2:75:56:32:e3:3b:
         26:b5:2a:a7:81:5e:fa:92:f8:41:3b:5f:e7:13:f8:28:17:d4:
         b1:19:c7:48:1e:5e:65:13:2a:2d:a9:32:1a:d1:c7:a5:ef:fd:
         c2:b0:81:7d:c2:57:f3:76:c7:69:56:2d:5c:9d:28:e0:0d:de:
         b7:5b:97:9f:fa:0c:26:84:99:49:04:95:90:a0:8c:b3:b2:37:
         cd:cf:b7:65:49:0f:af:9a:08:05:16:83:04:25:73:fd:f2:43:
         a0:b2:33:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 15:02:41 2024 by rpki-client on console-fra.rpki-client.org