Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
File:                     323830333a653631303a3a2f33322d3438203d3e20323731393435.roa (raw, json)
Hash identifier:          rtT0u9WToSioTnB8lZxKSZs4pLAZTlYKC6JbnNb2WW4=
Subject key identifier:   DF:98:CA:67:57:16:39:AF:15:1B:B6:3D:59:A9:DE:63:6F:50:6B:F5
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       7B5A33C4365A6D45754E46F8CE742594E37346F5
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa
Signing time:             Tue 05 Mar 2024 18:06:25 +0000
ROA not before:           Tue 05 Mar 2024 18:01:25 +0000
ROA not after:            Tue 04 Mar 2025 18:06:25 +0000
asID:                     271945
IP address blocks:        2803:e610::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5a:33:c4:36:5a:6d:45:75:4e:46:f8:ce:74:25:94:e3:73:46:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  5 18:01:25 2024 GMT
            Not After : Mar  4 18:06:25 2025 GMT
        Subject: CN=DF98CA67571639AF151BB63D59A9DE636F506BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:7f:79:8c:7f:93:2f:0f:53:69:54:4b:6b:
                    1a:27:f2:dd:9c:ae:be:f9:3c:16:32:2f:83:03:5d:
                    78:fe:0b:89:be:1f:f1:5e:bd:c3:fa:a2:ad:8c:e1:
                    5d:a2:a0:28:34:70:84:40:c6:19:04:82:10:ba:40:
                    0a:8e:39:85:dd:17:2d:e4:2c:51:bc:d1:dc:f9:8a:
                    2a:04:99:4d:84:b1:6d:bc:84:a1:5a:5e:d0:60:ef:
                    6f:be:73:45:28:2a:56:6e:3e:67:d9:6b:be:2d:df:
                    c6:58:97:94:ab:fb:29:df:4d:1e:bd:c8:89:be:2d:
                    4c:8b:bd:7e:7c:53:cd:77:c9:8d:04:4e:12:5f:52:
                    f8:e1:bf:24:3a:62:99:10:1e:e4:61:14:63:4a:9b:
                    16:f7:6a:02:99:7b:32:d0:17:9e:01:29:48:8b:d4:
                    33:66:f9:0b:ca:24:d1:6a:23:eb:64:d0:37:d0:30:
                    80:e6:40:30:f6:77:89:d1:c7:82:71:4c:01:ac:08:
                    2a:85:f3:30:40:9a:f6:c6:35:e2:f0:9c:06:c3:a0:
                    e0:26:08:0f:89:5c:30:28:05:8f:00:bf:6d:1f:73:
                    18:bc:1e:86:16:89:8e:24:0e:be:a1:81:fc:bf:9f:
                    10:47:7e:4f:b5:cf:02:e5:58:1b:6c:22:b4:b7:07:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:CA:67:57:16:39:AF:15:1B:B6:3D:59:A9:DE:63:6F:50:6B:F5
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/323830333a653631303a3a2f33322d3438203d3e20323731393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e610::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:83:b0:da:dc:fd:41:a8:d2:00:89:44:4c:e9:00:c6:6a:25:
         d4:27:d6:fd:97:06:83:e2:40:d1:2a:a3:10:f2:bd:27:36:c5:
         ab:80:7e:74:38:51:4e:7e:8d:44:5b:08:76:20:6c:e5:b4:76:
         a4:e6:84:3c:f2:1c:a7:42:11:51:fd:3d:d5:cd:89:38:60:ac:
         bd:e8:26:49:0b:c7:e3:82:6f:9a:66:6a:a0:2d:a3:f0:f5:d7:
         02:72:ed:95:de:23:f9:d9:81:16:05:6f:c7:f5:5b:6c:79:91:
         85:52:d7:4b:fb:ba:b5:35:f2:0a:14:b4:4b:91:de:b4:e5:02:
         53:c4:cb:d8:89:dd:fa:5f:06:61:c5:97:fd:54:a3:4a:3a:99:
         c7:ce:4b:e2:f0:d6:30:1f:c5:8e:1f:80:a5:a3:82:24:e4:b8:
         30:0c:39:80:5b:76:89:b5:b1:e9:89:84:19:ec:f4:09:c8:e5:
         94:c3:77:42:3e:44:8b:83:fd:26:03:f4:c0:a5:90:47:3e:4b:
         2d:4b:e5:ad:ee:a9:5e:b0:44:c1:87:42:59:b4:f4:ab:80:bf:
         85:a0:c9:d5:77:8f:c1:2e:82:cc:a9:91:a3:65:57:c0:3a:4c:
         79:2f:17:5d:d4:33:df:ea:38:0d:8f:a6:b3:8d:ce:27:12:eb:
         7c:e5:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org