Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/323830333a623234303a3a2f33322d3332203d3e20323633383133.roa
File:                     323830333a623234303a3a2f33322d3332203d3e20323633383133.roa (raw, json)
Hash identifier:          zza0mhbhK5f3pQ0yUf/XtcIOl/YD/X+yxKbIxLwfVDI=
Subject key identifier:   71:AD:7A:B2:70:85:D6:88:ED:FC:FC:3C:E8:7B:A5:86:C8:E3:49:6C
Certificate issuer:       /CN=E47B3858EC0FF56062500DAB192BDFE2F320B543
Certificate serial:       67FCAE309EDE10FC27C73307838FB998CA8B0B3D
Authority key identifier: E4:7B:38:58:EC:0F:F5:60:62:50:0D:AB:19:2B:DF:E2:F3:20:B5:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/323830333a623234303a3a2f33322d3332203d3e20323633383133.roa
Signing time:             Tue 05 Mar 2024 17:45:22 +0000
ROA not before:           Tue 05 Mar 2024 17:40:22 +0000
ROA not after:            Tue 04 Mar 2025 17:45:22 +0000
asID:                     263813
IP address blocks:        2803:b240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:ae:30:9e:de:10:fc:27:c7:33:07:83:8f:b9:98:ca:8b:0b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47B3858EC0FF56062500DAB192BDFE2F320B543
        Validity
            Not Before: Mar  5 17:40:22 2024 GMT
            Not After : Mar  4 17:45:22 2025 GMT
        Subject: CN=71AD7AB27085D688EDFCFC3CE87BA586C8E3496C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:0c:62:98:0e:59:5d:46:b5:b4:25:65:8e:
                    e5:96:d5:7e:ff:8f:48:d7:2c:c2:50:7a:59:eb:c6:
                    08:64:6b:8c:45:bb:72:c0:c8:ee:9c:8f:aa:89:b9:
                    63:f2:8a:73:02:45:42:77:00:85:63:e6:0b:98:a1:
                    f5:04:b6:4e:cb:4e:d7:22:92:60:70:4d:cb:d8:8a:
                    00:09:b5:f8:b0:ae:32:b1:6e:18:5b:09:2e:55:f6:
                    9f:b6:0e:e5:1e:5b:18:e4:de:de:ee:c1:6f:03:74:
                    e5:ab:a7:66:61:78:24:53:80:55:bc:cb:7a:1f:c9:
                    8c:66:d6:cd:8b:94:65:41:1a:c0:04:db:7f:ba:ba:
                    e4:52:74:23:e8:82:8d:39:ab:7c:ad:8e:18:1f:1e:
                    29:7a:7c:17:58:50:ce:dd:97:24:5d:69:b9:d7:12:
                    4d:cc:2e:f8:a9:35:2e:7f:3e:03:21:8d:68:74:e5:
                    9a:a2:64:c0:36:2f:96:ab:7c:0a:91:7c:57:35:f7:
                    9e:83:b3:e1:02:bd:90:12:ad:1b:53:4f:92:c1:d3:
                    ed:4e:de:d6:cd:e2:9f:ec:cb:da:cf:ef:f8:33:ad:
                    14:64:51:9e:15:b8:64:ce:f1:cd:41:55:c2:e7:eb:
                    79:e8:bb:01:a5:51:e0:89:3d:1d:6f:45:ae:79:df:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AD:7A:B2:70:85:D6:88:ED:FC:FC:3C:E8:7B:A5:86:C8:E3:49:6C
            X509v3 Authority Key Identifier:
                keyid:E4:7B:38:58:EC:0F:F5:60:62:50:0D:AB:19:2B:DF:E2:F3:20:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/323830333a623234303a3a2f33322d3332203d3e20323633383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b240::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:55:b3:70:a1:8a:b2:98:2b:b5:ec:e2:6c:18:3f:89:27:b3:
         15:ee:89:38:43:ca:8a:6c:0a:56:62:4f:85:56:ca:88:c0:c9:
         fa:51:f5:07:a0:80:99:71:43:9d:ee:57:39:69:e5:d5:22:d9:
         08:da:25:cc:e6:cc:d6:60:3a:e1:93:99:42:f2:f9:19:14:f8:
         39:64:12:71:c6:d5:e2:2e:a0:84:24:bc:46:60:cd:fa:48:bf:
         b1:a6:12:d7:ff:20:a5:80:fc:60:82:41:71:00:22:5c:b4:33:
         08:9d:4a:90:b6:d6:f1:af:57:81:00:d7:87:19:89:2f:af:cc:
         5e:fb:21:f0:74:2f:ea:5f:a2:c5:f5:58:45:e5:4d:ef:91:7c:
         12:71:f2:2f:5d:ba:ee:78:a5:12:92:cf:1d:02:4b:80:55:17:
         36:8e:88:86:3a:c1:0a:66:ea:b6:0c:bb:b4:84:48:c5:f8:d1:
         0c:61:95:49:15:a6:bf:93:a7:d8:71:4d:f4:94:f5:c5:d5:31:
         86:49:88:3c:ab:3a:da:84:42:da:50:0d:89:0a:e0:d4:21:c8:
         b4:52:77:ec:0d:8c:8b:11:3e:27:14:25:a7:b3:b6:c4:b7:26:
         0f:c5:24:3a:70:f6:8f:1c:86:6c:07:cc:f3:1a:ef:b7:ff:16:
         08:35:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:31 2024 by rpki-client on console-fra.rpki-client.org