Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a376130303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a376130303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          qJtOC2YhFr7VsaOXU/ekVHCJzXrBEoVau3icBXrEnjQ=
Subject key identifier:   7E:28:91:0C:23:FD:7C:C5:EF:C7:C0:19:F1:AE:CC:A8:E7:11:34:6B
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       159702F93EDA4E5453D037751A9C17E5260BDB52
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a376130303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:19 +0000
ROA not before:           Tue 05 Mar 2024 17:46:19 +0000
ROA not after:            Tue 04 Mar 2025 17:51:19 +0000
asID:                     52468
IP address blocks:        2803:7a00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:97:02:f9:3e:da:4e:54:53:d0:37:75:1a:9c:17:e5:26:0b:db:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Mar  5 17:46:19 2024 GMT
            Not After : Mar  4 17:51:19 2025 GMT
        Subject: CN=7E28910C23FD7CC5EFC7C019F1AECCA8E711346B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:7c:d0:2f:74:cc:90:cd:d7:8e:d1:ca:93:
                    02:95:ff:c4:9c:f0:96:b3:64:37:44:bf:b1:ed:b2:
                    36:1b:2d:ec:4a:28:d3:47:bb:e5:22:9c:8c:10:ea:
                    b4:19:57:33:44:17:e2:2e:94:37:02:6e:f7:2f:16:
                    4b:66:a8:ed:b2:ff:e5:49:f3:74:4a:76:11:1d:8a:
                    40:35:a1:83:5b:c7:f8:a4:29:c3:d0:b9:c2:47:3a:
                    28:dc:8a:59:fe:0e:8c:4f:57:00:b4:94:78:e9:fd:
                    56:11:e8:cf:9f:5a:f2:76:22:d5:56:6e:c5:67:58:
                    93:9f:1e:1e:bc:c1:e7:b2:fd:32:5d:cb:b6:4d:3b:
                    95:f8:4b:c2:bc:55:dc:9c:03:23:e8:14:91:27:ba:
                    02:10:b3:eb:f3:55:c4:15:08:9f:3a:28:64:30:68:
                    0c:72:e1:24:86:3e:f9:7d:b5:c0:b1:64:13:fe:61:
                    54:53:4b:da:a3:66:56:6c:e6:a9:b3:35:10:34:f9:
                    d8:4f:8c:e7:b8:31:c4:c1:01:d2:8e:34:b4:00:b9:
                    81:47:94:38:58:86:2d:05:b1:1f:81:57:48:66:d9:
                    24:91:fe:2c:9f:75:bb:17:43:68:2d:e7:23:60:88:
                    a6:64:4a:6a:1b:ae:3d:ba:43:09:2c:29:ce:e5:55:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:91:0C:23:FD:7C:C5:EF:C7:C0:19:F1:AE:CC:A8:E7:11:34:6B
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a376130303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:de:b3:f7:dc:de:3b:f0:1a:cf:ac:fb:43:f7:35:bd:67:
         36:74:78:2c:5d:7d:ee:bf:b8:ee:12:5d:95:72:cf:d4:2d:99:
         bb:83:45:08:a4:80:1f:04:d5:1e:92:66:00:c1:84:85:4f:e9:
         a4:e9:0e:1d:43:9f:d3:59:88:57:28:5b:91:b1:32:35:9b:e7:
         51:f2:ec:21:c9:f0:74:2c:c5:cf:19:83:d4:dd:5b:2b:2e:0b:
         4b:38:9b:f3:1b:59:7d:ac:2a:9c:10:fe:0c:d1:49:7e:06:ab:
         45:23:31:54:ee:f3:3a:17:6c:b2:58:04:59:51:6a:1f:71:52:
         7b:c5:b7:ca:0f:5d:43:01:65:31:b5:40:21:8c:41:18:aa:39:
         8f:22:7a:96:8c:61:f6:39:09:33:39:7d:84:ff:48:08:38:aa:
         12:4b:fb:5b:f9:d0:4c:ff:1b:fc:dc:e5:0d:22:fb:15:c4:70:
         5e:8a:cc:05:d0:01:46:c2:31:36:15:5b:d3:a8:2c:69:2c:c8:
         d4:b7:c9:54:05:db:bf:70:6c:9e:3a:2f:d3:9d:9f:89:bd:fe:
         b6:4f:e3:98:8e:6f:70:7a:6e:64:82:a7:98:cc:2f:4f:a0:3b:
         bb:22:e7:4a:ee:90:3d:3b:c3:60:6a:70:c4:a9:36:a6:59:09:
         0a:ec:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org