Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa
File:                     323830333a383763303a3a2f33322d3438203d3e20323731393233.roa (raw, json)
Hash identifier:          qAZj5Arsjuoc6M9trfJ5ZNkPbQdqofvcZ9ftznF2CN8=
Subject key identifier:   72:3D:D9:D7:DF:FE:40:6E:AF:1F:C4:15:72:D9:5A:38:15:FD:58:CB
Certificate issuer:       /CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
Certificate serial:       5199E881F0D085B7E977AFC27272976BE71C0F29
Authority key identifier: F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa
Signing time:             Tue 05 Mar 2024 17:46:22 +0000
ROA not before:           Tue 05 Mar 2024 17:41:22 +0000
ROA not after:            Tue 04 Mar 2025 17:46:22 +0000
asID:                     271923
IP address blocks:        2803:87c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:e8:81:f0:d0:85:b7:e9:77:af:c2:72:72:97:6b:e7:1c:0f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
        Validity
            Not Before: Mar  5 17:41:22 2024 GMT
            Not After : Mar  4 17:46:22 2025 GMT
        Subject: CN=723DD9D7DFFE406EAF1FC41572D95A3815FD58CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:18:1a:0c:83:34:10:a8:24:aa:6f:87:bd:
                    ab:aa:ca:32:7d:bb:2c:32:6b:36:78:94:63:8a:9d:
                    85:0a:4b:c7:c8:1d:7c:99:b2:e4:42:31:f4:c0:02:
                    54:0c:cd:9a:64:f6:4a:aa:78:ce:f3:a0:94:74:c4:
                    81:8b:4f:3f:e7:92:48:46:cf:72:08:1e:8b:1a:1d:
                    28:fb:32:ea:b2:d8:a6:41:af:a1:14:02:a0:fc:58:
                    fe:7b:28:af:b9:96:aa:96:55:23:53:61:2d:47:9a:
                    35:e8:46:3f:bf:86:30:73:49:55:07:a6:a7:5a:86:
                    2f:56:81:99:82:0d:aa:ce:25:20:64:4e:ad:48:7d:
                    c4:ea:6a:e1:b1:d0:d7:0d:a4:fd:93:da:35:69:c1:
                    81:71:ea:b6:b0:dd:7d:e8:5c:d9:35:2e:1e:66:c5:
                    38:9a:c5:ac:05:cc:c1:9b:93:dc:a5:5a:2d:c1:5a:
                    b6:37:7c:75:c9:b4:25:b4:c4:bc:50:8f:27:cf:12:
                    a1:dc:6e:99:83:ba:2d:02:73:cb:b4:b5:9b:c3:67:
                    f7:79:76:43:9d:17:38:1e:66:ba:1d:c5:f9:3f:8b:
                    21:bb:c6:32:6f:48:b4:c7:e7:27:03:31:94:e4:bc:
                    23:5f:e1:db:98:52:31:9f:a5:9b:8d:1b:41:cd:65:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3D:D9:D7:DF:FE:40:6E:AF:1F:C4:15:72:D9:5A:38:15:FD:58:CB
            X509v3 Authority Key Identifier:
                keyid:F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/323830333a383763303a3a2f33322d3438203d3e20323731393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:33:5d:6d:e4:cc:ce:14:aa:bb:a6:4e:78:90:9a:17:61:
         b1:16:d1:42:a7:37:cc:da:ba:3c:5b:55:d7:f3:ee:ca:52:59:
         97:99:80:97:57:c2:9e:55:b9:50:0d:28:bb:2e:d3:7f:47:37:
         0b:31:d5:21:3c:99:ff:04:74:71:55:25:c1:7e:65:34:63:58:
         9d:a1:b1:13:48:24:e9:c7:90:6b:cc:2b:05:9d:dc:59:0c:70:
         e8:dc:33:75:e4:75:d2:48:13:e1:de:b9:50:4f:10:ef:69:83:
         2f:f8:11:7a:ad:5c:6e:36:7e:38:13:6d:19:39:3a:4a:8a:aa:
         f8:7f:4e:56:ae:9d:2f:7d:62:46:89:c6:ee:1e:f8:7b:61:90:
         59:8f:a5:61:eb:71:19:a8:80:78:32:83:97:80:cc:bb:b2:03:
         ac:60:36:91:e1:77:2d:3d:49:df:f2:29:5c:58:a6:b7:6f:63:
         97:a5:61:da:10:33:bf:9b:50:d6:83:d6:42:e3:03:dc:e9:36:
         24:76:6d:b0:59:2a:37:ff:cb:c1:bf:18:b4:00:ce:a1:fd:20:
         70:c0:01:8e:8e:2f:10:67:f5:6a:32:7b:9c:c8:27:01:8f:a5:
         91:3d:b3:f4:6d:5a:95:00:53:d4:58:30:15:46:f7:e5:f6:ae:
         94:fc:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org