Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa
File:                     323830333a366365303a3a2f33322d3438203d3e20323639393039.roa (raw, json)
Hash identifier:          NoWnPEoLbwJpz489zMzbYDyxrkpB9sWHJl2s/2w2Xos=
Subject key identifier:   E5:D0:C5:7F:AC:AE:BC:CB:0C:8A:7C:2C:F6:AE:8F:43:BC:98:F1:99
Certificate issuer:       /CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
Certificate serial:       7AA3179E24DCD0C0A378B529B823031856F3ED04
Authority key identifier: 39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa
Signing time:             Tue 05 Mar 2024 18:23:31 +0000
ROA not before:           Tue 05 Mar 2024 18:18:31 +0000
ROA not after:            Tue 04 Mar 2025 18:23:31 +0000
asID:                     269909
IP address blocks:        2803:6ce0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:17:9e:24:dc:d0:c0:a3:78:b5:29:b8:23:03:18:56:f3:ed:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
        Validity
            Not Before: Mar  5 18:18:31 2024 GMT
            Not After : Mar  4 18:23:31 2025 GMT
        Subject: CN=E5D0C57FACAEBCCB0C8A7C2CF6AE8F43BC98F199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:48:9a:e4:bc:8f:b1:43:0d:17:b9:90:8d:
                    d6:55:c8:15:bc:39:29:92:9e:6b:d0:99:a1:a7:ad:
                    e9:49:e3:4a:2b:dc:d2:f0:d7:18:cd:0a:45:04:af:
                    9d:22:77:a3:20:b5:f8:90:64:44:a0:42:45:2d:0d:
                    49:35:ac:13:f5:df:1f:84:19:6d:a2:05:93:1b:f8:
                    27:3a:cc:d7:07:8d:08:f8:47:1d:f1:76:a8:12:9b:
                    a4:42:9a:48:81:30:98:b4:b4:82:eb:11:16:b9:4f:
                    59:c4:d5:e3:d5:ef:7e:3f:26:dd:11:99:fd:15:83:
                    ed:d3:43:94:a0:55:09:73:d5:65:97:b0:80:7a:ef:
                    a3:67:d1:91:02:c9:66:76:cf:7c:a2:ca:5b:60:9d:
                    b8:f7:cb:2b:4e:37:7b:0f:18:42:26:0c:5a:af:b1:
                    96:62:f6:e4:fc:de:27:d8:de:c5:57:ae:73:52:30:
                    8b:49:a1:90:53:41:30:c8:bf:8b:f7:ae:98:bf:03:
                    08:ef:6e:9a:f7:8b:fe:a7:eb:24:0d:c5:1d:d7:bc:
                    6d:3d:5f:84:11:33:65:3f:01:f4:ab:79:06:aa:c9:
                    6e:10:37:0d:5e:76:ad:e4:ea:59:97:d4:21:ef:54:
                    75:60:82:f2:c0:7d:d5:24:23:1c:66:fc:a6:49:8e:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:C5:7F:AC:AE:BC:CB:0C:8A:7C:2C:F6:AE:8F:43:BC:98:F1:99
            X509v3 Authority Key Identifier:
                keyid:39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/323830333a366365303a3a2f33322d3438203d3e20323639393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:c8:d9:f3:de:1a:ae:cf:57:b6:89:5e:07:7e:f2:9d:77:
         45:f0:84:bd:02:50:35:93:de:62:cb:79:5d:d4:da:c8:9a:23:
         2d:88:b5:0a:48:80:3f:9e:ea:2e:66:79:b8:3b:57:2d:de:a6:
         63:47:7e:b9:d8:56:86:a7:2a:f7:4e:b2:dc:19:22:54:64:6b:
         5b:9d:b2:86:52:01:48:f4:b8:bb:2d:72:29:c6:f4:3f:1e:7b:
         a5:f0:6b:7b:2f:06:de:22:08:ea:3d:01:46:89:ed:d7:c0:95:
         21:71:d8:25:d1:eb:76:b9:c4:e8:55:ef:1a:d3:7e:28:7c:35:
         41:31:73:64:71:fd:1f:1c:77:54:60:69:35:76:2e:3e:14:1a:
         a3:b0:9b:47:6e:e8:20:e6:12:61:c9:df:1f:5a:50:b5:5c:63:
         84:70:5d:e0:bf:12:09:8d:26:fc:f7:a9:2c:e7:a1:3c:4b:8d:
         7e:d9:ea:50:cf:0b:03:56:53:48:3c:94:89:59:0a:26:57:7b:
         68:f2:46:d7:48:68:48:97:a7:f5:99:d3:ca:ad:21:31:8d:90:
         01:02:01:d8:76:e9:70:0a:dd:52:b0:82:4e:54:5f:c1:0f:98:
         b5:ad:cc:56:a0:95:8e:5c:c7:b9:0b:43:f8:b2:48:d5:7b:15:
         d8:13:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org