Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa
File:                     323830333a356639303a3a2f33322d3438203d3e20323733303834.roa (raw, json)
Hash identifier:          dSsOnc0oDuLiHibiOLkbTBEhts7yvpent+95sMUf46Y=
Subject key identifier:   E7:92:9B:70:07:FB:B0:20:A4:DC:25:11:02:10:30:B4:6F:40:91:EB
Certificate issuer:       /CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
Certificate serial:       0BB219A69F31A462176B4E0B7AACB4B0F525B3C9
Authority key identifier: 34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa
Signing time:             Thu 21 Mar 2024 01:10:00 +0000
ROA not before:           Thu 21 Mar 2024 01:05:00 +0000
ROA not after:            Thu 20 Mar 2025 01:10:00 +0000
asID:                     273084
IP address blocks:        2803:5f90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:19:a6:9f:31:a4:62:17:6b:4e:0b:7a:ac:b4:b0:f5:25:b3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C
        Validity
            Not Before: Mar 21 01:05:00 2024 GMT
            Not After : Mar 20 01:10:00 2025 GMT
        Subject: CN=E7929B7007FBB020A4DC2511021030B46F4091EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:eb:b1:6e:1e:e9:ec:f1:6b:06:6a:a0:1e:
                    32:b6:5d:45:27:2e:0d:89:e0:02:98:83:c9:7d:71:
                    22:1f:1b:8f:91:e5:c4:c3:7a:7f:b0:56:a1:8c:92:
                    17:1d:84:0f:50:83:c1:43:52:4d:b5:1b:76:87:ca:
                    3d:dc:c4:45:31:85:5c:09:ff:33:27:3d:be:ae:6f:
                    9d:34:eb:8b:98:f2:47:2b:83:df:24:30:f3:ab:be:
                    b4:e0:4f:65:2f:3a:db:0a:66:81:e0:a4:1e:d5:02:
                    d4:11:ec:12:65:3f:c7:5c:d1:df:cf:06:b1:5e:1a:
                    46:d4:12:a3:b1:51:12:9a:85:8e:76:a4:22:c8:55:
                    a6:3e:7e:30:eb:8a:1c:be:ba:ce:7c:84:a9:9a:13:
                    32:7c:fe:99:b5:14:cf:a4:f9:54:a8:6d:c1:64:8a:
                    91:68:af:50:6d:76:29:f4:14:10:aa:09:b9:f6:13:
                    34:5f:f2:4a:ff:99:6b:7d:b4:87:55:77:2c:4e:c0:
                    f5:be:33:26:4f:95:d3:27:50:d3:ee:61:bb:6e:ee:
                    e1:4f:41:d5:f0:12:95:ba:95:62:18:71:49:5e:21:
                    5b:0d:89:f7:8c:e1:bf:57:2a:4a:54:fa:e5:fd:17:
                    f0:bd:21:80:51:2b:b9:5a:f4:09:de:f9:2e:15:0f:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:92:9B:70:07:FB:B0:20:A4:DC:25:11:02:10:30:B4:6F:40:91:EB
            X509v3 Authority Key Identifier:
                keyid:34:69:4B:5E:07:45:E0:3F:B2:BB:99:21:59:AA:EB:F1:EF:9E:BD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34694B5E0745E03FB2BB992159AAEBF1EF9EBD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F00B971E11C10680D64916C3BD9B4ED26BB5511F8BD5E57059E3ED1D3B6251E/0/323830333a356639303a3a2f33322d3438203d3e20323733303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:8f:e8:4b:b8:c2:1a:7f:53:03:9b:8c:8d:d6:b7:12:ff:
         10:5c:48:ea:bc:5e:c7:6d:64:71:26:55:3a:c0:20:11:89:37:
         1b:73:ec:ee:56:76:96:d9:45:7f:38:54:42:20:e5:03:69:17:
         cc:3a:55:86:9c:71:d9:86:c6:0e:81:94:1e:2f:86:4b:75:6e:
         76:3e:d6:c6:79:60:c5:13:8b:02:68:ef:80:f9:7a:bd:1c:f3:
         ad:d5:d9:a9:c9:66:b7:43:70:f7:bc:9d:3f:91:2f:3d:c5:8f:
         7a:9e:26:3f:89:74:99:81:28:ce:63:12:e8:73:c1:7c:93:88:
         06:ed:cb:1a:4e:aa:73:96:d1:cb:92:1b:b6:1a:2e:70:95:43:
         fc:46:12:91:40:2a:9f:6b:e4:d3:d2:3f:ae:96:e3:00:0e:da:
         9d:93:72:9f:f0:fd:6c:7b:f5:97:da:80:97:81:dd:bf:3b:77:
         d1:8e:44:8b:f0:0f:bd:38:63:07:3e:28:39:c6:af:8c:18:08:
         57:6b:b3:73:2d:cf:60:e1:82:56:f3:8c:05:71:ad:19:5a:d7:
         61:a8:15:61:07:cd:14:1a:fd:99:93:e4:fb:e3:55:7e:76:bf:
         0a:4b:42:bb:44:d3:22:1c:8b:45:81:cf:16:63:ee:ca:45:3b:
         84:52:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org