Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
File:                     323830333a6439303a3a2f33322d3430203d3e20323732393837.roa (raw, json)
Hash identifier:          RZL1oyM93zv+dS6BIpmJXaRsBgkAJSZiVKu1e1sgRJY=
Subject key identifier:   8F:7C:68:16:7B:7A:6E:DA:41:29:4E:A8:13:C6:82:42:CE:71:AF:FF
Certificate issuer:       /CN=D746D75B817C987CF5174C6C1F75102E45E1979E
Certificate serial:       0EE21DCBC7B046B74B9B21E1F4351CD3F23DF98B
Authority key identifier: D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa
Signing time:             Tue 05 Mar 2024 17:45:35 +0000
ROA not before:           Tue 05 Mar 2024 17:40:35 +0000
ROA not after:            Tue 04 Mar 2025 17:45:35 +0000
asID:                     272987
IP address blocks:        2803:d90::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:1d:cb:c7:b0:46:b7:4b:9b:21:e1:f4:35:1c:d3:f2:3d:f9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D746D75B817C987CF5174C6C1F75102E45E1979E
        Validity
            Not Before: Mar  5 17:40:35 2024 GMT
            Not After : Mar  4 17:45:35 2025 GMT
        Subject: CN=8F7C68167B7A6EDA41294EA813C68242CE71AFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f9:fd:bd:f5:ba:03:03:e5:d3:f9:90:57:16:
                    ac:88:ab:88:fd:91:fd:59:f0:1f:d5:57:d4:40:15:
                    5b:07:22:e4:96:b0:9d:a8:b4:84:f3:14:c8:45:a0:
                    b1:28:a9:67:9f:f4:27:42:b3:0a:4c:e2:ab:53:a4:
                    53:8a:a6:9e:6c:97:18:dd:24:b2:e2:13:96:31:51:
                    f8:0c:da:aa:c6:0f:41:48:35:80:bc:82:24:47:e9:
                    45:7b:80:25:14:cf:64:c1:8c:be:55:86:8f:f5:16:
                    d2:b6:7d:c8:0d:9f:4f:6d:49:6e:e1:4c:55:73:26:
                    c4:9c:a6:b5:33:00:02:3d:9c:94:c4:49:dc:4b:d7:
                    e6:fc:55:93:65:6d:0c:38:19:a7:ef:3b:5f:17:aa:
                    39:e0:d5:10:bd:e5:7e:31:eb:9c:28:94:2b:48:4c:
                    c8:a2:8d:0a:74:d1:2a:d1:dd:ac:eb:36:ef:ff:d9:
                    0a:3d:cd:d6:9c:a9:dd:38:fd:35:68:8c:38:8d:a3:
                    ec:71:d7:93:e9:61:3d:24:dd:d0:bb:aa:2e:df:fc:
                    8d:06:5d:72:28:09:67:7e:7a:05:9c:22:30:08:e4:
                    b4:35:94:8f:92:75:8e:e7:aa:ee:59:de:98:dd:63:
                    e7:cc:98:27:ea:1c:f8:60:24:53:c5:33:af:40:77:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:68:16:7B:7A:6E:DA:41:29:4E:A8:13:C6:82:42:CE:71:AF:FF
            X509v3 Authority Key Identifier:
                keyid:D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/323830333a6439303a3a2f33322d3430203d3e20323732393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:77:7e:3d:cc:06:26:d8:7f:73:ac:82:44:e4:d3:1f:d9:8f:
         d8:44:e8:63:a2:b8:30:78:a5:62:29:c8:90:09:91:60:7e:b2:
         06:34:76:9a:49:db:31:6d:5d:ac:12:94:c3:66:ac:5b:10:81:
         6f:9e:82:b2:a4:05:b1:0b:9e:5e:47:e8:c7:6b:29:7a:12:ef:
         a4:6b:1d:a7:7e:6c:ee:fe:c2:00:33:4e:89:3b:f2:53:5e:69:
         e4:af:4d:4e:25:ff:b9:66:2d:af:48:32:f0:db:95:6c:21:c4:
         32:3a:50:0e:95:12:15:d7:f4:41:c9:55:39:d3:b0:71:df:1d:
         c2:eb:34:91:a6:f2:b5:f9:57:17:45:3f:78:ae:ba:6a:36:9e:
         3d:a7:81:67:37:68:1f:ce:21:9b:29:c4:14:b4:db:14:79:77:
         3d:1d:57:11:a4:3e:10:43:e8:c3:ab:18:53:1e:fc:b5:0b:a6:
         00:78:f4:e0:d3:39:46:2f:ad:61:dd:c8:d0:bf:01:75:ff:54:
         96:fd:92:36:05:a1:1b:9c:8b:a9:36:e9:c5:58:a9:07:a6:87:
         7f:bd:ac:e6:07:e0:7d:40:84:09:d8:85:c9:64:60:7e:4b:ce:
         4a:2b:32:22:50:fc:7f:59:c5:ff:43:4a:13:4d:7b:73:33:d9:
         b6:13:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org