Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666630303a3a2f34302d3430203d3e203134303830.roa
File:                     323830333a626661303a666630303a3a2f34302d3430203d3e203134303830.roa (raw, json)
Hash identifier:          kydViZ9r8I+9sUIzB8okNvjK2rRoO2Qn6chOrdhLvGc=
Subject key identifier:   13:DE:15:EE:FF:69:FD:7E:84:52:2C:08:C8:7A:8A:54:81:6C:FD:AC
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       7E2A283ABDC6B242DB9EF127C69835C3DA3AE055
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666630303a3a2f34302d3430203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:14:28 +0000
ROA not before:           Tue 05 Mar 2024 18:09:28 +0000
ROA not after:            Tue 04 Mar 2025 18:14:28 +0000
asID:                     14080
IP address blocks:        2803:bfa0:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:28:3a:bd:c6:b2:42:db:9e:f1:27:c6:98:35:c3:da:3a:e0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Mar  5 18:09:28 2024 GMT
            Not After : Mar  4 18:14:28 2025 GMT
        Subject: CN=13DE15EEFF69FD7E84522C08C87A8A54816CFDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:c8:b0:bb:6b:70:fb:05:05:87:dc:b5:7c:
                    7e:a3:06:24:08:bf:e1:e8:db:69:ae:70:83:83:04:
                    8f:82:82:9a:02:4a:4d:b9:17:6a:31:44:24:cf:bf:
                    5f:76:b6:d6:87:52:dd:81:51:53:bd:29:d7:c8:12:
                    a1:d2:f6:87:07:bd:54:a0:1e:57:3c:6e:70:09:a2:
                    08:09:06:41:b7:83:c8:28:be:c2:2f:2e:dc:2c:f2:
                    b9:af:86:4c:a4:db:bc:5a:42:87:0a:af:89:d8:4e:
                    8d:f5:7c:7b:e2:1d:1c:87:72:a5:86:f2:d5:46:85:
                    c3:e8:25:57:1f:b2:7d:26:4c:16:d5:3f:7b:05:e1:
                    7c:01:e1:bc:29:c0:8e:8d:71:2f:1b:22:db:58:89:
                    4a:68:7b:12:1f:46:99:f4:f1:73:13:9e:75:4e:a6:
                    28:3c:a0:e3:d6:18:bc:e6:d4:37:59:54:0e:7f:10:
                    52:68:b3:57:1b:25:a0:61:79:ed:62:f1:94:3c:ac:
                    18:3a:13:2b:76:32:cd:69:6d:74:5d:2e:ce:9f:e8:
                    7b:ca:c8:00:1f:56:33:48:98:f3:8b:88:97:ba:54:
                    0a:f3:05:c0:3b:a0:7d:80:5f:6d:73:9e:1c:1b:78:
                    79:07:25:e4:0b:25:4e:33:54:2a:94:07:09:24:37:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DE:15:EE:FF:69:FD:7E:84:52:2C:08:C8:7A:8A:54:81:6C:FD:AC
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/323830333a626661303a666630303a3a2f34302d3430203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:03:ef:22:91:3c:a8:36:66:29:fe:17:c1:24:79:2d:41:
         ea:ce:50:29:3f:1a:61:d7:f3:d5:ea:08:ed:0f:c3:43:27:14:
         ed:be:c5:01:bf:3b:44:43:00:42:14:f5:b9:5f:1b:ac:58:69:
         11:37:8b:da:ab:48:59:41:e3:a0:09:af:7e:d5:85:68:59:ae:
         86:df:d9:2b:50:73:89:fc:b1:69:77:f7:6a:94:c9:5d:55:4e:
         fa:9c:5b:e2:7e:f4:8c:df:25:22:8c:f0:f3:1e:04:12:1a:42:
         74:a4:94:e8:a5:3d:e5:59:18:13:d4:8d:65:36:ce:e1:2f:b3:
         05:7d:b1:2c:7a:af:af:8a:30:c6:d5:ab:f5:02:e4:9d:95:7b:
         6a:df:f6:1f:5c:3b:27:27:fb:94:60:8b:b7:05:2b:7f:05:fd:
         2a:35:4f:da:36:1a:99:70:9e:50:a3:eb:2c:d5:fc:c1:24:20:
         c2:ed:89:ab:db:6e:23:73:9b:87:ad:e9:b6:1f:07:3c:33:86:
         16:1b:58:8b:0d:57:75:e9:99:01:9b:e3:08:22:b6:78:6b:08:
         38:fc:ee:f1:ca:e9:1e:51:4e:0e:93:55:8b:96:68:e9:56:82:
         15:4e:d6:ef:8e:5b:91:75:d8:b6:7b:c7:85:8e:a8:d8:3b:df:
         eb:9c:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org