Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
File:                     323830333a646132303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          tsboLYXDsg7WVx/yYMP+Sm2lMGS9XRUN7zpe/wPBdCs=
Subject key identifier:   07:3D:38:D7:7B:22:15:6D:2F:37:A9:95:78:B8:8E:E6:E1:6B:59:D0
Certificate issuer:       /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial:       6D41ACDCE46A6BA3F48880F3305E5EDAA0D5A193
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:54:56 +0000
ROA not before:           Tue 05 Mar 2024 17:49:56 +0000
ROA not after:            Tue 04 Mar 2025 17:54:56 +0000
asID:                     27951
IP address blocks:        2803:da20::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:41:ac:dc:e4:6a:6b:a3:f4:88:80:f3:30:5e:5e:da:a0:d5:a1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
        Validity
            Not Before: Mar  5 17:49:56 2024 GMT
            Not After : Mar  4 17:54:56 2025 GMT
        Subject: CN=073D38D77B22156D2F37A99578B88EE6E16B59D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:fc:39:2b:2b:4d:8e:c7:14:ec:0c:9f:45:
                    ce:3c:bc:c5:2b:b9:ce:37:8c:48:3e:c1:1b:66:04:
                    b6:c9:3f:5d:e9:4d:58:7e:77:18:41:06:ac:a9:6d:
                    3f:c5:30:4f:5b:b3:2a:2f:ba:ef:d6:e7:63:98:4b:
                    52:e3:ec:90:c0:d7:bd:9e:e3:14:75:71:3d:56:19:
                    15:17:bd:26:e4:1b:cd:b3:15:08:cc:86:cf:59:8f:
                    a7:35:d6:0a:c1:ec:f7:9b:0a:5a:bf:4f:f5:a4:60:
                    45:11:05:09:0f:b5:72:fe:e4:8b:ec:c1:19:e0:6a:
                    fd:1e:7d:7f:f4:0b:87:23:3c:8d:3b:05:6e:5d:33:
                    0b:e6:ed:31:cf:3f:59:db:27:40:cc:fd:70:98:69:
                    90:41:a8:3b:2a:53:b9:d2:e9:13:d5:ef:36:9a:da:
                    86:38:5f:31:9c:c0:d0:ff:b9:f4:b2:76:5d:52:e6:
                    33:cb:e1:56:2b:68:06:3e:0e:c8:ba:d9:6e:bf:6b:
                    25:af:ed:a2:c1:21:18:23:9a:e5:28:f9:98:61:2e:
                    9e:1a:2e:e4:60:29:8d:ea:3c:f0:e7:09:3c:82:ee:
                    55:74:7e:4b:8d:e0:5a:07:7d:7b:75:c9:aa:d5:71:
                    1f:a2:68:cf:17:9b:89:be:b8:4a:79:87:b8:8d:93:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3D:38:D7:7B:22:15:6D:2F:37:A9:95:78:B8:8E:E6:E1:6B:59:D0
            X509v3 Authority Key Identifier:
                keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:36:b5:2c:3b:71:9a:d6:0d:72:40:e5:e1:5b:2c:fc:fe:4c:
         a1:09:e5:71:8e:f7:48:e3:8e:4d:73:fb:84:5e:54:f3:9a:be:
         7a:0a:b8:da:ec:04:c4:8f:9b:f9:99:af:5e:34:c5:b5:f3:87:
         37:b6:bd:34:2c:98:32:bd:2d:8a:34:6e:42:8a:d7:d6:5f:26:
         d3:55:cc:60:9c:37:3c:5f:41:03:fc:1f:6c:ea:3b:58:6a:33:
         15:a4:ec:b5:c0:31:39:f4:83:72:f1:76:9c:d8:e1:67:e1:82:
         86:f5:3b:43:ad:47:48:3a:eb:2c:47:1a:d2:c1:89:99:63:a4:
         62:d2:01:1b:2b:3e:37:3a:b0:74:bc:77:f7:9a:96:5c:57:d4:
         66:34:0d:d7:e0:f7:97:8d:23:a7:fd:b3:be:64:cd:4d:21:f5:
         f3:be:93:61:5f:6d:88:c3:a5:08:a5:af:59:25:2f:f5:82:0a:
         7f:4d:b9:61:21:86:d5:57:4b:91:bb:df:99:fc:b4:47:4e:4e:
         7e:15:47:6b:7d:8c:90:6e:84:74:a3:20:33:66:1e:60:b3:ee:
         60:af:b3:f6:aa:c5:19:4f:bc:5e:67:5f:04:19:66:6c:3e:ad:
         ac:a5:3f:bc:a7:51:fd:86:a8:71:a0:17:d4:82:1e:9d:a2:0a:
         bd:12:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org