Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa
File:                     323830333a616639303a3a2f33322d3634203d3e20323733303735.roa (raw, json)
Hash identifier:          NAmM+xtJ0dB7zX/n0AP2K1P7tK3Lgmk/gp1ePMtr8IE=
Subject key identifier:   94:61:88:11:19:E8:07:CB:BE:B4:51:5E:78:B8:F5:DE:2A:D0:0A:29
Certificate issuer:       /CN=907E38C1CD68D8C46F9016C31EC81B032A2351CD
Certificate serial:       2CF6AE36CB7D30F82103D068715A1BC7650D0FC5
Authority key identifier: 90:7E:38:C1:CD:68:D8:C4:6F:90:16:C3:1E:C8:1B:03:2A:23:51:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa
Signing time:             Tue 05 Mar 2024 18:04:16 +0000
ROA not before:           Tue 05 Mar 2024 17:59:16 +0000
ROA not after:            Tue 04 Mar 2025 18:04:16 +0000
asID:                     273075
IP address blocks:        2803:af90::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:ae:36:cb:7d:30:f8:21:03:d0:68:71:5a:1b:c7:65:0d:0f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907E38C1CD68D8C46F9016C31EC81B032A2351CD
        Validity
            Not Before: Mar  5 17:59:16 2024 GMT
            Not After : Mar  4 18:04:16 2025 GMT
        Subject: CN=9461881119E807CBBEB4515E78B8F5DE2AD00A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:bc:d8:3e:1b:ed:2d:ba:a2:8d:5f:79:39:
                    47:a3:d0:d5:4b:84:4d:ae:b8:b0:28:2c:b1:ca:c5:
                    5d:cc:96:c0:9f:ac:26:45:1d:42:d9:35:94:61:ab:
                    32:07:af:bb:f8:fa:99:e6:26:dc:37:4b:5f:a0:a3:
                    a4:0c:24:bf:ca:c8:29:b8:11:57:ae:55:60:86:35:
                    c5:cd:b0:74:0f:ed:c3:ba:1f:e4:17:9e:ed:75:04:
                    b1:af:2f:a9:a5:7b:18:7a:2a:2b:61:bd:60:1f:94:
                    c4:b3:46:1b:e2:96:46:e4:ef:bc:ce:9a:d1:02:8c:
                    9a:3a:3c:29:ee:57:4c:8c:8b:b8:eb:c7:92:e9:cc:
                    e3:9f:64:3a:be:62:d3:3a:88:df:87:2b:c1:ca:cc:
                    7f:36:f5:37:96:6c:02:92:6d:55:83:42:4c:a0:f6:
                    0b:4b:cb:1d:c3:91:8f:36:55:7b:54:44:92:e0:76:
                    4a:22:b9:fd:3d:85:71:af:ab:99:ac:87:db:a6:7b:
                    9f:a8:ab:af:ec:c6:6b:99:2d:e6:46:8a:f3:27:db:
                    2f:19:3d:98:b1:a1:7e:97:40:e8:88:54:ac:9f:ee:
                    0a:28:a6:57:65:e3:11:04:3b:ae:db:ab:4d:35:a0:
                    87:ed:0f:90:46:bd:34:f0:bd:09:c0:be:2c:b2:d5:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:61:88:11:19:E8:07:CB:BE:B4:51:5E:78:B8:F5:DE:2A:D0:0A:29
            X509v3 Authority Key Identifier:
                keyid:90:7E:38:C1:CD:68:D8:C4:6F:90:16:C3:1E:C8:1B:03:2A:23:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/907E38C1CD68D8C46F9016C31EC81B032A2351CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62F46EBD9FA041CDC9BFA837335CDF7CE880D9370C4B4B973CEDBEC521B1F998/0/323830333a616639303a3a2f33322d3634203d3e20323733303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af90::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:11:10:88:57:53:db:b4:60:7c:10:04:87:b0:4c:e2:18:58:
         21:56:45:86:94:aa:46:93:4e:76:fd:d7:dc:70:60:77:30:94:
         87:0b:eb:e3:d4:07:d4:8d:63:38:e1:a2:f5:5f:bc:19:38:49:
         1c:ed:ca:13:99:b6:8f:f4:16:51:78:49:f7:04:a9:32:69:99:
         da:47:6b:8f:23:b3:f9:b2:cb:76:03:b5:b2:60:6d:7f:de:22:
         88:9b:0e:f4:3c:de:80:16:3d:67:23:cb:0b:c5:5b:2e:c4:7e:
         40:34:03:d6:d2:87:86:61:c7:67:22:bf:9b:44:b0:cf:6a:c1:
         b5:c2:c6:8f:b0:66:27:d2:22:8f:e4:1a:db:23:b9:3b:95:b9:
         bb:08:06:f7:55:30:62:a6:b9:51:57:17:77:5c:70:83:5b:61:
         41:b3:05:a5:19:cf:09:5d:8c:2f:25:b1:76:a0:23:06:5e:df:
         d3:ae:5b:49:0a:75:22:f0:a7:9f:9e:94:9a:72:c5:b4:7f:62:
         0b:8a:b4:90:c4:7c:27:8f:5d:06:b1:0a:04:61:10:ae:f8:b8:
         cf:eb:b9:45:5a:0a:a0:dc:69:cf:14:ff:97:d9:92:f4:09:4c:
         e6:e9:3b:2a:0e:e8:2b:bc:22:56:c6:11:3c:fd:dc:ba:85:9d:
         75:1f:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org