Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/323830333a626263303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a626263303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          yC1QCeia1J+l+2DoCHnJAnUsdpl+GSi2jHf4wBA1bWo=
Subject key identifier:   C2:62:3A:9B:7E:35:C3:0A:B4:A0:D9:07:D8:1D:2A:5E:12:C8:34:DF
Certificate issuer:       /CN=71C4B0679C5C21E2338B4C11642FC0BDAF007624
Certificate serial:       3BA65143075E6B944E78FF36BEC422263FBA3950
Authority key identifier: 71:C4:B0:67:9C:5C:21:E2:33:8B:4C:11:64:2F:C0:BD:AF:00:76:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/323830333a626263303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     264668
IP address blocks:        2803:bbc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a6:51:43:07:5e:6b:94:4e:78:ff:36:be:c4:22:26:3f:ba:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C4B0679C5C21E2338B4C11642FC0BDAF007624
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=C2623A9B7E35C30AB4A0D907D81D2A5E12C834DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:50:cb:51:da:a8:06:b2:74:1c:47:c0:2a:
                    77:ff:b2:3b:53:25:df:62:b9:89:d1:b7:be:83:70:
                    1d:40:74:15:82:ae:9e:6c:bd:73:72:ee:b0:6d:24:
                    c2:cf:f4:30:78:cb:e2:08:e0:6c:ce:b1:24:ec:bb:
                    5f:48:9a:42:46:c9:22:ff:8f:70:a7:52:7c:28:d8:
                    66:3a:fe:67:6e:b0:06:2d:72:8f:33:c5:62:56:4a:
                    39:ed:27:5c:5c:2a:ae:84:d8:c6:d0:36:12:e6:53:
                    97:0b:02:67:7f:01:89:54:24:63:e1:df:ed:63:5a:
                    0a:37:a3:17:35:c8:e8:43:7c:8f:e0:aa:7e:cb:b4:
                    61:0f:50:0f:fc:ed:e0:f7:bd:26:44:be:a7:d8:f1:
                    10:03:8b:e9:b4:25:56:70:9d:e7:e3:d7:89:bf:eb:
                    54:fe:7e:8b:ac:62:ee:4a:c2:f8:2a:25:7e:2d:d1:
                    fd:d5:14:7c:56:65:3e:30:cc:10:3a:34:4c:0a:fd:
                    10:62:4f:f8:89:a4:0e:ff:b7:d8:08:af:4b:62:df:
                    de:7c:26:ca:2e:be:f8:8f:32:f0:e9:56:17:ad:96:
                    f7:d0:8a:8f:71:13:24:db:ec:c0:10:40:35:20:54:
                    63:da:3c:fe:8c:8c:6e:bb:f5:f4:65:16:19:d6:c5:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:3A:9B:7E:35:C3:0A:B4:A0:D9:07:D8:1D:2A:5E:12:C8:34:DF
            X509v3 Authority Key Identifier:
                keyid:71:C4:B0:67:9C:5C:21:E2:33:8B:4C:11:64:2F:C0:BD:AF:00:76:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/323830333a626263303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:70:49:94:21:a2:77:ab:43:92:ee:8b:3e:71:32:45:c9:6d:
         df:4a:96:f8:62:b4:c9:29:5c:e0:58:64:36:e0:52:b5:43:8f:
         65:a5:ef:18:2a:7a:50:73:5b:e9:1b:a4:40:3c:24:92:d2:8f:
         80:b9:15:a9:d0:fb:65:03:e7:0d:c8:a8:fb:0a:fe:a3:38:57:
         14:be:81:7e:c7:99:2c:f8:9b:b3:ca:f9:52:f6:ae:e0:d5:10:
         18:96:05:15:38:28:bd:25:01:d3:67:9c:eb:66:93:e3:4b:40:
         5f:be:3c:44:a2:33:3a:bd:6c:fb:08:50:9d:86:fc:c8:35:71:
         fe:5e:b7:c8:20:3a:a7:51:e5:51:40:9f:99:e5:f4:dd:4a:b4:
         82:4e:0e:c3:33:cc:f4:40:97:f9:c9:61:0e:dc:df:24:c4:e6:
         79:f3:d4:42:f8:8c:70:22:61:6c:9c:a5:ba:0f:8f:5b:d0:76:
         32:4c:09:44:f9:d2:36:ac:e1:59:24:fc:15:a4:62:a4:75:fe:
         b9:c1:d4:1f:10:f0:52:37:af:c1:f6:1c:dd:31:72:70:51:64:
         3a:46:2e:80:b7:4f:1d:13:40:b5:80:88:3f:2e:9f:74:86:ec:
         92:de:73:f1:e5:c7:5e:a7:47:a9:d9:fb:c6:37:93:cf:68:49:
         1e:bb:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:15 2024 by rpki-client on console-ams.rpki-client.org