Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a31313a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a31313a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          7xuQPxIb6M64+VP3npfhcwzf33SJm/i35iotk4eFUEg=
Subject key identifier:   D5:90:3F:3F:5A:EF:F3:09:DC:72:1D:62:F7:9C:9A:33:3A:67:92:02
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       7DD37FFB87EE68EBB10D31A6B412C11918FFDFFF
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a31313a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:51 +0000
ROA not before:           Tue 05 Mar 2024 17:45:51 +0000
ROA not after:            Tue 04 Mar 2025 17:50:51 +0000
asID:                     271935
IP address blocks:        2803:7a10:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:7f:fb:87:ee:68:eb:b1:0d:31:a6:b4:12:c1:19:18:ff:df:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:51 2024 GMT
            Not After : Mar  4 17:50:51 2025 GMT
        Subject: CN=D5903F3F5AEFF309DC721D62F79C9A333A679202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:23:bb:9c:44:e1:c3:52:db:d3:04:3d:ab:
                    51:8d:f5:c6:c7:2d:55:ff:14:6b:d3:72:14:bb:45:
                    98:ef:ba:16:7c:9f:57:19:fe:22:4c:93:14:70:c0:
                    f4:bb:d8:3a:5d:68:b4:01:be:97:c5:6c:56:30:08:
                    f4:f1:61:46:b9:51:c4:0b:40:6c:92:ae:3b:43:58:
                    a6:32:12:75:62:ed:0b:3d:7f:60:e6:24:bc:ca:00:
                    11:fa:85:ce:8a:8a:75:0c:6b:0d:37:8e:3b:7e:3f:
                    30:cd:cb:2d:7f:38:f5:b1:71:d4:cf:59:93:8c:b6:
                    c3:30:d5:90:3c:63:c2:21:a8:b7:8d:5d:14:b7:1c:
                    ed:70:f7:18:5d:0a:a7:01:a7:c6:17:17:6a:98:f0:
                    9d:de:ee:bd:be:97:9e:d2:20:6a:99:c5:ac:3c:b4:
                    ad:e3:cf:6d:47:a0:93:53:80:40:64:1f:e3:02:b5:
                    b5:78:0d:7f:85:60:61:25:57:77:98:dc:6f:88:48:
                    f1:6a:80:b9:dd:fd:38:74:6a:1e:f8:dc:32:5d:4c:
                    81:1d:ed:28:a0:1c:de:40:9b:e1:89:37:bc:e9:43:
                    92:8c:30:58:e4:f1:f2:af:65:a2:a7:7b:7b:e9:ba:
                    16:d9:99:43:a8:ae:a2:eb:08:4d:10:9c:55:5d:24:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:3F:3F:5A:EF:F3:09:DC:72:1D:62:F7:9C:9A:33:3A:67:92:02
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a31313a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:86:87:8e:cc:11:49:82:12:fd:ad:b8:c7:1e:57:13:3b:ff:
         0a:08:e3:d2:4e:bc:cb:d6:b3:b0:e1:7f:f8:5a:6f:02:12:00:
         57:86:b7:31:ae:cd:8d:b0:50:c0:7d:8d:63:4e:80:aa:0b:8f:
         07:8e:2b:38:34:a7:9c:09:e6:97:12:94:13:53:52:a5:c5:62:
         48:b5:14:fd:d4:88:63:4d:b6:e9:e5:b2:c4:58:43:91:aa:73:
         a1:5c:9e:42:85:0d:e7:25:b3:1a:0d:d1:86:a6:dd:f2:7a:23:
         88:e0:b5:21:9b:3c:78:b9:24:70:45:76:77:06:f2:d6:07:d6:
         6d:8d:67:24:af:23:ce:5d:09:aa:9b:b7:20:90:53:49:97:23:
         bf:ab:bf:c6:41:ea:dd:4f:42:e7:02:48:ba:b2:3c:70:9d:7e:
         35:c8:54:80:e7:20:c9:5f:b9:57:a8:77:ed:a8:b8:ac:c4:5b:
         83:44:76:3f:22:e2:e0:71:da:7c:d1:30:83:1a:4c:ff:80:9c:
         d5:d7:8b:4d:f3:ed:ee:c3:96:71:2e:e2:11:0e:9b:c9:09:65:
         d4:b9:8e:fc:f1:79:30:db:8f:8c:ed:fa:a4:bd:80:13:71:6b:
         c5:83:e4:9d:58:26:72:f7:fd:53:b8:ea:ba:8b:76:82:52:02:
         30:ec:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:08 2024 by rpki-client on console-fra.rpki-client.org