Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          aJ5M6+HNhlP8AgecjN4A7iCewPy4OpkhkEm42g2KRn0=
Subject key identifier:   3E:7A:33:1C:81:B7:54:B9:8F:41:78:43:AB:BA:CB:5D:2C:EC:D0:91
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       31922EDE4E28C5EF8D4AAC106CD13E78EBA86D17
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:56 +0000
ROA not before:           Tue 05 Mar 2024 17:45:56 +0000
ROA not after:            Tue 04 Mar 2025 17:50:56 +0000
asID:                     271935
IP address blocks:        2803:7a10:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:2e:de:4e:28:c5:ef:8d:4a:ac:10:6c:d1:3e:78:eb:a8:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:56 2024 GMT
            Not After : Mar  4 17:50:56 2025 GMT
        Subject: CN=3E7A331C81B754B98F417843ABBACB5D2CECD091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:9b:27:25:90:e2:d5:08:85:a4:1f:9d:3f:
                    7a:8d:ef:6a:7f:95:3f:fb:78:a1:a2:55:d8:f4:12:
                    95:7b:dd:9c:d0:5e:7b:49:14:e6:03:69:ea:1b:e6:
                    2c:be:7a:f4:64:32:e0:03:f8:11:6e:13:9a:a6:58:
                    9a:d2:6b:54:67:ad:cc:e5:73:21:19:f4:9b:c3:56:
                    c8:fa:fc:e5:6d:89:e0:42:0a:ec:b3:2f:4b:3b:3b:
                    91:94:9c:0a:d5:0d:31:47:2d:25:0a:e9:4c:53:29:
                    28:21:40:b0:2d:61:1c:51:aa:1d:fc:a9:49:2b:b6:
                    3f:5b:4f:bb:90:e5:d8:d9:29:b2:79:fe:6d:70:e5:
                    f0:3a:c1:ea:7a:46:e5:19:9b:15:24:56:77:a5:b6:
                    0b:20:ea:a4:17:ad:97:43:90:73:71:47:7e:4d:5b:
                    7d:ec:8c:77:eb:3a:74:bb:67:5d:dc:42:8b:a4:1d:
                    dc:e7:f5:4a:d9:0f:b8:79:f6:46:b6:0c:ee:75:96:
                    a8:a7:28:d3:20:aa:6c:c0:4a:a0:8b:ea:fa:0a:45:
                    3e:e5:db:2a:71:d5:d3:d2:c0:d5:73:f5:21:33:67:
                    2f:8c:8e:05:b2:b0:75:e1:49:0a:23:d7:29:81:35:
                    29:d1:6a:0e:e8:b9:99:31:04:48:3c:e3:81:3e:c2:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:33:1C:81:B7:54:B9:8F:41:78:43:AB:BA:CB:5D:2C:EC:D0:91
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:7b:88:95:50:de:4e:c4:0b:9e:27:03:f0:67:9b:53:7d:
         2e:cc:4c:18:69:46:43:99:3e:c6:96:38:e0:53:12:fd:34:53:
         84:c7:27:a7:71:a0:b9:9a:06:77:4c:48:84:22:be:04:d5:6e:
         54:93:ff:44:59:0c:5e:d3:ed:5a:56:19:bb:6a:69:98:0b:43:
         77:ff:cb:75:b0:52:19:b1:03:9f:55:e1:f8:fc:5c:a9:8d:4e:
         73:05:09:3b:3a:83:c8:91:b9:d1:d0:4e:90:14:4c:1e:35:13:
         cc:51:e6:03:93:c7:5d:a6:a8:82:e5:31:e7:f6:57:85:30:e9:
         0f:12:94:b2:c3:f5:b9:a2:ae:b6:8d:00:3f:49:d1:be:e6:df:
         7d:a0:e6:77:3a:9b:14:4e:2e:fb:4d:0e:f5:13:0d:00:9a:e5:
         b8:aa:1a:e3:42:48:1d:20:bb:4b:ec:8b:a8:34:bc:8e:a0:29:
         cc:c0:ea:84:6d:92:b9:e7:f8:ee:ff:6c:5c:71:81:d0:05:fa:
         62:2d:f7:7d:46:20:f5:12:78:db:b4:74:a4:d5:54:d0:15:06:
         a8:de:4a:92:bf:ad:d7:05:44:f3:99:be:85:a4:d8:b0:15:58:
         94:9a:1c:99:6c:c2:99:f4:30:e6:41:b4:b5:0f:4f:49:b3:ed:
         e1:87:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org