Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          NIu0NeNpom3Ni2Nud9yxjJjO95aIyT/YHj7+tj3ACkM=
Subject key identifier:   E5:E6:2D:BB:3B:D1:E2:F7:28:00:CC:A9:17:B2:A4:C8:FA:24:04:05
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       507260B4FB4EBB8017745AEA291EEF3E76457B74
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:55 +0000
ROA not before:           Tue 05 Mar 2024 17:45:55 +0000
ROA not after:            Tue 04 Mar 2025 17:50:55 +0000
asID:                     271935
IP address blocks:        2803:7a10:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:72:60:b4:fb:4e:bb:80:17:74:5a:ea:29:1e:ef:3e:76:45:7b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:55 2024 GMT
            Not After : Mar  4 17:50:55 2025 GMT
        Subject: CN=E5E62DBB3BD1E2F72800CCA917B2A4C8FA240405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:5a:5d:b4:47:ca:3a:df:6e:bd:24:ab:dd:
                    d3:9d:1d:87:02:66:69:8f:5c:89:b1:87:91:dc:33:
                    9f:1c:bb:ca:f8:22:3c:7b:bd:8e:4e:a4:d7:65:24:
                    68:66:da:1c:6b:a5:d4:f9:ff:bb:95:49:8f:df:ca:
                    e0:39:27:75:34:e0:3b:10:a3:09:6f:82:ff:a0:6b:
                    c2:28:49:bf:ec:ba:d4:53:94:e5:0f:53:4b:23:5b:
                    78:45:01:18:6c:58:9f:ba:72:77:f4:e9:cb:fe:a6:
                    14:11:df:37:f1:a6:24:88:57:87:9a:b2:9c:3d:cc:
                    56:5e:79:c3:eb:fd:30:eb:a8:38:15:0b:88:dc:cd:
                    64:3d:9a:f2:7e:a3:f8:91:2c:05:ba:c6:03:a7:86:
                    32:1e:35:bc:95:cf:74:f2:e0:cf:bd:0c:a4:f6:56:
                    32:cc:d4:99:20:23:dc:da:80:ae:6a:b1:1a:5a:c8:
                    0c:c8:43:9d:92:ed:de:a1:69:b3:33:7c:4e:43:f4:
                    c6:99:c9:81:9c:25:ea:0b:57:75:86:2e:be:88:d4:
                    13:6b:c9:ec:b0:a0:dd:1b:59:7d:a4:7c:d9:26:29:
                    71:12:27:46:95:ca:95:3e:50:e6:64:e4:59:fd:24:
                    08:26:73:cf:f9:1a:c4:b0:de:bc:d2:15:19:5f:8c:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:2D:BB:3B:D1:E2:F7:28:00:CC:A9:17:B2:A4:C8:FA:24:04:05
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a363a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:51:ba:95:31:ea:2f:b1:91:b7:27:5a:ba:1d:1e:f2:5c:
         d6:18:e9:ab:7f:30:3d:a2:86:45:8c:0e:e5:3e:b7:90:1c:b8:
         54:cd:fc:ac:41:a9:52:d2:2a:24:c0:c2:02:1c:af:57:c2:aa:
         43:15:f1:dd:b4:dc:77:ba:37:90:b1:1f:e6:ad:95:a0:3b:9b:
         3c:2a:06:a6:6a:a1:5d:c2:21:11:57:92:4d:a4:ea:cf:c9:ad:
         f8:a7:03:8b:f2:d4:8c:08:1c:cd:28:0e:a0:c7:b4:e1:a8:f2:
         b5:29:d3:ad:59:2b:f9:53:43:71:0f:37:02:a6:e0:4b:a2:e8:
         e1:5f:65:67:22:4a:d0:9d:05:f5:1a:5c:07:89:b2:36:b3:6c:
         c4:eb:f3:c4:33:d5:1d:3c:fc:1a:41:40:1d:8a:4b:f5:fd:61:
         7e:a5:b8:09:9c:29:22:25:d2:01:62:3e:81:c9:19:08:92:f2:
         7b:cf:90:7a:2f:c7:4b:51:b3:6a:0e:5e:c6:7f:1c:31:7d:40:
         ac:5a:20:0c:13:e7:e3:de:95:21:1a:e0:63:5d:42:5e:f8:7f:
         df:40:e8:94:02:92:b8:0a:87:55:a0:11:fa:e9:ac:a5:cd:9b:
         8d:2b:9b:0f:33:12:43:3d:6c:91:75:d3:c5:82:a1:2f:e1:ff:
         48:c9:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org