Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          WPks27iUqeK/mhfPzBC9sa0ztr758iFjrSXFqODZR0w=
Subject key identifier:   48:FF:58:F8:14:52:38:5F:4B:EA:CE:86:62:3F:49:23:81:49:29:92
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       79E2118FB7B89E811A06B5716B89C18F0EDA0D7C
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:57 +0000
ROA not before:           Tue 05 Mar 2024 17:45:57 +0000
ROA not after:            Tue 04 Mar 2025 17:50:57 +0000
asID:                     271935
IP address blocks:        2803:7a10:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:11:8f:b7:b8:9e:81:1a:06:b5:71:6b:89:c1:8f:0e:da:0d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:57 2024 GMT
            Not After : Mar  4 17:50:57 2025 GMT
        Subject: CN=48FF58F81452385F4BEACE86623F492381492992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:b8:7a:d6:c3:84:f2:d1:cf:af:17:65:b8:
                    39:05:ad:0b:ec:e5:df:e0:2e:31:b0:7b:35:96:93:
                    0e:af:d3:3d:43:d1:c2:65:87:7f:30:48:f9:75:69:
                    b0:af:92:58:61:62:45:6f:f0:2c:0f:57:87:6c:6d:
                    27:42:36:02:20:ac:36:dc:0f:b0:18:15:21:19:de:
                    df:b6:8a:56:e1:f7:44:44:97:60:5a:b8:27:8a:68:
                    7b:0d:d3:f8:0e:b7:1a:db:8a:d5:1a:97:a2:05:95:
                    98:8a:0a:94:44:50:e8:2d:72:23:22:8e:0c:cf:f5:
                    15:e4:59:b1:79:e3:55:18:bd:7b:4d:8d:57:99:d5:
                    a5:b3:25:82:a2:97:47:dd:43:39:f1:d0:96:c0:15:
                    c4:89:0f:e4:7f:24:9f:c3:fc:db:75:24:01:01:bf:
                    13:61:99:49:58:fc:68:9d:44:78:28:ea:74:c0:5f:
                    d9:b2:6b:7d:58:bb:85:6d:c3:6c:bc:a2:76:ca:71:
                    40:b8:6d:ce:dc:01:08:ed:2a:0e:01:28:d2:5c:5f:
                    82:45:71:91:92:6b:ee:a1:0f:df:20:13:eb:6b:21:
                    39:30:39:5a:49:ec:d8:7d:b2:6c:b2:70:6d:ca:a2:
                    7d:2f:1b:33:47:4a:de:43:09:75:6e:e3:53:4f:09:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:58:F8:14:52:38:5F:4B:EA:CE:86:62:3F:49:23:81:49:29:92
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:83:de:e8:5a:b9:89:6a:e5:3e:dc:b5:bc:d6:87:ef:60:f8:
         b4:09:e7:b8:be:2b:1c:6c:aa:6b:4e:39:9a:61:5a:4e:ef:fb:
         2f:6f:91:93:33:e3:d5:85:e9:03:35:82:83:c2:5b:c1:be:11:
         f3:c8:b9:78:fd:ba:a5:f7:19:c3:0e:e3:e3:ac:81:c1:87:88:
         da:41:d2:91:cc:b3:bb:02:56:7c:d2:ae:48:8c:5f:47:0e:23:
         e5:d0:f8:23:96:5f:3c:fc:8c:9e:97:50:7c:26:01:aa:5a:c8:
         aa:f0:8b:f3:54:49:9c:b4:aa:c1:3d:49:d8:7e:34:e7:6c:91:
         a9:33:a3:fa:0b:58:77:ed:8b:91:48:11:8f:e1:0a:42:0c:a3:
         f7:c5:e9:90:51:0b:29:bb:78:de:78:2e:d2:07:24:36:7b:88:
         c5:dd:79:e0:6e:54:cd:ed:1e:26:e3:92:41:f3:1e:8b:22:58:
         1a:31:63:09:6b:57:47:23:aa:99:bc:e7:08:f0:38:20:9d:cb:
         1f:86:a4:04:0b:bd:a3:c9:c9:56:72:bb:93:ad:46:21:61:6b:
         ec:38:78:00:2f:a8:70:f3:d4:0d:17:5c:08:ba:4b:6a:3b:32:
         ae:2a:80:21:4c:60:cb:8f:ed:54:26:c1:ea:1c:e3:15:b4:e1:
         56:0b:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:08 2024 by rpki-client on console-fra.rpki-client.org