Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          yVsWoEFp2VMVJgfCmrp2eMq5t+5l3cNBPnrWHQkip3g=
Subject key identifier:   64:1E:A8:6C:6C:B9:2D:B6:D5:29:58:1C:E6:4E:C3:47:E8:6A:1E:1D
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       55116B465FC5D0C120E87F4B2D201D0BACF4A82B
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     271935
IP address blocks:        2803:7a10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:6b:46:5f:c5:d0:c1:20:e8:7f:4b:2d:20:1d:0b:ac:f4:a8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=641EA86C6CB92DB6D529581CE64EC347E86A1E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:89:96:77:3f:07:32:f0:2f:b3:b4:c9:4d:
                    d6:dc:4f:84:63:bd:01:54:b3:f1:5c:5a:be:97:f3:
                    79:e3:c7:df:ee:02:4b:35:bb:37:db:f3:e1:eb:1e:
                    e3:be:9e:3e:67:9c:70:6a:f8:ac:20:b5:14:9f:0f:
                    ba:e1:50:f3:f1:1c:d9:28:50:44:87:36:78:50:24:
                    87:d0:6e:fa:d1:51:98:f9:1e:43:e4:28:9f:20:dd:
                    6c:a5:01:28:89:ad:e1:c0:e3:ad:8c:82:e5:11:b6:
                    30:b1:f2:37:7b:c0:d4:7e:dc:3a:05:f8:54:80:ab:
                    81:3e:3c:8f:3f:3e:60:00:f0:3f:cd:dd:09:5d:24:
                    56:b6:3c:62:38:e3:ab:d3:05:66:6c:5f:df:e7:63:
                    80:f4:ae:ee:75:a5:35:26:c5:f7:fd:4b:17:39:42:
                    94:86:e4:a4:34:3f:78:36:bb:3a:5d:01:9c:8f:df:
                    3c:9a:90:87:f0:3a:a1:7a:76:a9:30:5c:f8:aa:df:
                    2e:48:6f:98:2a:4c:f7:43:d0:53:e5:cc:90:c3:3d:
                    ba:c1:18:0a:03:6e:26:4c:03:ab:ec:fa:d8:c0:30:
                    ba:94:9c:59:a7:d7:87:40:1b:d7:6a:ba:31:5f:f7:
                    f8:13:17:46:86:df:cb:1b:84:92:c2:89:bf:6a:5b:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:A8:6C:6C:B9:2D:B6:D5:29:58:1C:E6:4E:C3:47:E8:6A:1E:1D
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:2f:3e:61:cc:15:77:97:a1:54:25:cd:7d:19:29:c8:04:20:
         cd:c7:0f:fc:b7:84:0e:9e:89:16:cf:e5:15:73:42:3b:00:0c:
         18:9f:ff:1e:32:64:42:f0:09:c2:64:af:7f:eb:4b:7b:ef:c3:
         cc:d4:4f:b6:ee:0f:a1:7b:2e:29:5b:f1:ba:b7:88:6c:bf:63:
         53:d7:aa:a2:b1:27:59:f0:37:8c:51:ab:ec:ba:ab:15:85:28:
         2b:d1:6b:df:bd:bc:fd:db:d6:44:75:ea:17:93:27:c4:af:be:
         88:d1:09:b2:b5:1d:63:6e:41:4d:65:4c:7d:95:0d:48:79:74:
         3a:3d:b2:25:83:5f:ee:fc:d5:c9:37:fa:33:1e:27:85:ea:29:
         af:86:ab:7f:e2:aa:f7:d5:a2:19:93:ac:6a:21:b6:62:bb:ee:
         0c:b1:1f:3c:42:9f:61:82:77:d6:f7:5e:d5:36:61:14:d1:c0:
         60:4c:84:0f:7c:af:90:2b:85:6e:b6:ee:f6:51:3f:6b:1d:e9:
         18:63:93:80:79:e4:76:22:1d:d3:57:a1:43:60:3f:c1:f0:ae:
         34:b2:60:e5:ad:0a:d9:ed:42:f0:3d:00:44:5c:74:46:e0:78:
         0a:ca:9a:74:d5:0a:55:b6:f4:d6:88:f3:d8:d8:5f:1e:0e:bb:
         48:59:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org