Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          G2fk94de6PeTMlWAdvtZKqhFCgjzW+8XJNIyS7Kzzl8=
Subject key identifier:   CC:78:28:6D:F7:57:D3:17:B0:4A:5C:6F:44:AC:5A:73:6C:C7:DF:6B
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       52F62389CED315D273F673F4878383BCA9D73882
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     271935
IP address blocks:        2803:7a10:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f6:23:89:ce:d3:15:d2:73:f6:73:f4:87:83:83:bc:a9:d7:38:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=CC78286DF757D317B04A5C6F44AC5A736CC7DF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:07:b8:52:d7:16:59:76:1a:7e:e4:13:b0:
                    d8:e6:5f:04:0e:e6:b8:6e:99:4c:af:19:4c:15:60:
                    4d:50:a0:db:7b:2c:cb:a4:e9:3a:63:76:0c:df:cb:
                    12:96:ef:58:d5:46:ea:ea:6a:e6:5c:67:8f:86:6a:
                    99:d5:40:9e:f7:52:e9:bf:68:eb:d4:4f:fc:5e:25:
                    ad:99:e6:2c:fc:0c:2e:a4:00:3a:06:63:af:fd:7d:
                    49:13:f1:f8:3e:9f:b0:77:06:bc:92:f6:70:24:ea:
                    53:f4:ac:58:46:5d:e7:06:be:63:ce:5b:31:db:fc:
                    aa:68:bf:fe:c2:e3:74:72:f2:f5:b1:e4:b6:25:4e:
                    c1:3e:78:bc:5b:8e:1a:12:6a:0a:58:5d:de:69:a4:
                    47:47:39:2d:8d:d3:44:72:b4:67:86:6a:47:03:dd:
                    80:c4:f2:bf:96:77:98:fa:53:d4:e6:30:b7:f5:64:
                    84:71:10:2b:9c:45:69:1f:fb:3c:7b:18:b5:57:c2:
                    2a:4f:cf:f1:c6:4c:5c:6c:44:56:b1:e2:02:db:67:
                    5d:6d:cf:63:47:6d:14:08:24:b1:78:8d:79:b9:83:
                    58:4b:dd:b8:ae:8a:f5:22:9b:2c:b1:38:c5:41:7f:
                    53:e9:02:8a:bc:a2:da:2d:9d:4c:24:1e:12:64:8c:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:28:6D:F7:57:D3:17:B0:4A:5C:6F:44:AC:5A:73:6C:C7:DF:6B
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a613a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:95:e9:cc:67:11:c0:9f:99:08:a3:4c:da:6e:1d:62:cc:
         27:30:a5:29:d5:66:46:7b:63:6d:84:88:b9:5b:15:34:8d:a3:
         71:3a:23:22:40:6a:ac:e5:09:2f:c5:e7:4f:eb:47:25:2e:0d:
         0a:43:85:00:41:a2:dc:d4:71:74:66:ad:cf:e0:a5:a7:ee:e9:
         97:02:98:3c:52:b6:98:dd:55:f3:21:8a:d9:45:c8:d3:43:ec:
         ef:41:cb:7e:eb:ce:5f:52:c7:57:a7:5e:97:3b:8b:03:1d:9c:
         be:8e:e2:13:0f:a5:e5:60:08:c3:e1:c2:64:5c:dd:54:9c:83:
         9d:a7:90:30:d8:c0:2e:3e:eb:db:d9:c2:74:91:65:43:1e:e7:
         b3:fa:a3:e7:df:aa:33:ad:79:7a:e0:b3:e6:26:a4:96:01:5c:
         23:2d:20:bc:fe:bc:38:f2:45:79:7e:d7:6b:00:1d:af:5c:50:
         6b:bc:95:51:86:a1:1e:eb:62:eb:a3:3c:60:54:d5:7b:fc:83:
         c7:c8:b8:88:77:4e:42:3a:56:be:1d:df:b8:9c:4e:39:67:80:
         a7:38:90:9e:0e:57:50:55:56:87:57:50:97:1c:7d:11:8b:ab:
         94:0f:4d:13:19:e8:72:07:50:63:84:3f:78:cf:53:1a:9f:38:
         5f:7f:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org