Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          XPTRGR58JFVRZGI/bLFrO/YtGa6NL1/E8tTKaq1etsc=
Subject key identifier:   27:56:EC:D0:36:CB:4A:14:C3:BE:AC:CA:3A:37:6A:67:3F:99:BC:92
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       49679F556EC0637E4275068905DD807ABC5F6B5F
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:55 +0000
ROA not before:           Tue 05 Mar 2024 17:45:55 +0000
ROA not after:            Tue 04 Mar 2025 17:50:55 +0000
asID:                     271935
IP address blocks:        2803:7a10:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:67:9f:55:6e:c0:63:7e:42:75:06:89:05:dd:80:7a:bc:5f:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:55 2024 GMT
            Not After : Mar  4 17:50:55 2025 GMT
        Subject: CN=2756ECD036CB4A14C3BEACCA3A376A673F99BC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:3a:70:e1:a9:e6:83:9f:08:7d:f5:e2:e0:
                    be:c9:4d:72:07:04:d0:29:56:09:40:5c:5e:dd:8b:
                    fd:50:be:44:4a:9f:ec:60:b2:b0:43:cb:7d:30:aa:
                    fb:61:98:cc:58:c0:73:3d:ce:6a:46:03:7a:62:02:
                    7f:bf:73:b8:b4:7f:17:8b:7e:3e:95:c3:0f:0d:f5:
                    f0:e2:9f:ee:1d:ec:e7:01:b5:37:52:67:cf:bc:b4:
                    68:20:1e:43:99:72:3e:f1:0e:d5:9e:0c:6e:11:7e:
                    0f:70:06:08:e3:ee:2a:fb:0b:ec:b4:ec:da:85:67:
                    7b:33:f6:b5:e1:80:5c:99:44:5d:61:d3:56:5d:d0:
                    74:ac:b1:00:52:7c:0b:e5:e0:f1:88:20:f0:c2:b3:
                    3d:c5:d6:63:ac:54:5d:ef:a9:e1:ee:20:33:43:8a:
                    b5:d6:c0:11:97:f7:a6:9b:ad:7a:00:48:9a:d5:70:
                    41:32:28:57:e4:a1:89:e4:94:5a:39:d9:97:84:9b:
                    33:66:41:83:69:ef:d2:7c:af:27:07:8a:37:10:cf:
                    20:6f:4e:74:a6:15:97:18:11:b9:ac:84:2b:c5:c9:
                    cc:b2:bf:fb:72:4b:a2:63:96:1e:e8:36:ef:06:ac:
                    3b:30:d3:55:80:7e:1c:1b:3a:07:28:52:7c:16:cb:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:56:EC:D0:36:CB:4A:14:C3:BE:AC:CA:3A:37:6A:67:3F:99:BC:92
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a623a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:69:b2:a9:72:e8:5c:75:ae:f2:1b:05:d8:e7:e1:77:69:16:
         67:8e:d3:97:db:47:3a:93:c5:00:9b:f1:cc:63:b9:4f:95:9c:
         48:84:2a:86:0f:0d:7f:a0:57:bd:8c:ef:d1:ec:c8:6c:23:73:
         bc:4e:72:b3:b2:64:d4:3a:20:35:ff:55:10:d8:11:ca:06:f6:
         98:97:cf:8f:fa:a1:7a:62:97:52:ad:93:34:c3:50:c8:c4:6b:
         11:30:54:4f:b8:d9:92:53:6c:4b:20:e0:85:09:00:37:1f:48:
         ea:41:cb:3d:93:d6:bf:45:6c:e3:ff:f5:82:37:93:35:f7:dd:
         3d:a2:16:60:93:46:a2:e2:b7:d4:77:04:17:9c:1e:93:9d:1d:
         1a:e3:da:21:21:a5:cd:00:63:43:5b:e9:aa:69:52:07:ac:7b:
         a6:d2:28:a4:b4:f0:f5:9b:a4:9f:90:ff:6e:6f:61:24:d1:e7:
         a2:3f:01:6c:d3:2f:56:76:be:a6:7b:bb:04:f4:9a:c4:a0:9c:
         ed:af:fa:9d:bc:6c:62:52:d6:90:d4:9f:f5:12:bf:6f:dc:6e:
         75:ee:cc:06:60:15:69:d2:1c:83:bf:99:8a:93:f0:eb:d8:f2:
         a2:c5:5e:9a:c4:36:a6:52:9d:d0:47:09:75:0f:75:e3:b4:3d:
         88:68:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org