Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          YWwF3tmrnvvG2jxU791t6ih3JB1BQR2+qnAvcAmzTLA=
Subject key identifier:   60:90:36:71:88:1B:9B:16:48:ED:27:B7:F4:87:CE:0C:A6:3F:58:ED
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       5AF2140345B5ED6B12D77E3FC6A38B7421767F60
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     271935
IP address blocks:        2803:7a10:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:14:03:45:b5:ed:6b:12:d7:7e:3f:c6:a3:8b:74:21:76:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=60903671881B9B1648ED27B7F487CE0CA63F58ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:75:61:6a:4c:4c:69:24:2a:e5:56:92:43:
                    0f:8a:cb:6b:1a:c5:f6:ed:f8:7d:ca:aa:28:46:c5:
                    72:79:73:99:a6:7d:c0:e5:1a:25:38:4f:cd:46:e6:
                    c9:a0:2c:86:c7:da:fd:a6:b9:af:32:43:1f:a1:ec:
                    86:bd:9c:5c:d9:84:1d:43:31:98:50:e6:a0:82:24:
                    30:37:78:3a:56:b3:75:a4:b8:a9:99:34:6d:92:ea:
                    07:de:3b:55:f9:e9:ce:91:77:4b:fc:f5:60:61:31:
                    9b:3c:4a:7e:3b:b6:d6:a9:51:85:df:7c:6e:c0:ef:
                    1c:02:c4:2b:89:3f:bc:c5:6a:d4:f5:3f:da:6e:53:
                    fb:d0:8a:54:b4:98:03:5c:e6:26:9c:a7:cd:ab:7d:
                    43:15:df:99:f3:5c:f3:ab:29:38:d5:b9:15:7b:c5:
                    f2:ba:40:88:9f:d6:7e:75:16:9d:0f:01:e4:7b:f0:
                    cd:3b:c3:61:0e:67:b7:00:21:41:71:55:f4:eb:84:
                    7c:10:d4:f1:78:f5:53:de:74:48:b0:3b:c5:7a:86:
                    05:12:2f:45:2c:63:94:58:da:5b:34:c7:f7:47:d5:
                    56:8c:69:11:b3:06:36:45:d2:82:b9:18:36:b5:a8:
                    da:de:98:66:dc:7c:90:b2:d9:b8:20:f4:10:cf:c2:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:90:36:71:88:1B:9B:16:48:ED:27:B7:F4:87:CE:0C:A6:3F:58:ED
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:e1:8b:d6:4a:65:db:d8:e0:81:c8:df:8b:2e:64:af:0c:8e:
         10:ae:ce:6e:72:3d:0d:df:df:4f:77:d5:dd:f8:93:22:8a:9a:
         9e:28:03:14:3b:b2:9c:f6:b7:44:41:ce:86:b7:cc:1f:24:31:
         b7:84:a3:8d:e9:3c:25:4b:ae:c1:97:b1:2f:a6:0e:24:9f:2f:
         b5:ff:b8:05:ed:e5:81:52:30:78:3d:84:d4:e1:72:f1:44:94:
         50:81:57:42:03:0c:ab:6a:f6:d9:12:a4:a5:a6:37:da:ac:3e:
         2d:f6:35:8e:5b:3a:61:ef:bb:6a:ac:fb:84:34:06:29:f8:24:
         b5:d6:30:75:d4:f1:98:2e:2d:74:44:84:7e:38:7a:1e:69:14:
         cb:c6:dc:eb:a1:b2:d1:de:6b:0b:ab:29:01:5d:07:99:b8:ff:
         e2:2e:3d:d5:d6:0c:bb:f9:ef:f1:98:d7:50:d6:bd:2a:50:fe:
         98:69:62:43:2b:d6:80:84:5e:42:2a:fd:ea:f1:1b:1b:96:3d:
         01:8f:57:96:46:e0:43:28:ec:ff:fd:e3:98:c3:61:3d:5e:54:
         b2:59:37:29:66:21:3b:5d:d3:05:3c:ad:95:d0:06:c0:03:ea:
         fe:e9:06:6f:e9:8a:a3:61:39:fe:d7:c8:f3:36:67:87:2d:60:
         79:86:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org