Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          mNTPpJDPRbx0FueOib/wgyRad8PvRSn1nKKA2vRHAx8=
Subject key identifier:   22:04:B4:55:E7:86:3C:2F:80:AA:8E:83:D8:78:FD:15:82:40:F1:3D
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       075F9A6CD12E0C59DC1375CE8AC9D364FE2C1486
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:50 +0000
ROA not before:           Tue 05 Mar 2024 17:45:50 +0000
ROA not after:            Tue 04 Mar 2025 17:50:50 +0000
asID:                     271935
IP address blocks:        2803:7a10:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5f:9a:6c:d1:2e:0c:59:dc:13:75:ce:8a:c9:d3:64:fe:2c:14:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:50 2024 GMT
            Not After : Mar  4 17:50:50 2025 GMT
        Subject: CN=2204B455E7863C2F80AA8E83D878FD158240F13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:b1:7f:58:5a:c7:48:14:c2:de:3f:ee:d5:
                    d5:ed:56:da:5d:17:e4:9e:cb:69:7a:cf:e9:4f:b3:
                    c4:74:8b:b2:94:b3:aa:41:af:42:46:b1:48:51:43:
                    95:fa:44:c1:49:15:43:1f:d6:9b:1b:95:be:d3:e4:
                    c0:f1:f0:ba:df:68:64:99:0f:ea:f5:3b:5b:06:d7:
                    24:26:88:f5:66:11:ad:c6:7a:69:da:2c:f3:9a:dd:
                    5c:21:c3:ed:2d:8f:95:4d:bf:a9:66:75:5e:6b:a9:
                    1d:83:1a:cc:b5:1c:85:8d:49:52:76:0b:e4:64:4b:
                    f3:67:66:fc:de:63:4f:ae:7e:e7:28:ce:0e:0d:57:
                    c8:06:af:52:5c:a4:05:59:bb:21:89:cc:8d:bc:33:
                    57:01:48:8b:a6:1a:ab:ca:d8:12:6f:26:23:ca:6c:
                    fc:88:ab:e3:33:3e:2c:f5:4e:40:5f:dc:43:d5:7d:
                    cb:82:9a:bd:89:fb:be:0a:13:00:bb:27:69:bd:a0:
                    40:d3:3f:84:87:53:2d:b6:ca:25:e3:7f:63:a4:c3:
                    f3:b6:c2:1a:8f:73:54:86:91:12:2c:69:34:e7:16:
                    88:58:36:96:fa:f9:e6:d9:28:3a:a0:e0:9e:fb:cd:
                    1a:88:ee:b2:ba:3e:f3:5e:98:46:be:33:e6:43:78:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:B4:55:E7:86:3C:2F:80:AA:8E:83:D8:78:FD:15:82:40:F1:3D
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:86:f6:e4:c7:56:82:9b:b9:0e:47:bb:ed:d4:8e:ef:40:0f:
         c0:0c:11:c4:ac:71:f1:fa:38:17:84:8a:0c:32:27:c7:e5:20:
         62:ee:1a:f9:a1:e2:55:16:d6:5c:7d:0f:a2:e8:3b:d9:56:a6:
         9b:44:46:9b:af:03:c2:c2:88:ac:dc:6b:56:ca:7c:e4:a7:47:
         e1:ff:e5:25:17:1d:18:9d:cb:41:58:81:66:c8:60:5a:2d:0e:
         ef:1c:d7:96:05:9b:0a:2c:8b:d5:ac:bb:9a:0f:f3:bc:31:a8:
         4e:4a:8b:c5:5d:8a:d7:05:09:de:d5:97:9d:25:86:00:10:c9:
         c0:ab:d2:8e:66:73:d9:2e:d5:36:d5:d8:30:9b:90:cb:28:e8:
         d5:b0:46:4c:fe:a5:f5:5f:01:f4:67:47:cc:b7:a8:27:cf:f1:
         7c:2f:3f:4b:3c:a2:5c:08:76:1e:fa:17:c0:55:f8:7d:f9:24:
         9b:99:68:40:88:05:de:16:75:28:dd:cb:df:81:43:e7:57:64:
         01:44:c1:47:a9:00:94:f9:88:b6:8e:d7:21:f3:6a:f1:54:19:
         85:a9:85:e6:94:d8:b3:f9:ca:b4:b5:01:65:2e:80:20:ef:e8:
         3f:46:6f:50:db:f8:85:8f:7e:11:cd:ae:44:ec:d1:45:4f:9c:
         b8:ab:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org