Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a653030333a3a2f34382d3438203d3e20323632313435.roa
File:                     323830333a353834303a653030333a3a2f34382d3438203d3e20323632313435.roa (raw, json)
Hash identifier:          L5BCD0POL7MzDmlthOFQgnY2EOGW5ooU9up1jHsPH/M=
Subject key identifier:   88:C9:47:E9:7C:78:5D:F1:6F:77:0A:6C:FD:1D:1E:F5:09:AC:55:40
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       7F388CD7442759FE53F76DA85ADDFE0D92D98E0A
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a653030333a3a2f34382d3438203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     262145
IP address blocks:        2803:5840:e003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:38:8c:d7:44:27:59:fe:53:f7:6d:a8:5a:dd:fe:0d:92:d9:8e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=88C947E97C785DF16F770A6CFD1D1EF509AC5540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:00:fc:ca:90:a4:bf:76:b5:73:23:d5:4f:
                    0a:a2:ad:ac:77:3f:b4:c0:a3:9c:f3:a4:e7:be:2c:
                    fc:49:47:ee:da:9f:7c:50:f0:87:28:af:cc:88:1c:
                    a0:11:b2:1a:b0:fe:e0:ad:dd:fb:e9:e7:8f:8a:0d:
                    71:96:8e:c1:40:5e:f2:a8:c0:3c:0c:71:3f:b2:04:
                    e0:9a:fb:29:63:33:12:06:21:cc:e2:e3:29:94:44:
                    e4:29:64:6c:11:1b:35:c0:f9:40:ae:ab:b9:2e:17:
                    79:e7:05:13:92:65:55:0f:ba:81:b5:52:2f:48:b0:
                    95:14:69:bd:97:a3:c7:1e:74:e3:63:79:6b:90:a9:
                    cb:e3:61:4f:83:5f:81:73:67:44:ea:ac:70:02:b6:
                    fe:84:5b:5e:1a:c9:64:26:ff:a7:f7:56:7e:d5:e2:
                    e6:52:c2:84:d2:32:04:6b:ba:8d:88:07:a0:61:5a:
                    2f:4a:0d:90:14:12:28:1d:f1:be:dd:a0:f3:51:69:
                    2e:a4:9f:f7:c4:4e:66:a7:4d:cd:a3:af:bd:da:6b:
                    b0:1b:92:3a:d9:4f:a8:6c:d9:3d:14:50:12:1f:9f:
                    e3:1f:2c:e9:c5:1a:d3:17:30:dc:9e:2b:5a:dd:99:
                    f7:24:d5:0f:49:50:e1:9a:a5:24:eb:cb:69:b3:21:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:47:E9:7C:78:5D:F1:6F:77:0A:6C:FD:1D:1E:F5:09:AC:55:40
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a653030333a3a2f34382d3438203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5840:e003::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:75:87:f3:f7:bf:b7:4e:c1:11:d9:c1:23:25:78:7a:ae:51:
         a8:0e:41:fb:cf:f3:11:b9:25:78:ae:4e:4d:b2:dd:be:4d:82:
         2d:da:17:30:7d:09:df:d3:29:b6:ac:ee:ff:2b:e4:06:b2:53:
         a9:ec:e8:0e:e9:46:ca:16:b6:5c:73:e8:70:83:e0:88:19:e9:
         c4:19:39:ba:80:1a:9f:06:89:38:6a:ec:66:d4:8c:e6:81:c7:
         5a:fd:90:71:f1:c1:8c:5a:de:18:76:41:39:11:79:b3:0e:c1:
         92:03:ce:29:ad:4f:ee:bf:2b:bb:a4:a6:a6:d4:f2:2c:3e:bf:
         6e:42:dc:73:c3:2a:93:aa:3a:b4:f6:ba:42:9c:69:c6:a3:01:
         24:83:03:cb:9c:45:3f:e7:ce:27:1a:e1:18:8e:51:3b:81:ba:
         36:c7:76:df:2e:09:3e:7a:89:66:3e:ac:4a:c2:0c:67:0f:35:
         08:31:98:9d:54:37:e7:ce:e5:2f:c2:2d:02:9a:cd:e6:a4:fa:
         fd:92:e0:de:a0:cc:16:b7:35:80:80:13:34:55:e7:0e:d7:83:
         bc:c6:dc:91:78:7a:79:13:be:d8:cf:02:38:cf:88:ef:f6:8e:
         78:a9:5d:9a:54:7e:52:9b:03:11:4f:84:d8:6b:af:81:f7:33:
         23:47:ff:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org