Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa
File:                     323830333a326663303a3a2f33322d3332203d3e20323633313730.roa (raw, json)
Hash identifier:          siIBnYcM8LFep4Zv3GfFOdwL688ZroRpxl3rLDxnagw=
Subject key identifier:   22:F0:CD:9B:E6:0E:8C:34:8A:8B:61:5B:7E:D9:68:4C:96:68:E2:22
Certificate issuer:       /CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
Certificate serial:       7C8B88984840CC7FBE3AF7898E2CB60F49721832
Authority key identifier: AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa
Signing time:             Tue 05 Mar 2024 18:09:20 +0000
ROA not before:           Tue 05 Mar 2024 18:04:20 +0000
ROA not after:            Tue 04 Mar 2025 18:09:20 +0000
asID:                     263170
IP address blocks:        2803:2fc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8b:88:98:48:40:cc:7f:be:3a:f7:89:8e:2c:b6:0f:49:72:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
        Validity
            Not Before: Mar  5 18:04:20 2024 GMT
            Not After : Mar  4 18:09:20 2025 GMT
        Subject: CN=22F0CD9BE60E8C348A8B615B7ED9684C9668E222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:d1:3e:1e:58:53:19:32:ca:6e:75:3c:0e:
                    4f:f7:f3:92:e0:8e:07:23:86:33:2d:df:3b:b0:95:
                    c7:32:59:96:1a:92:d8:cb:33:cb:2f:05:55:1c:35:
                    7d:36:02:0d:83:80:7c:f3:ac:77:5f:e0:f9:08:58:
                    65:b3:d1:74:df:2c:70:50:30:eb:cd:20:b3:fd:66:
                    98:12:3a:d2:2b:f0:fc:a8:a4:6c:1a:01:60:a1:1d:
                    b6:b9:8e:4f:e7:4d:98:27:f1:2a:fd:ce:3e:d8:82:
                    00:43:e7:7b:0e:86:70:c0:36:96:15:0f:7b:1a:9f:
                    83:a2:28:ba:c6:49:cd:86:04:6e:ef:02:17:38:49:
                    7f:2e:c4:6a:58:bc:f5:16:ee:63:31:15:94:87:6c:
                    74:84:fa:18:66:06:de:0c:a9:43:8c:eb:8a:9a:c3:
                    3b:cf:97:dd:9b:07:68:12:08:be:19:8b:9c:ba:f5:
                    6e:4e:c3:09:89:0f:18:a6:f0:9a:9a:3a:e1:c2:3e:
                    c8:0c:07:be:06:ad:28:f9:60:cf:6a:57:79:97:73:
                    fa:97:78:45:77:aa:b7:61:e7:56:06:9c:c4:7a:0d:
                    92:74:ad:09:47:24:59:80:0f:91:16:e8:51:24:77:
                    72:21:3f:56:96:b5:a2:5e:71:b2:c5:38:21:85:52:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:CD:9B:E6:0E:8C:34:8A:8B:61:5B:7E:D9:68:4C:96:68:E2:22
            X509v3 Authority Key Identifier:
                keyid:AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/323830333a326663303a3a2f33322d3332203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f2:b7:17:d8:1b:2f:e9:db:c9:22:74:23:b2:44:78:68:d1:
         cf:4f:ef:0b:3f:85:bb:34:49:6c:da:c0:b8:eb:70:cb:29:6e:
         87:ab:85:f3:e6:98:27:74:8d:e5:d9:03:0f:13:8b:43:ce:58:
         20:41:26:7f:de:cb:b7:1c:2f:48:69:ad:d9:4e:eb:7a:9f:af:
         ff:3b:35:29:fe:99:14:cd:ef:74:13:ed:8e:b5:14:92:90:d9:
         a2:72:94:2a:89:85:ed:6c:cf:af:3d:76:c0:42:1c:16:5b:6e:
         c7:a0:e3:f0:91:9c:18:c2:d6:63:97:9c:95:35:1e:fa:46:a9:
         a4:61:68:60:7e:73:59:ce:35:0d:a4:2a:c7:2c:a7:6d:b2:24:
         55:c6:90:7f:d1:c0:1a:0c:df:f9:e0:45:0d:b8:a0:9e:6c:32:
         d0:77:08:8b:b8:71:b6:07:1c:99:51:31:56:0b:8a:e3:ea:d0:
         4f:82:b9:7b:c1:7a:a6:91:48:d4:45:9f:c7:35:32:c0:a7:67:
         69:ca:48:32:63:50:7c:37:d4:e2:1c:1c:24:40:57:25:b0:12:
         9b:61:8b:14:b4:bf:44:c0:d7:d3:e8:57:43:19:03:9d:a7:4b:
         d3:8f:20:88:6d:64:fe:29:15:40:c9:87:d1:cb:ac:a2:e4:89:
         8e:6b:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org