Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          QAQBaDsOdrMbuiKSZtCc0NcRVhd0QhHUA/lAoMTg8EM=
Subject key identifier:   A7:10:6F:BD:75:7C:C2:9B:81:DC:EC:A3:C2:54:AF:87:81:47:EC:7F
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       507178791BD80FF82698579DD5337110FD94E64C
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:12 +0000
ROA not before:           Tue 05 Mar 2024 18:12:12 +0000
ROA not after:            Tue 04 Mar 2025 18:17:12 +0000
asID:                     27818
IP address blocks:        2803:3380:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:71:78:79:1b:d8:0f:f8:26:98:57:9d:d5:33:71:10:fd:94:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:12 2024 GMT
            Not After : Mar  4 18:17:12 2025 GMT
        Subject: CN=A7106FBD757CC29B81DCECA3C254AF878147EC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:6b:36:97:03:19:5c:ff:44:a6:69:81:24:
                    7b:4b:00:8b:11:5d:67:58:8e:2d:3d:9e:cd:27:07:
                    3f:c2:c6:6b:ae:e8:87:ab:31:71:29:69:a7:7e:ee:
                    4c:9e:de:a6:b7:87:bf:6d:5d:34:6d:3a:19:5e:47:
                    6e:d5:02:cd:29:5f:96:67:fc:5a:a2:d0:4b:b5:3c:
                    2f:f9:18:19:be:2e:37:7f:28:50:53:7d:de:bc:a8:
                    fb:7a:6c:d2:2a:e2:89:19:8e:2c:cd:33:e5:86:3e:
                    87:3f:47:3f:e4:ae:4a:58:05:78:0a:86:fa:41:aa:
                    5a:10:a7:a3:9f:ab:c1:de:cc:6f:e6:d1:f3:e6:5a:
                    40:19:8a:5b:1d:0b:d3:cb:ea:da:b3:d3:a3:00:6c:
                    6b:4b:f6:53:9f:d7:e2:bf:ab:90:b4:49:59:50:cd:
                    71:8c:2a:31:d1:18:74:7d:d2:d5:dd:29:e2:22:8f:
                    24:82:ea:a0:38:b8:b5:73:0a:04:8f:86:72:e9:dc:
                    69:ef:f2:46:37:df:5f:6a:d8:d4:96:08:fb:24:6f:
                    d9:ed:3f:77:3b:76:cb:d3:93:64:3e:90:da:20:17:
                    6e:ab:ac:5b:bb:cf:6f:f8:6c:aa:bf:36:8c:6b:5c:
                    57:2b:23:70:4d:92:0b:fb:55:c3:53:61:40:84:af:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:6F:BD:75:7C:C2:9B:81:DC:EC:A3:C2:54:AF:87:81:47:EC:7F
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a623030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:db:c8:1a:a4:3d:de:fb:aa:e7:5f:96:4f:b4:25:96:6e:
         4a:ff:47:c8:be:9b:93:d1:68:fd:1a:88:9f:16:a8:dc:d1:5a:
         4c:2d:12:f4:90:b1:40:c8:6d:09:45:da:7b:69:0c:7a:84:e4:
         e8:01:c5:87:b8:bf:4c:70:11:8c:da:86:8a:49:d1:d4:2c:8f:
         77:fd:d5:c5:98:74:6e:ba:7c:a5:b5:76:4d:68:70:56:35:ce:
         6a:85:88:15:e4:f9:5c:10:6a:5d:d7:57:d7:c9:30:04:5b:1a:
         34:ab:25:a5:f8:eb:c3:d2:d2:5d:13:7d:90:35:54:85:9c:40:
         9a:2c:48:73:27:a4:80:2d:5f:3b:41:be:5c:79:fa:90:3b:71:
         55:5d:16:8e:36:63:b0:e6:0a:92:9e:7e:cb:ee:a3:fa:82:2a:
         21:02:13:38:cf:6b:e6:60:72:45:30:70:80:57:81:2e:00:c6:
         00:4b:54:83:78:3e:eb:dd:00:f2:55:d3:39:e9:ae:ab:95:ec:
         47:ba:27:f5:c9:60:4c:12:56:b4:bc:1d:d9:c2:4c:3a:3c:24:
         93:b9:67:3c:ac:ac:56:3a:16:4b:ee:26:c7:21:40:49:e1:02:
         a6:3e:4e:c4:76:71:e0:81:c9:f2:34:4e:6d:fb:59:43:1d:a9:
         19:0e:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org