Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa
File:                     323830333a353065303a3a2f33322d3438203d3e20323639383537.roa (raw, json)
Hash identifier:          Zr2pgv7QbWJfeAG/JY3C3Lr13wuy1MTm3x0Qnd+dxL0=
Subject key identifier:   D5:15:E5:BA:15:6C:1D:09:6E:3B:45:87:F4:A5:C5:EE:82:43:D9:4D
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       63985D3C3719A1348311BB1DD2D4ED64226C8454
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa
Signing time:             Tue 05 Mar 2024 18:02:01 +0000
ROA not before:           Tue 05 Mar 2024 17:57:01 +0000
ROA not after:            Tue 04 Mar 2025 18:02:01 +0000
asID:                     269857
IP address blocks:        2803:50e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:98:5d:3c:37:19:a1:34:83:11:bb:1d:d2:d4:ed:64:22:6c:84:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Mar  5 17:57:01 2024 GMT
            Not After : Mar  4 18:02:01 2025 GMT
        Subject: CN=D515E5BA156C1D096E3B4587F4A5C5EE8243D94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:17:a4:e3:2e:32:0e:d5:9e:bf:80:8a:c3:
                    89:d1:7b:e3:13:17:d7:ba:a4:2f:87:bf:bd:d3:86:
                    57:ae:a8:b1:5a:88:09:28:8d:35:5f:ab:19:42:fc:
                    67:cd:9b:e1:76:46:3b:3c:2a:8b:70:09:e8:d6:cf:
                    68:e7:67:e7:97:b0:d8:00:0f:74:ce:eb:07:ea:36:
                    92:c7:c4:c7:28:86:ed:d7:d7:88:21:ee:0f:76:ce:
                    cf:e8:cb:74:34:0d:d0:dd:ed:ca:ce:0e:23:7f:cd:
                    34:15:eb:97:a9:72:ac:67:8b:af:8c:6d:07:dd:c9:
                    db:3d:7a:ba:00:2c:34:10:2e:91:50:12:47:1c:43:
                    20:78:10:f0:79:f4:4f:53:4a:f7:f7:11:f1:6d:6c:
                    4b:a6:2b:24:91:96:63:c3:3a:4f:52:8f:f9:f9:5d:
                    4a:e4:a4:eb:8d:5f:ba:91:10:42:7e:99:e8:31:26:
                    a6:b2:04:d5:c5:9e:ea:3e:63:0d:eb:0f:8e:4a:c4:
                    2e:96:1e:1a:f7:30:2c:ec:23:90:f5:fb:12:9d:d6:
                    e4:80:a8:4f:a9:06:0a:9e:4c:82:42:e4:20:3c:2d:
                    81:4e:b5:51:6f:27:0b:d5:1d:73:09:07:bf:48:89:
                    00:7a:ad:1a:41:0e:9d:b0:39:86:da:0b:9b:2f:19:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:E5:BA:15:6C:1D:09:6E:3B:45:87:F4:A5:C5:EE:82:43:D9:4D
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/323830333a353065303a3a2f33322d3438203d3e20323639383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:9c:67:e3:51:00:23:c5:e5:e3:b4:98:38:1e:11:6b:87:
         01:94:74:5d:8f:e7:68:db:38:b2:f0:d0:92:64:d3:28:74:85:
         b1:40:f1:ca:b5:4b:93:f0:71:db:b7:ed:65:a6:78:b7:41:6a:
         a7:52:2e:12:b9:14:dc:c4:d4:92:45:be:55:b4:88:8a:f1:01:
         56:50:08:ef:98:a7:7e:b3:cd:88:94:31:3b:0b:76:81:22:18:
         7e:ca:bb:46:89:ab:b0:c5:89:5c:ca:3f:8c:97:73:17:8e:ea:
         2d:39:f1:3a:c4:2e:02:23:ed:ae:35:a0:21:89:5b:2a:57:b0:
         aa:df:e0:61:8d:f4:67:e1:05:a4:f8:c5:e0:4d:16:85:aa:dc:
         a3:31:13:e3:81:7a:d8:a4:e3:9c:b8:86:40:2c:3d:03:95:b7:
         d7:98:6e:28:3d:e8:93:f5:2e:56:ff:ce:38:62:5e:7b:e6:42:
         60:34:3d:56:4a:88:6d:28:f6:9e:6e:74:29:22:2b:8e:06:41:
         72:c6:cb:60:de:80:9e:a8:75:d8:e7:f8:af:75:43:2e:9b:25:
         60:da:75:ea:e7:e7:9c:6a:e9:a3:07:b7:ff:ae:79:ea:1c:06:
         b4:43:25:c8:68:04:a9:b9:aa:5f:47:99:df:8f:81:cb:eb:92:
         c2:60:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org