Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
File:                     323830333a326631303a3a2f33322d3438203d3e20323732313230.roa (raw, json)
Hash identifier:          JfxuCXbxiVdP4Xd3HJQJ3hOEFvwXJhy80kCtTyhNDmE=
Subject key identifier:   19:8C:A8:02:BB:D6:BB:75:77:CF:48:6A:49:9E:B0:16:B6:24:B2:4E
Certificate issuer:       /CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
Certificate serial:       60395ED2556E1E9804826FBF93F0445681B9466C
Authority key identifier: 90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa
Signing time:             Tue 05 Mar 2024 18:18:01 +0000
ROA not before:           Tue 05 Mar 2024 18:13:01 +0000
ROA not after:            Tue 04 Mar 2025 18:18:01 +0000
asID:                     272120
IP address blocks:        2803:2f10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:39:5e:d2:55:6e:1e:98:04:82:6f:bf:93:f0:44:56:81:b9:46:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908B9094C8B149DC985FB82F0C0A3737EDDA8A40
        Validity
            Not Before: Mar  5 18:13:01 2024 GMT
            Not After : Mar  4 18:18:01 2025 GMT
        Subject: CN=198CA802BBD6BB7577CF486A499EB016B624B24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:9e:39:e0:ac:99:8d:34:63:39:c4:51:f5:
                    22:4a:ae:ee:20:45:ac:3e:59:cd:a2:ea:9f:2e:30:
                    9c:d7:9a:84:90:d7:85:d6:20:93:03:d9:b1:91:6d:
                    34:85:af:e2:fa:4d:34:d6:1a:fe:68:e9:a7:ec:c0:
                    fb:16:d4:c1:c5:1c:f9:88:0e:08:70:08:65:d5:4e:
                    01:73:19:12:30:16:d4:f6:82:fa:cf:aa:5c:c8:bd:
                    f1:c1:04:06:f1:23:56:fb:ec:e6:15:c3:f5:fa:02:
                    f5:10:86:2f:d3:83:d5:0e:45:cd:85:33:fe:3a:cb:
                    16:a7:d9:29:b8:d3:40:34:89:09:21:8a:74:62:5a:
                    eb:db:82:60:33:11:0b:4e:46:ad:39:a4:7e:fc:0d:
                    7c:a9:6e:72:66:01:0c:39:45:47:70:88:57:a1:ed:
                    5e:ef:36:4c:fa:9d:7f:db:5c:93:5d:28:df:11:c5:
                    11:b7:3a:cc:18:85:38:5a:b3:9c:f2:31:b2:99:05:
                    2c:ac:7a:99:26:5c:4c:91:91:fd:b2:27:b0:5f:76:
                    2a:36:d4:80:db:bb:7f:57:95:c5:c0:1e:7e:9f:8b:
                    07:88:bf:15:fe:84:a3:59:64:d5:e4:17:95:94:ae:
                    ab:2e:e8:a9:83:6f:69:3f:3f:90:37:02:11:f9:55:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:A8:02:BB:D6:BB:75:77:CF:48:6A:49:9E:B0:16:B6:24:B2:4E
            X509v3 Authority Key Identifier:
                keyid:90:8B:90:94:C8:B1:49:DC:98:5F:B8:2F:0C:0A:37:37:ED:DA:8A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/908B9094C8B149DC985FB82F0C0A3737EDDA8A40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F1BAC3DF81D728FE33F58A60AF7891D1158B48200EB81ADB7503F11FDBAD88D/0/323830333a326631303a3a2f33322d3438203d3e20323732313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:23:f8:92:63:16:bd:84:9a:b7:31:52:d2:ce:db:39:98:
         2f:18:d8:dc:02:c3:24:5e:e2:2d:3f:dd:4b:30:b9:c8:34:c8:
         33:b4:c0:f2:55:53:1b:15:a5:56:55:83:95:4a:3e:11:70:7e:
         d9:2a:f3:d4:ee:15:22:b1:37:99:44:ec:4b:e0:ba:2d:37:c3:
         ab:8b:ce:e4:37:4e:73:51:06:2e:05:0a:a9:49:2b:8d:cc:e9:
         b1:d0:0d:50:ae:12:09:db:0d:d0:62:be:64:e2:b9:aa:8e:a7:
         4c:6c:fc:8e:28:ff:98:da:fa:d1:4a:62:a9:cd:16:c8:4b:4b:
         53:c7:2c:95:6f:a4:77:58:30:cd:c1:5c:9d:6f:06:9b:70:e4:
         7a:2a:e7:bb:32:dc:a9:da:7a:94:92:ac:6a:6a:79:44:5b:00:
         d5:91:7c:5c:5f:78:8c:ee:60:46:ba:94:10:bf:76:50:a9:0f:
         88:a6:c3:d6:76:c8:b0:52:64:bf:12:3f:cd:24:20:ba:93:53:
         a5:2a:4d:48:0f:c3:90:1b:bb:f7:90:38:6b:df:24:69:6e:f8:
         5b:6d:ce:87:96:42:6d:3f:49:9a:86:20:fc:36:3e:d2:9e:76:
         74:cf:34:54:b9:13:a7:fe:70:9e:df:be:40:42:23:7e:19:d6:
         26:f8:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:49 2024 by rpki-client on console-fra.rpki-client.org