Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa
File:                     323830333a396538303a3a2f33322d3438203d3e20323730303635.roa (raw, json)
Hash identifier:          OaAk02Bmv6M5kzYVHYIGolBeaoy86p5/5nYRQ8u2fa4=
Subject key identifier:   3F:14:07:DA:4F:50:52:19:B1:3A:DE:0E:DA:D5:F7:42:E4:D4:7A:18
Certificate issuer:       /CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
Certificate serial:       67CBBB2C57F6DA03DB58E82BD072E20AF36D944E
Authority key identifier: 02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa
Signing time:             Tue 05 Mar 2024 18:15:53 +0000
ROA not before:           Tue 05 Mar 2024 18:10:53 +0000
ROA not after:            Tue 04 Mar 2025 18:15:53 +0000
asID:                     270065
IP address blocks:        2803:9e80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:bb:2c:57:f6:da:03:db:58:e8:2b:d0:72:e2:0a:f3:6d:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
        Validity
            Not Before: Mar  5 18:10:53 2024 GMT
            Not After : Mar  4 18:15:53 2025 GMT
        Subject: CN=3F1407DA4F505219B13ADE0EDAD5F742E4D47A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:96:09:7b:f5:c9:29:e2:7b:ab:b1:70:8f:
                    68:3a:e9:e4:7b:66:6b:93:49:2e:0e:f6:e9:2e:ee:
                    8a:68:2c:79:57:48:ed:6d:ea:3d:f2:4d:53:26:64:
                    d1:54:8b:0a:26:c1:e6:d3:c6:da:9a:c7:35:bc:05:
                    bd:50:a7:cc:7a:44:72:07:0b:55:51:ae:62:28:ce:
                    30:2b:d9:6e:c2:0b:2a:1d:9a:f9:a2:37:41:5f:e9:
                    2d:37:9f:97:92:42:48:fb:5f:f3:83:4f:3a:67:8d:
                    71:90:38:69:a7:f0:8e:92:f6:1b:9f:00:b9:41:af:
                    bf:fc:25:20:80:2d:6d:8d:68:f0:39:1e:a4:79:05:
                    03:3a:59:15:7a:2d:90:b4:93:ab:e5:db:a7:5a:81:
                    15:d4:22:63:99:a2:a1:50:bc:0c:62:6a:a9:ad:dc:
                    ee:cc:e6:45:d9:e6:26:18:1a:bf:da:59:48:7e:f5:
                    0c:f0:3e:30:a1:a7:e6:95:6a:5d:3b:bb:a7:45:b0:
                    69:e0:2c:7e:0b:79:db:e2:78:88:f5:1b:aa:fd:70:
                    1d:c5:cf:df:73:5f:c4:fe:c7:b7:6a:8b:fb:65:09:
                    66:1a:78:ed:d0:09:80:3a:6b:11:ba:7a:b6:be:82:
                    2e:9c:e7:ef:fa:f8:4d:35:12:c4:01:0c:4e:3f:0c:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:07:DA:4F:50:52:19:B1:3A:DE:0E:DA:D5:F7:42:E4:D4:7A:18
            X509v3 Authority Key Identifier:
                keyid:02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/323830333a396538303a3a2f33322d3438203d3e20323730303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:57:23:a8:59:95:34:21:54:3e:67:a4:75:a1:3d:91:12:
         a9:bc:7a:92:50:ed:71:04:d7:21:17:3f:cd:a0:e6:ac:28:4c:
         13:c9:95:3c:5e:18:c0:c0:36:a5:4f:24:d6:a8:ab:13:e5:7e:
         02:86:71:a6:b6:0b:05:c1:a8:11:dc:1d:91:78:86:c8:27:b9:
         19:dd:33:59:a7:9a:37:9c:8f:21:38:27:bb:81:fb:0f:6a:34:
         e0:a6:f9:ef:19:79:84:85:79:01:a9:a7:96:69:d7:1e:34:94:
         da:cd:d3:9b:70:aa:c1:a1:32:9f:7a:d1:52:c3:a2:72:ef:8e:
         50:7a:c9:32:34:5b:7c:57:be:41:7b:72:83:c1:15:a6:4f:f5:
         d7:26:90:3f:1d:e5:4c:3b:84:e4:d6:bd:84:4b:8a:f0:1e:fd:
         38:77:21:2b:b4:5e:72:fd:ee:a4:72:5d:4e:f3:cf:61:e6:34:
         83:a5:ec:c9:15:f3:db:70:57:d9:e1:37:95:af:4d:0d:e0:41:
         09:f5:06:2a:cc:fe:34:e9:94:b0:47:96:80:8e:ee:90:2a:3d:
         d0:22:d5:2e:81:8e:2a:5c:1a:1a:68:d2:81:9a:fb:44:b5:e5:
         35:c1:f7:40:77:a8:dc:63:a6:f6:b0:34:16:4b:ce:92:6a:f8:
         55:21:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:31 2024 by rpki-client on console-fra.rpki-client.org