Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa
File:                     323830333a323961303a3a2f33322d3332203d3e20323637373130.roa (raw, json)
Hash identifier:          FO3Fjo2p75PtMR9K30BS2scsk692x1i5lhJTUFlgUvw=
Subject key identifier:   75:A6:15:09:FD:6F:E1:34:0B:D1:67:D0:A7:14:26:63:5B:2D:94:1F
Certificate issuer:       /CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
Certificate serial:       5E815D188486DBC553B7DCA2D1952455E38A47F3
Authority key identifier: 2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa
Signing time:             Tue 05 Mar 2024 17:55:41 +0000
ROA not before:           Tue 05 Mar 2024 17:50:41 +0000
ROA not after:            Tue 04 Mar 2025 17:55:41 +0000
asID:                     267710
IP address blocks:        2803:29a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:5d:18:84:86:db:c5:53:b7:dc:a2:d1:95:24:55:e3:8a:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
        Validity
            Not Before: Mar  5 17:50:41 2024 GMT
            Not After : Mar  4 17:55:41 2025 GMT
        Subject: CN=75A61509FD6FE1340BD167D0A71426635B2D941F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:e6:0f:65:bd:d3:3e:33:f0:24:69:e7:bd:
                    96:1f:1b:71:c2:f2:71:02:fa:d8:88:e2:c2:9e:a3:
                    5b:c8:79:5a:10:be:15:8c:90:00:b5:50:bd:99:a4:
                    2a:f0:4f:b7:d0:21:f4:7f:4f:28:80:cf:0e:bf:83:
                    2d:ed:fb:ce:73:06:0b:69:d5:56:c4:36:c0:c5:3f:
                    56:b4:7d:57:37:da:66:0a:02:2e:79:02:c2:f2:95:
                    72:70:0d:92:f5:40:2c:93:cb:a2:d7:99:68:f3:80:
                    d0:91:04:e6:c2:18:44:14:2c:e8:cb:a7:55:2c:9b:
                    a4:48:0f:43:9f:fa:05:26:64:a6:5e:4a:91:fa:8e:
                    97:c4:58:5a:22:f3:6f:81:89:cb:6f:bb:2d:d6:32:
                    99:a7:90:8e:a7:8a:eb:fd:ab:ec:de:fa:38:f3:61:
                    78:1f:3c:e8:33:5b:08:1d:41:77:78:c5:0f:51:6e:
                    9d:cd:46:61:66:df:05:eb:65:15:fc:9f:97:9d:28:
                    27:02:6b:30:56:92:63:d0:e5:4f:f5:9f:ec:76:50:
                    a8:89:81:48:82:9e:b3:08:34:7b:98:f0:a7:80:8b:
                    bf:36:f3:87:77:23:3f:f4:57:28:5d:bd:5f:cd:9f:
                    25:69:df:6a:e7:5e:4f:97:49:4b:92:e2:b9:57:ba:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A6:15:09:FD:6F:E1:34:0B:D1:67:D0:A7:14:26:63:5B:2D:94:1F
            X509v3 Authority Key Identifier:
                keyid:2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/323830333a323961303a3a2f33322d3332203d3e20323637373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:29a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:98:32:a8:78:62:e4:ce:36:b5:fc:c4:cd:b4:80:ac:d2:ae:
         a4:0b:f2:c9:fa:be:7c:ef:d4:65:ed:92:f0:dd:9d:44:4a:25:
         a8:be:32:2c:f6:b8:54:5e:7c:2d:64:a2:c7:54:55:a4:b0:66:
         90:8f:7f:dc:fa:28:86:0a:82:6a:da:3f:f7:c9:5c:76:cd:27:
         8a:69:74:08:89:6a:35:64:51:39:7e:64:23:e8:13:40:21:21:
         2d:71:a5:c3:1f:0d:9a:f0:98:03:8d:9c:33:44:2d:2c:bd:25:
         c8:7f:8b:fe:94:dd:f5:0d:49:2a:e9:ab:11:ac:65:8a:77:9e:
         2e:55:c1:08:da:1a:a9:64:3e:91:e6:13:39:8a:df:9a:f9:34:
         dc:b8:71:1f:8f:12:9c:6a:f7:f1:24:a1:53:88:02:9b:1b:3c:
         18:38:af:dd:8e:84:f8:ca:be:d4:c0:ff:34:c2:ba:c0:01:a3:
         e9:f1:11:55:b1:c1:51:40:9c:44:5d:8f:e3:84:7c:fe:4d:f0:
         e8:95:0c:06:4e:57:75:8b:c5:03:0b:8c:85:d8:66:78:ce:fd:
         2f:45:96:55:6a:64:94:de:6a:14:12:52:12:67:02:e1:25:85:
         ef:30:52:c1:84:58:3c:2f:09:d8:0b:17:50:11:25:60:e9:c1:
         52:d5:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org