Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa
File:                     323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa (raw, json)
Hash identifier:          civssVet/2mh0sZY3JPCwzrSQUiAI8ky2q0iYFyjI1k=
Subject key identifier:   2A:9C:C0:C5:02:82:9B:28:54:D0:7D:91:69:DC:10:8B:DF:DD:70:C7
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       4340F04FE69F87171C15420DC477F697A1CB651C
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa
Signing time:             Tue 05 Mar 2024 18:04:02 +0000
ROA not before:           Tue 05 Mar 2024 17:59:02 +0000
ROA not after:            Tue 04 Mar 2025 18:04:02 +0000
asID:                     272937
IP address blocks:        2803:3190:e000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:40:f0:4f:e6:9f:87:17:1c:15:42:0d:c4:77:f6:97:a1:cb:65:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Mar  5 17:59:02 2024 GMT
            Not After : Mar  4 18:04:02 2025 GMT
        Subject: CN=2A9CC0C502829B2854D07D9169DC108BDFDD70C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:ac:14:36:31:ba:c4:28:33:b5:39:9b:36:
                    2f:44:a3:b1:fa:09:f0:bc:18:2e:0b:9c:91:d9:29:
                    fb:6f:35:8a:1a:ec:09:62:52:79:7a:8c:6c:16:b6:
                    2c:71:7b:ce:51:11:35:c4:2c:fe:23:8e:1e:11:fb:
                    df:05:88:13:40:ed:72:ce:50:5a:35:54:4d:73:a0:
                    78:98:48:54:50:2c:de:9a:86:1c:f6:3e:3b:8b:9b:
                    13:4f:b2:71:53:10:40:25:93:d4:02:78:15:ba:fe:
                    91:80:80:ff:cc:d9:c1:eb:c5:2a:0f:99:12:7b:75:
                    b6:94:1e:f4:b9:57:81:f4:ec:d0:5b:ff:f7:8f:cc:
                    d0:15:f4:20:7b:7e:5f:d7:1f:1c:bd:80:8d:40:cd:
                    6b:91:24:5f:b1:87:04:be:57:e5:11:93:d4:ec:08:
                    7c:8c:b7:10:52:b0:0c:fa:a2:dd:99:fa:e2:04:62:
                    ba:43:49:f6:3b:25:41:2c:01:c6:58:8a:f4:a4:a0:
                    c9:71:be:5c:26:0b:ea:db:99:04:fc:0d:bf:3b:0b:
                    85:30:38:b8:bd:d9:84:32:92:83:1e:c6:ec:cb:8c:
                    59:00:6e:d2:91:d4:70:43:63:73:a7:10:ac:db:1e:
                    05:35:b5:8d:15:65:48:c3:99:96:eb:57:66:d6:27:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:C0:C5:02:82:9B:28:54:D0:7D:91:69:DC:10:8B:DF:DD:70:C7
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/323830333a333139303a653030303a3a2f33392d3339203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         87:b3:bc:09:d7:77:10:20:27:a1:e1:2b:dd:b9:21:5b:bc:35:
         4c:83:c3:6b:c6:b5:ff:78:1c:d6:c1:6f:ac:9c:75:f9:06:5e:
         6a:62:c4:c0:fc:6a:e0:9a:9c:a6:93:4e:6a:fd:b9:91:55:06:
         00:83:ce:5f:be:9b:b2:82:a8:92:9c:30:a3:ac:19:61:e3:6c:
         3a:df:b3:b7:19:89:2b:26:b9:b6:cb:bd:5a:e6:e6:62:f0:17:
         09:aa:15:26:17:54:c8:49:9a:34:d9:d7:30:30:42:35:50:25:
         3c:db:a7:24:1e:10:83:e1:9e:89:0a:cb:a0:78:70:bb:70:55:
         5c:19:94:29:d7:00:09:f6:45:cc:33:5f:a4:ed:b9:18:83:15:
         6d:51:ca:47:20:ae:ea:54:61:67:37:1d:b6:12:e4:2c:2a:92:
         fa:23:75:e7:ed:74:7a:77:ea:dd:cd:9a:a5:18:8e:9d:ea:2b:
         c4:a4:e5:23:c7:fb:5a:89:ec:88:ac:e5:0c:bd:73:7d:4a:62:
         9b:31:e0:c8:be:de:29:c9:89:ff:ab:54:c8:f9:50:19:ea:65:
         86:5a:d6:e1:54:dc:cf:40:ed:69:67:fb:c0:68:13:ef:10:b6:
         70:e0:f1:87:15:f1:b5:17:49:b7:95:1b:a0:a6:1a:fd:ad:d5:
         9e:0a:85:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org