Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
File:                     323830333a663738303a3a2f33322d3438203d3e20323731383034.roa (raw, json)
Hash identifier:          5gpn9qPYewbTSfmHLxmsDtff31U7r2DuGbtpetIOJLM=
Subject key identifier:   EE:83:B8:67:B3:96:BF:07:D3:46:D6:C0:BC:DB:F4:3F:E3:5C:BF:5A
Certificate issuer:       /CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
Certificate serial:       0AE117E00C39EF3A617607745924F55E05D5E4D7
Authority key identifier: F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa
Signing time:             Tue 05 Mar 2024 18:07:05 +0000
ROA not before:           Tue 05 Mar 2024 18:02:05 +0000
ROA not after:            Tue 04 Mar 2025 18:07:05 +0000
asID:                     271804
IP address blocks:        2803:f780::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:17:e0:0c:39:ef:3a:61:76:07:74:59:24:f5:5e:05:d5:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
        Validity
            Not Before: Mar  5 18:02:05 2024 GMT
            Not After : Mar  4 18:07:05 2025 GMT
        Subject: CN=EE83B867B396BF07D346D6C0BCDBF43FE35CBF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:9e:c5:2b:db:cf:ca:fc:09:e6:d6:78:a3:
                    d4:6a:9a:75:c3:85:34:4b:c8:e7:9d:8a:c1:44:0d:
                    47:f6:20:46:76:20:82:49:af:7e:a3:72:1c:83:2d:
                    7c:bf:21:8a:bb:85:23:0e:e7:ee:e1:c1:52:86:aa:
                    7f:b3:8e:ac:5b:4c:98:0d:10:84:28:45:61:d8:24:
                    e0:0a:6c:be:d1:e0:4b:5b:85:aa:da:19:f6:fd:c8:
                    68:1c:1f:d3:22:1f:a4:64:5c:60:83:dd:6f:04:23:
                    9f:b9:d4:e6:70:31:b8:ef:24:a0:13:ca:55:79:a5:
                    d0:9d:be:9c:b2:7b:f0:44:96:9d:a3:b6:ea:69:85:
                    21:96:fe:91:e5:5b:e5:14:2e:87:57:4a:6f:ed:d0:
                    67:10:d5:da:42:bd:40:93:80:2d:3d:ce:02:22:4e:
                    af:b4:c6:ec:d2:bf:02:99:5d:34:00:22:56:ed:e1:
                    eb:32:9f:c9:ea:58:de:b9:6f:bf:43:82:32:55:66:
                    1f:62:48:64:13:25:10:75:d6:07:8d:50:b8:7a:31:
                    95:22:02:1e:f7:ec:e9:57:e8:e5:70:3f:0f:de:42:
                    b9:77:55:2f:71:c6:89:63:89:a6:94:be:03:60:f9:
                    64:e8:cc:f3:4a:fc:5b:f7:3c:72:6d:47:ac:f7:76:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:B8:67:B3:96:BF:07:D3:46:D6:C0:BC:DB:F4:3F:E3:5C:BF:5A
            X509v3 Authority Key Identifier:
                keyid:F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/323830333a663738303a3a2f33322d3438203d3e20323731383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:44:65:6d:b1:5a:f0:2c:02:7c:ac:34:a6:75:36:90:3d:83:
         a4:b8:4e:3f:28:75:e6:6e:59:3d:a9:fd:ad:cf:ef:a8:f4:50:
         7c:85:88:52:7e:b9:16:2c:13:3b:87:3d:6d:f8:6d:7b:e2:f3:
         c1:9c:b0:85:77:6d:b7:93:a4:99:e4:8d:62:27:3f:29:94:66:
         df:8a:16:0a:02:66:97:87:c0:06:9d:df:a1:81:f4:b9:83:72:
         39:df:9b:94:77:61:32:9e:8e:d9:97:79:69:f4:c5:3f:7f:7b:
         1f:14:fc:28:16:de:73:7d:f9:2e:b4:77:9c:8e:15:3c:57:64:
         d3:21:4e:83:ea:79:4a:86:70:5a:a4:d3:bf:fa:44:ba:9b:42:
         e7:3b:97:8f:6d:b1:bf:55:4c:03:ed:09:ec:7e:dc:84:09:4b:
         fe:9f:60:c0:66:10:c0:21:38:c7:f7:46:20:19:e0:0d:35:b2:
         a4:a0:82:9a:a9:aa:16:f7:d5:d0:79:17:8d:17:50:d9:7d:f2:
         db:23:88:1d:80:c6:1d:e0:4c:19:0c:8f:04:e7:06:5d:50:b8:
         3e:40:e9:64:7c:f0:8f:45:b2:d9:f1:0b:3d:ed:c0:07:97:08:
         fd:18:c5:6f:02:cd:dd:9b:4e:ba:18:12:9f:f0:da:ac:38:b0:
         97:8a:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org