Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa
File:                     323830333a653765303a3a2f33322d3332203d3e20323730313032.roa (raw, json)
Hash identifier:          3L3X9UbI8hplJfroru/BXKAN3Xm+Ho1I49YXYIddQyc=
Subject key identifier:   E0:7E:15:EA:92:22:CB:45:A0:4E:EB:1B:0C:E7:D7:A2:7F:2D:F1:F4
Certificate issuer:       /CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
Certificate serial:       1E8DBCDAD2DC9A228103835BAC1FA62FA2EB6D53
Authority key identifier: B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa
Signing time:             Tue 05 Mar 2024 17:42:57 +0000
ROA not before:           Tue 05 Mar 2024 17:37:57 +0000
ROA not after:            Tue 04 Mar 2025 17:42:57 +0000
asID:                     270102
IP address blocks:        2803:e7e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8d:bc:da:d2:dc:9a:22:81:03:83:5b:ac:1f:a6:2f:a2:eb:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
        Validity
            Not Before: Mar  5 17:37:57 2024 GMT
            Not After : Mar  4 17:42:57 2025 GMT
        Subject: CN=E07E15EA9222CB45A04EEB1B0CE7D7A27F2DF1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:31:46:94:e3:c8:1e:ab:61:37:45:2b:f3:
                    93:88:16:90:76:61:a3:07:39:36:eb:20:ce:73:58:
                    23:7c:ba:76:dc:c0:2e:4e:d5:34:03:b2:26:0d:1b:
                    e7:4a:01:ad:84:70:f4:54:95:72:59:a3:5c:79:b0:
                    3a:d5:c4:91:ea:7a:74:ed:6d:9e:75:01:53:ee:2f:
                    0a:89:98:f4:06:5d:c4:a9:04:1d:56:e4:13:c9:d0:
                    02:f2:89:6b:cb:d3:21:1f:f9:7e:62:8b:74:f6:93:
                    3d:46:ee:19:77:4a:d5:f9:58:31:ef:9d:ff:0b:0e:
                    06:e5:80:08:cc:94:ed:3b:f0:95:26:b5:34:a2:3a:
                    ec:0d:6c:30:40:dc:a0:9f:f2:bf:76:40:07:c9:a3:
                    7e:24:cd:ed:ee:e6:f4:02:29:e5:07:8a:58:49:f1:
                    f6:38:c9:02:ea:96:a8:c7:56:b5:24:75:6f:2c:c6:
                    55:1c:ca:61:66:dc:64:b1:f1:04:57:b9:a5:00:18:
                    2e:8c:fe:47:68:d4:f3:b7:f7:6b:d9:6d:2b:5a:a3:
                    80:8b:e1:7b:e3:d1:90:37:8c:ed:e6:9b:00:b6:2f:
                    ac:4b:42:4f:30:73:7f:43:c9:85:d6:e5:c3:f6:63:
                    22:2e:c7:47:6c:87:9d:0c:a1:b9:eb:53:ad:65:7e:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7E:15:EA:92:22:CB:45:A0:4E:EB:1B:0C:E7:D7:A2:7F:2D:F1:F4
            X509v3 Authority Key Identifier:
                keyid:B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/323830333a653765303a3a2f33322d3332203d3e20323730313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:09:f3:2e:cd:73:31:b5:84:65:bc:92:e7:c1:15:db:d8:3b:
         cb:ba:b6:28:c8:0f:59:29:da:2b:8e:ec:8b:23:25:b6:38:93:
         c5:e9:98:4e:16:ad:74:ea:fc:4a:79:83:d5:f6:9c:b0:0e:28:
         88:d8:a0:68:aa:ce:94:ce:16:73:5e:c6:3d:5b:9e:2c:37:0b:
         84:25:a1:91:c9:c0:cc:f7:6a:3f:93:c0:60:0b:26:b6:f7:c1:
         9a:28:a7:51:ab:1a:51:ee:5c:88:9b:e4:b5:f3:bb:ff:0b:2c:
         e9:e2:cf:8a:e1:db:94:e5:c3:ae:81:cd:07:9a:08:3d:6d:d9:
         10:42:f8:e6:63:e6:6a:da:fb:fc:0f:3c:33:44:a3:8f:8c:82:
         26:1e:bd:e8:0e:17:37:40:59:a9:5a:10:ad:48:1b:ef:fb:de:
         ef:88:0a:d1:11:92:0b:b6:bf:16:a6:6e:8e:66:28:b2:48:14:
         cc:a1:c3:27:66:86:60:30:1e:ac:d0:27:3b:09:af:23:ea:10:
         5a:2e:5b:4c:47:f4:f1:95:cf:5a:7a:04:13:7d:a3:19:17:fc:
         28:b0:c7:7a:d1:2b:c8:ad:f3:23:13:12:76:de:7d:7b:93:08:
         48:61:4e:cd:bd:23:9f:30:19:2a:21:ab:0f:20:71:ac:8a:69:
         62:89:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:50:05 2024 by rpki-client on console-ams.rpki-client.org