Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
File:                     323830333a623931303a3a2f33322d3432203d3e20323732303133.roa (raw, json)
Hash identifier:          3311NPNaaJ1SbhixaQ4fwAPKOpmkhNZLQkZjyh63/zI=
Subject key identifier:   7D:8A:0F:3F:6C:E0:5F:1F:2D:2A:30:11:E9:42:22:27:DA:2C:8B:EE
Certificate issuer:       /CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
Certificate serial:       5A1E0618BB36E190DC01F67988BE0B99077FCEDA
Authority key identifier: BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa
Signing time:             Tue 05 Mar 2024 17:41:19 +0000
ROA not before:           Tue 05 Mar 2024 17:36:19 +0000
ROA not after:            Tue 04 Mar 2025 17:41:19 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:06:18:bb:36:e1:90:dc:01:f6:79:88:be:0b:99:07:7f:ce:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C
        Validity
            Not Before: Mar  5 17:36:19 2024 GMT
            Not After : Mar  4 17:41:19 2025 GMT
        Subject: CN=7D8A0F3F6CE05F1F2D2A3011E9422227DA2C8BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:5c:0f:13:de:ee:95:0c:a5:31:ba:92:a8:
                    5c:3f:7c:d7:1b:cf:30:bf:98:c5:ae:15:e3:63:48:
                    59:53:68:83:94:6b:06:2e:98:d9:64:93:62:36:76:
                    61:d5:a6:b5:69:a1:bd:3e:6e:89:ee:0f:6b:ce:3f:
                    83:c3:23:1b:d5:52:f5:5b:40:a1:72:55:49:49:e2:
                    38:15:d7:46:63:96:26:a1:9f:a5:d6:04:ec:4d:40:
                    59:a9:35:ae:49:0b:79:d2:3e:54:52:00:8e:32:c2:
                    b9:7f:d7:5f:9c:9c:c2:9b:89:d0:58:a3:32:b5:41:
                    90:de:4b:fa:d4:02:41:9d:72:2e:61:0d:76:e3:f0:
                    6a:eb:6d:7b:ae:d0:b1:aa:de:13:cd:fe:dd:e1:69:
                    75:69:0b:52:00:8b:c7:c2:ab:1c:ac:a6:54:f1:fc:
                    69:70:5a:09:d8:3d:ae:00:85:6a:be:5e:83:08:5f:
                    80:54:bc:5b:59:94:24:32:d2:0f:16:30:90:1f:23:
                    82:d3:f1:9f:21:f4:0a:95:42:e3:31:fc:71:a8:4f:
                    8e:fc:52:3a:d6:3c:62:56:35:23:89:d5:4b:9f:bd:
                    8e:17:c2:aa:77:5e:52:10:5e:b8:76:ce:92:5a:44:
                    93:ff:1c:b7:de:ce:51:d3:dd:8c:d0:1c:73:5b:f0:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8A:0F:3F:6C:E0:5F:1F:2D:2A:30:11:E9:42:22:27:DA:2C:8B:EE
            X509v3 Authority Key Identifier:
                keyid:BD:04:BD:B4:E0:48:6F:1A:4A:8D:25:7A:F7:BB:83:84:F5:61:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD04BDB4E0486F1A4A8D257AF7BB8384F561F30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C2EFE806A65539A61B5CB585D59755541AF7340034B26152E4D0D36C4C10FFD/0/323830333a623931303a3a2f33322d3432203d3e20323732303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:9d:6a:18:89:a2:23:f9:ae:c6:d3:79:78:63:92:ff:25:
         33:4d:8e:a9:44:ae:8b:82:07:ad:3f:3d:08:fb:95:9e:35:dc:
         f8:db:23:8d:75:8e:30:f0:12:69:d8:41:a9:65:7e:fe:98:2a:
         03:00:29:8a:91:36:51:3c:51:fc:26:13:20:85:d2:31:11:d9:
         6d:23:1a:72:08:04:a3:ea:77:ce:b1:59:25:47:c3:6f:3e:e1:
         30:fd:db:90:0e:9b:db:aa:f8:8b:e9:db:da:0c:14:87:c2:f3:
         c5:15:2b:5d:9f:ad:ce:de:43:a5:ee:87:3f:ec:f2:f2:61:51:
         cd:94:ff:59:f5:5d:ef:b5:fe:f9:0e:5e:46:be:c6:0c:8f:56:
         d1:fa:e2:40:f2:33:10:30:aa:f4:ed:7e:2b:df:23:2b:7d:55:
         bf:74:c2:d1:27:f1:b4:2a:07:81:bd:ec:4d:80:ad:c5:f0:6b:
         2e:a8:9e:04:8b:43:a9:63:d0:41:31:b9:6c:dc:2d:20:f6:60:
         90:d7:20:12:9f:6d:22:c3:6f:24:30:94:5a:80:1b:8e:fc:d4:
         c7:cd:ed:3c:d9:74:ed:a5:4b:44:11:2a:e8:cc:b5:c8:48:12:
         b8:c1:48:ab:15:37:a2:39:8f:88:f6:ef:85:1d:c7:8e:c1:c3:
         e0:21:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:56:01 2024 by rpki-client on console-fra.rpki-client.org