Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa
File:                     323830333a3738303a3a2f33322d3332203d3e203238303037.roa (raw, json)
Hash identifier:          zUdKAdCutEeKS92u0rOxmJHzKbtkAJ0WLqVvH0ofIyE=
Subject key identifier:   79:A9:B1:5F:78:82:7E:09:FF:29:F5:D7:59:40:C1:35:F7:78:4D:B1
Certificate issuer:       /CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
Certificate serial:       2C4249947397B567920DE7136766EE77B6638083
Authority key identifier: B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:59:49 +0000
ROA not before:           Tue 05 Mar 2024 17:54:49 +0000
ROA not after:            Tue 04 Mar 2025 17:59:49 +0000
asID:                     28007
IP address blocks:        2803:780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:49:94:73:97:b5:67:92:0d:e7:13:67:66:ee:77:b6:63:80:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
        Validity
            Not Before: Mar  5 17:54:49 2024 GMT
            Not After : Mar  4 17:59:49 2025 GMT
        Subject: CN=79A9B15F78827E09FF29F5D75940C135F7784DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:09:f1:6a:c5:47:06:c8:ef:c0:3f:75:71:
                    48:9b:e7:b2:d9:10:f0:98:15:e1:5b:05:ec:f9:39:
                    14:f9:80:88:28:01:67:be:22:e5:ef:ed:f6:fd:52:
                    21:36:26:b7:7b:7c:5d:01:15:8d:f5:aa:d5:1b:e2:
                    21:dc:be:02:94:a0:5a:70:1d:8e:ec:de:9b:e6:b4:
                    2f:d2:b9:b3:c4:9e:86:a3:f7:4c:04:32:a8:07:c5:
                    bc:04:70:fc:1c:5f:c8:4f:cf:f5:aa:08:33:5e:58:
                    69:77:02:5f:86:a0:88:6d:b6:0f:4b:28:63:c7:1d:
                    c4:54:6e:d4:01:c1:fe:7f:cc:a1:29:8d:df:e0:20:
                    31:ab:88:49:16:af:0c:1d:2f:14:8b:c7:5f:33:f6:
                    f1:f7:43:42:dd:03:7d:e7:ca:f6:fa:78:ea:53:6c:
                    28:0c:c3:af:6e:f4:9c:58:df:ec:4a:c3:86:cd:5c:
                    28:fa:74:3a:e6:c2:bb:70:24:04:fe:3c:85:58:0f:
                    ca:43:b3:0d:0e:cd:74:4f:1a:76:b7:04:68:e1:dc:
                    d1:d6:f8:77:57:4c:17:5b:6c:91:40:98:4d:43:30:
                    2b:db:5b:8b:a4:ab:36:01:6f:a9:63:ea:e6:1c:4b:
                    29:8d:cc:e5:7f:e2:39:12:ce:21:03:52:77:8a:69:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:B1:5F:78:82:7E:09:FF:29:F5:D7:59:40:C1:35:F7:78:4D:B1
            X509v3 Authority Key Identifier:
                keyid:B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:32:e8:eb:52:10:a1:ed:a9:1d:5b:4d:be:81:d3:42:2a:
         83:6b:27:8d:77:f4:f4:0d:ac:b4:f9:34:82:7f:12:7a:85:27:
         c9:ae:f5:a1:28:5c:59:c1:33:18:52:d0:13:f8:51:db:d4:00:
         58:e0:a3:d3:35:32:ff:e8:2f:07:a9:a6:84:31:f6:ae:ae:a9:
         a1:35:c2:50:86:20:ee:50:4c:91:c8:1e:90:13:40:ee:ac:5c:
         dc:f1:a4:e5:84:ea:4b:8b:b5:9e:2a:2b:43:4c:f7:0e:0a:66:
         8a:40:02:b5:f5:3b:28:e9:26:bc:c3:1a:94:4a:a0:76:ec:d3:
         c8:b7:10:85:71:db:4c:3e:7d:06:97:1f:f1:35:ac:47:7b:ca:
         e4:22:0e:a3:0a:82:47:af:17:45:b2:3d:18:63:b5:34:ec:ed:
         3d:ac:06:b3:2e:61:45:e5:22:70:c1:74:23:19:9e:36:4e:7c:
         6b:e6:f2:59:5c:9b:07:34:e2:12:ee:69:1d:db:28:a0:37:d9:
         c0:fc:ba:f1:3f:36:a4:3d:15:33:53:f8:5b:fd:61:4f:0b:17:
         a3:40:e9:06:c7:c3:04:9f:03:59:f9:32:9f:6c:62:fe:0b:9f:
         79:fe:c0:41:07:92:8f:28:1e:b7:d6:75:a0:15:23:84:20:89:
         ad:93:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org