Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa
File:                     323830333a373731303a3a2f33322d3634203d3e20323732313130.roa (raw, json)
Hash identifier:          +0uu1gbwVq1uXGSAiUcsKepwagBN1gGMpa8bUatI0G4=
Subject key identifier:   5B:AD:96:88:2A:16:A2:FA:41:E9:19:CF:2C:D0:C4:01:82:E5:FF:BA
Certificate issuer:       /CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
Certificate serial:       7E2BEF889C917062287174DD5D2ACD7C8FF95F4F
Authority key identifier: 1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa
Signing time:             Tue 05 Mar 2024 17:59:38 +0000
ROA not before:           Tue 05 Mar 2024 17:54:38 +0000
ROA not after:            Tue 04 Mar 2025 17:59:38 +0000
asID:                     272110
IP address blocks:        2803:7710::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:ef:88:9c:91:70:62:28:71:74:dd:5d:2a:cd:7c:8f:f9:5f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
        Validity
            Not Before: Mar  5 17:54:38 2024 GMT
            Not After : Mar  4 17:59:38 2025 GMT
        Subject: CN=5BAD96882A16A2FA41E919CF2CD0C40182E5FFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:59:46:0e:cf:76:d0:96:06:d5:45:3f:f3:
                    5c:22:64:2c:37:84:98:a9:ea:26:b3:58:69:22:41:
                    e1:64:1b:3d:30:69:9e:80:05:46:a3:c5:c5:2e:6a:
                    d8:21:47:22:2b:1a:97:f3:3e:9d:e0:8e:52:b5:77:
                    5c:db:98:01:72:a2:01:b1:81:cd:4c:2d:6f:0e:f6:
                    54:0b:70:e1:5e:4d:33:77:7c:e1:22:9e:c1:6a:cc:
                    84:d3:47:38:69:d9:e0:8c:78:fb:49:0d:7e:ae:1b:
                    b1:86:b6:bb:ae:2e:9d:d1:5d:82:95:03:2a:cb:3f:
                    38:de:5d:bf:b5:3e:c6:7a:9d:1b:ec:98:df:0b:8a:
                    23:76:c0:63:38:5c:03:c3:9a:93:8a:5c:0f:33:c3:
                    4c:02:1a:dd:61:49:4f:e6:ac:d3:5d:7b:88:85:6e:
                    1d:02:f1:f9:f5:6d:14:5f:89:2e:7f:81:27:98:d3:
                    03:f5:42:3a:31:4a:4e:fb:03:f9:58:8e:d8:6f:1d:
                    fd:f8:6c:51:56:b1:e9:2e:40:62:20:e7:01:61:e2:
                    3a:b9:66:8c:3b:54:df:b8:99:11:b0:9c:6c:bf:ba:
                    29:00:51:e5:0f:ca:d2:ef:21:d9:e0:cc:3f:43:34:
                    88:ed:29:82:c0:32:23:6f:96:d7:e0:99:59:8c:ae:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:96:88:2A:16:A2:FA:41:E9:19:CF:2C:D0:C4:01:82:E5:FF:BA
            X509v3 Authority Key Identifier:
                keyid:1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/323830333a373731303a3a2f33322d3634203d3e20323732313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7710::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:95:3b:52:5a:86:18:fd:46:a0:3d:83:89:7b:5b:fb:4c:
         49:05:14:50:4b:6b:02:e7:7b:24:db:4a:50:73:e4:da:d3:11:
         b7:0d:a5:fc:f3:2d:04:33:c5:29:99:30:dc:c0:3d:55:dc:0f:
         b2:f3:00:74:76:16:8e:48:6f:0c:d7:0f:3b:6b:91:87:67:b6:
         98:ab:c2:8d:13:93:7e:96:c1:24:39:01:30:d0:19:af:a9:1a:
         53:17:0d:0a:83:9f:98:37:5e:d9:e9:24:32:2d:24:f0:76:22:
         13:53:7d:4b:b4:17:8f:4b:3a:93:86:21:e5:d4:58:c8:4c:e3:
         f0:5b:44:1e:4f:de:04:ac:87:bb:ed:b1:41:79:83:e1:4c:19:
         e2:a5:7c:54:a6:6a:ff:1f:55:95:ac:69:da:14:03:07:cd:dd:
         a1:4d:93:1c:12:c3:8b:02:ca:d3:ec:b3:b4:91:ec:e4:7f:fa:
         70:6a:0e:8b:7d:4f:d3:9e:6a:a3:d2:4c:27:98:9c:d5:fb:fe:
         a5:7b:f1:e8:94:3f:a4:ad:01:fc:5b:f4:1d:f1:89:c8:05:b5:
         02:89:4a:56:c5:68:d4:04:29:33:07:09:41:fb:06:a2:51:64:
         1a:2d:9d:c0:13:ad:9c:8f:dc:b5:12:e3:07:41:bb:24:b2:52:
         da:28:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:30 2024 by rpki-client on console-ams.rpki-client.org