Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa
File:                     323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa (raw, json)
Hash identifier:          /+zhBIfTztVPBLAfapQnBLIZ5akySy8YTtQ8V0bTiK0=
Subject key identifier:   58:76:B4:3A:9F:D8:3A:94:31:D3:39:41:60:1C:2D:E2:85:DA:8E:ED
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       241790172125F5D7184464EA4B039526DD532F92
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa
Signing time:             Tue 05 Mar 2024 18:14:46 +0000
ROA not before:           Tue 05 Mar 2024 18:09:46 +0000
ROA not after:            Tue 04 Mar 2025 18:14:46 +0000
asID:                     265671
IP address blocks:        2803:7ec0:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:17:90:17:21:25:f5:d7:18:44:64:ea:4b:03:95:26:dd:53:2f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Mar  5 18:09:46 2024 GMT
            Not After : Mar  4 18:14:46 2025 GMT
        Subject: CN=5876B43A9FD83A9431D33941601C2DE285DA8EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:ab:cf:59:4a:52:03:7b:81:d9:68:53:60:
                    7c:c2:36:7d:c8:c6:05:69:d8:75:78:72:d9:9b:4f:
                    a4:56:b7:a6:dc:68:9c:d2:00:66:01:3b:83:09:fa:
                    05:5e:90:37:0c:48:a3:f0:28:a3:fb:d9:f9:38:af:
                    37:22:c7:82:a9:5f:52:94:f8:4a:86:25:fa:e2:59:
                    d8:05:17:24:be:da:f3:f3:10:2f:83:bb:68:9a:9d:
                    c9:ed:76:95:84:28:61:16:99:a5:27:2f:ba:c9:b2:
                    80:16:b7:46:f0:74:72:8b:05:10:3d:93:ca:3f:43:
                    40:2e:d0:23:28:6b:63:d1:78:36:d4:b3:fe:d6:d1:
                    1e:f2:7c:7e:aa:18:fd:78:af:d2:b2:c9:41:af:f6:
                    5f:cb:b6:7f:9d:d8:22:e9:a8:f9:fe:e9:b0:cb:2b:
                    9e:2a:e3:cf:2d:c4:61:27:79:cd:d8:26:33:08:31:
                    ff:91:14:9a:ca:18:67:fa:24:43:aa:5a:a5:d4:a3:
                    95:d0:0d:a6:0d:1e:54:70:d3:4b:fd:cd:db:ce:30:
                    9a:88:d7:06:a3:e4:99:35:04:98:8a:1c:dd:b0:2e:
                    ee:ca:50:b5:06:0f:3c:bb:dd:d2:77:7e:ab:d3:c2:
                    e0:d3:1f:8d:bb:ce:0e:98:e8:17:87:48:2c:ce:30:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:B4:3A:9F:D8:3A:94:31:D3:39:41:60:1C:2D:E2:85:DA:8E:ED
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:bc:0b:4a:7a:dd:e5:99:03:2f:4b:ae:cc:cc:d1:8c:8c:
         f0:51:72:c3:f8:b3:f3:42:ce:4f:72:9e:f0:a2:bd:ad:35:df:
         1b:d2:ab:98:e2:9d:fc:6a:fc:8e:c6:90:a5:b8:f8:32:fb:79:
         04:15:16:4a:fb:0d:b9:9f:c8:47:0d:0a:f5:00:e8:fe:cc:ca:
         33:74:83:ca:fa:0f:10:25:2e:f2:a4:56:46:f8:a1:63:03:74:
         2a:b7:45:eb:9d:74:c1:3c:f0:af:40:16:9b:cc:f0:9a:e5:d2:
         a4:0a:c9:19:46:d3:9c:1b:a5:e9:44:2b:ac:56:ad:98:52:f6:
         fc:be:d1:ff:d5:3d:e5:0a:02:95:00:8b:f9:fc:bf:5c:81:35:
         ef:ca:ec:9c:f6:93:94:d2:e1:d5:80:6a:49:bf:97:e7:7b:a9:
         48:9b:c1:81:5e:eb:a0:1f:8d:63:06:cd:69:82:f2:76:9d:3e:
         c9:c3:f9:54:70:14:5f:5a:8f:30:92:a6:04:3e:dc:20:c8:de:
         f4:25:48:21:27:e8:b2:12:2b:7b:05:4a:34:d5:6d:98:9d:a6:
         33:c4:d5:e7:5f:3a:9e:4c:df:b9:e9:c3:30:4b:43:de:e6:1a:
         2c:21:e5:d2:25:9e:7a:a2:02:a0:05:83:95:f7:18:36:ac:0a:
         17:42:bb:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:47 2024 by rpki-client on console-fra.rpki-client.org