Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa
File:                     323830333a653331303a3a2f33322d3634203d3e20323732303634.roa (raw, json)
Hash identifier:          TqATGHjH964gvbeLMXx3FFnCbPpLSLgm26yqzLonFGA=
Subject key identifier:   88:21:01:7B:D6:72:89:1D:47:7D:17:AC:7A:10:49:C8:6A:50:86:FC
Certificate issuer:       /CN=98375F77F0F93F2A707052E2273D5F5F579A325C
Certificate serial:       364D49F1117A3ACE5F2D0C6B4554DCCC67FBD71C
Authority key identifier: 98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa
Signing time:             Tue 05 Mar 2024 18:19:12 +0000
ROA not before:           Tue 05 Mar 2024 18:14:12 +0000
ROA not after:            Tue 04 Mar 2025 18:19:12 +0000
asID:                     272064
IP address blocks:        2803:e310::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4d:49:f1:11:7a:3a:ce:5f:2d:0c:6b:45:54:dc:cc:67:fb:d7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98375F77F0F93F2A707052E2273D5F5F579A325C
        Validity
            Not Before: Mar  5 18:14:12 2024 GMT
            Not After : Mar  4 18:19:12 2025 GMT
        Subject: CN=8821017BD672891D477D17AC7A1049C86A5086FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:47:bf:6b:e9:38:77:59:8b:40:4e:ef:e5:
                    52:25:2f:6c:80:94:3b:0a:13:33:f7:f8:f4:d2:de:
                    55:9a:7a:7d:18:81:a7:bf:78:4f:e9:22:5a:d2:a3:
                    2b:ab:a8:86:e3:1e:14:69:41:e0:04:07:da:b3:ae:
                    e7:e6:25:c5:fe:d1:6c:d2:c2:26:83:de:95:8d:7c:
                    5c:ec:da:3f:bd:8f:e5:e3:9f:bb:00:eb:f1:85:33:
                    a4:5c:33:2c:b5:95:eb:b5:3c:ae:60:72:db:9e:df:
                    7e:e9:2d:66:4e:d3:e8:39:aa:62:c9:fb:15:82:b4:
                    56:22:b9:4c:53:0f:89:31:c3:17:dc:41:a6:07:4e:
                    ca:bc:ae:f8:36:d3:a0:86:eb:88:1a:08:b7:4d:c0:
                    26:e2:a9:fe:e6:0d:5a:84:1d:4b:a8:cb:66:06:bb:
                    08:5b:ac:b6:99:36:1b:ee:b0:18:6b:4c:36:5c:a9:
                    74:bb:95:27:91:9b:46:99:b6:d2:f4:09:c7:33:48:
                    15:31:f0:94:6d:8b:60:41:ef:fa:52:a7:5a:70:95:
                    65:b0:49:d7:39:0c:ee:73:58:18:a2:ee:ae:ef:32:
                    b1:c7:43:ec:78:3d:d0:70:32:e9:86:27:39:0a:98:
                    56:72:19:ca:1f:af:35:14:ee:36:54:12:ee:6b:dd:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:01:7B:D6:72:89:1D:47:7D:17:AC:7A:10:49:C8:6A:50:86:FC
            X509v3 Authority Key Identifier:
                keyid:98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e310::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:27:bb:28:31:c1:c5:a2:6d:c0:51:03:c2:0f:5d:9a:25:d0:
         a2:18:bf:11:71:91:e9:5c:71:42:31:a6:7f:67:bb:7a:3d:12:
         c5:9d:93:68:db:34:6a:7c:3d:22:38:c2:c0:a4:d4:9f:d7:35:
         30:79:12:b3:c8:eb:cb:ae:97:f9:d9:0d:f7:cc:4f:c4:e6:a7:
         75:0a:4a:84:b1:20:6a:46:f7:ed:0b:bd:9e:51:70:34:91:f7:
         4d:1a:83:f7:b9:e8:e5:8b:47:1e:6b:26:08:eb:0d:dd:a6:f9:
         37:43:66:8d:e3:59:b6:5a:d9:bc:3c:a0:a9:c3:cb:c4:fc:59:
         60:e0:38:7d:51:8e:55:52:c2:6b:af:5b:2e:42:e8:7d:3b:8c:
         d1:16:c9:a9:81:59:48:b4:10:6d:9a:1f:94:29:0e:9f:6a:b8:
         72:e5:42:58:4d:2a:78:a8:1b:f7:06:11:ce:9f:7a:05:fb:37:
         72:97:09:58:8c:fe:aa:d5:3c:bc:f5:f2:e8:f1:0d:da:3d:11:
         1b:56:f6:0e:f7:9a:c8:c3:28:02:04:73:c1:2d:4d:ab:00:04:
         5f:d0:f9:d9:79:19:82:bc:f4:8a:71:c7:a8:65:1e:4b:92:f9:
         01:ac:a6:de:cf:40:df:0a:79:2d:43:c6:2a:11:b5:2e:94:93:
         e2:b4:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:45:37 2024 by rpki-client on console-ams.rpki-client.org