Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa
File:                     c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa (raw, json)
Hash identifier:          NPpwJoB9GKSMa+8NGU+9kcO4Ou3CG37xx35WjZHqLS0=
Subject key identifier:   3F:7B:8E:42:B5:36:91:E9:44:98:54:68:83:39:F5:6B:00:98:6C:0D
Certificate issuer:       /CN=b0c720a9a69baef973dad173f853967bbc985a77
Certificate serial:       ABA4
Authority key identifier: B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa
Signing time:             Tue 03 May 2022 15:49:46 +0000
ROA not before:           Fri 08 Apr 2022 03:00:00 +0000
ROA not after:            Mon 08 Apr 2024 03:00:00 +0000
asID:                     269800
IP address blocks:        2803:7360::/36 maxlen: 36
                          2803:7360:4000::/36 maxlen: 36
                          2803:7360:b000::/36 maxlen: 36
                          2803:7360:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43940 (0xaba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c720a9a69baef973dad173f853967bbc985a77
        Validity
            Not Before: Apr  8 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2024 GMT
        Subject: CN=c27cceda8d59aaeeb8e61fce89f25fda55fe2605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:1e:a2:3f:d8:df:be:7f:fa:ee:31:30:d0:
                    52:4d:01:db:a4:b5:6c:09:05:13:bc:89:cb:3d:66:
                    b9:35:d4:cf:1f:df:71:d9:d0:ac:eb:28:9d:2e:b8:
                    4b:3a:63:09:00:44:d3:5b:ec:d7:4c:1a:ed:93:d0:
                    f1:ff:f5:9c:ad:46:81:43:02:20:97:69:29:56:11:
                    60:57:23:38:a7:48:44:9d:34:a2:96:19:60:f3:fd:
                    f9:fc:a5:6d:db:fe:1e:cf:97:fa:98:06:de:f8:57:
                    1d:28:56:9f:5a:22:19:42:e0:0e:99:ed:08:76:c4:
                    77:4d:ad:f0:a5:5a:d2:aa:bb:8f:cf:fe:55:81:06:
                    58:bf:cc:ed:06:65:81:b4:1f:bb:b9:8f:d2:9c:72:
                    d1:48:47:77:db:07:98:fc:3f:21:7f:94:1c:c0:16:
                    83:d5:61:9e:08:0a:1f:e5:db:74:40:9e:0a:79:a0:
                    37:97:10:cb:75:5f:35:3a:bc:0e:8d:d5:5e:08:9d:
                    47:c6:ae:d2:b9:8a:8d:7e:be:df:2b:86:75:f7:73:
                    87:9c:28:8e:95:f6:97:28:53:dc:11:f1:2d:3a:89:
                    e2:2a:a6:ce:81:5e:cb:ef:57:88:d9:72:8d:9b:4d:
                    51:ae:9e:24:06:0d:0a:f4:b5:2a:b6:d4:c1:b8:d3:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:8E:42:B5:36:91:E9:44:98:54:68:83:39:F5:6B:00:98:6C:0D
            X509v3 Authority Key Identifier:
                keyid:B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7360::/36
                  2803:7360:4000::/36
                  2803:7360:b000::/36
                  2803:7360:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:86:9c:0b:6d:f7:df:9e:67:a7:f4:38:22:af:e1:f6:90:2e:
         be:e4:86:5e:da:d0:3e:32:2e:0c:37:62:e6:0f:a5:9d:f0:15:
         9f:8d:2e:77:bc:7d:67:69:8a:c2:fd:6e:76:55:9d:1b:b8:88:
         4b:8b:dd:4c:b1:87:80:5a:0c:44:5a:e8:91:01:95:8b:d4:4f:
         98:74:bd:df:c9:46:06:6d:c0:70:c6:b9:5f:5a:e9:8d:29:11:
         51:a0:44:74:ba:02:74:57:9c:a8:97:32:1c:2c:6e:6f:fd:60:
         69:1f:f2:6f:bd:00:ca:4b:b7:c8:ad:cb:b7:70:2b:4d:19:3c:
         95:53:78:d9:a7:af:33:8a:2d:d1:65:70:6a:25:cf:fb:d9:f9:
         dc:2a:42:68:4a:2e:86:a3:a3:16:a3:fc:cd:0b:86:63:e1:0c:
         b8:f7:c3:a1:a0:a5:e4:02:36:bd:ad:ae:82:36:79:77:28:03:
         b5:f4:e2:c6:5d:06:e3:2b:18:3a:3d:aa:1b:17:84:77:a9:8b:
         09:e1:a0:02:ac:0d:58:79:96:47:e0:fd:dc:5b:19:0c:4d:d2:
         51:12:96:a0:59:9d:1f:12:3a:b9:be:1c:2e:8c:bd:f5:7f:b6:
         2a:5c:af:ea:af:56:c1:7b:1e:b3:7a:3a:5b:0d:31:ca:b0:9d:
         2c:b4:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 06:45:33 2024 by rpki-client on console-ams.rpki-client.org