Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa
File:                     323830333a373061303a3a2f33322d3332203d3e203237383535.roa (raw, json)
Hash identifier:          HSz+R2gfkvAcrOQ/+G0l4/6kEpHCPNzfG8tjw5VA2QM=
Subject key identifier:   A3:22:8A:E0:B3:AC:63:E3:3F:99:F0:07:5A:17:21:7C:C9:4A:E1:B8
Certificate issuer:       /CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
Certificate serial:       343025DF3BB2BA274524BA5D843A59F31CC626FC
Authority key identifier: 87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa
Signing time:             Tue 05 Mar 2024 18:03:47 +0000
ROA not before:           Tue 05 Mar 2024 17:58:47 +0000
ROA not after:            Tue 04 Mar 2025 18:03:47 +0000
asID:                     27855
IP address blocks:        2803:70a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:30:25:df:3b:b2:ba:27:45:24:ba:5d:84:3a:59:f3:1c:c6:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
        Validity
            Not Before: Mar  5 17:58:47 2024 GMT
            Not After : Mar  4 18:03:47 2025 GMT
        Subject: CN=A3228AE0B3AC63E33F99F0075A17217CC94AE1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:23:d1:c1:45:d7:4d:c7:a2:34:8c:c9:37:
                    97:57:c9:b9:91:27:c6:62:d3:39:fe:7f:17:19:0a:
                    a0:fb:6e:3a:43:22:41:37:41:a8:9d:8b:3b:68:d8:
                    25:06:37:7a:b0:31:8c:68:d6:3f:11:bb:73:f1:ea:
                    e7:bd:e1:60:49:99:d6:66:65:29:9f:37:ff:95:68:
                    4a:d3:2e:db:ba:64:e7:c0:28:7f:9b:34:55:b4:f7:
                    cb:47:ac:b1:86:39:a3:e8:9a:59:a5:7f:7c:d6:31:
                    8f:04:8b:7f:69:61:7a:66:02:e4:45:f6:dc:b4:9e:
                    cd:80:05:d7:ac:12:fc:7c:b8:7e:ce:b5:60:c6:5c:
                    4a:51:7b:f6:e0:3b:3b:83:78:a6:6e:e4:f6:82:47:
                    a5:aa:18:a8:84:6f:62:c2:56:e3:91:c2:db:0f:eb:
                    c2:88:b2:b3:86:4a:18:37:c0:e6:84:a1:55:0f:10:
                    d7:9d:5f:93:8a:ad:1c:83:67:ea:78:22:f5:52:95:
                    bd:7d:eb:c2:24:e2:d0:60:63:56:c2:95:48:0c:dd:
                    c6:23:58:05:38:75:51:1b:97:45:20:7f:0e:81:fb:
                    81:5c:fa:01:88:33:6e:66:8c:a5:21:55:a3:b3:f0:
                    19:1b:d6:96:70:38:64:4b:b5:61:af:d6:1b:61:be:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:8A:E0:B3:AC:63:E3:3F:99:F0:07:5A:17:21:7C:C9:4A:E1:B8
            X509v3 Authority Key Identifier:
                keyid:87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/323830333a373061303a3a2f33322d3332203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:70a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:12:04:60:1d:c7:02:f3:46:41:86:de:91:3b:19:b1:0a:
         b2:41:21:1f:a8:62:e5:81:39:06:4f:df:b9:ca:0a:d9:95:0c:
         41:1f:fd:c0:b7:ef:7d:b2:22:be:88:ab:61:5d:d4:a3:74:32:
         4e:88:f3:fc:99:f1:e9:44:d9:66:d6:fb:52:d8:fe:3d:79:ed:
         86:15:ed:01:c1:4e:7a:70:43:31:52:e6:dc:57:3e:f9:33:fc:
         64:b7:6c:36:e1:75:e5:36:f3:0c:d0:3f:e7:a5:fb:22:f4:bc:
         08:fe:5a:22:98:02:cb:06:3a:1a:1a:57:65:79:cb:e9:1c:1c:
         07:59:a6:ab:58:ef:07:13:63:df:95:b0:59:55:a5:44:9d:38:
         42:8c:72:99:ca:7a:4f:2f:51:e4:82:fb:2b:c5:b6:87:65:3b:
         95:0c:c3:6d:80:65:ad:bc:3d:8d:b7:94:a4:8c:b2:e2:e3:82:
         b1:ea:86:ec:47:a5:03:3c:e8:26:42:74:88:68:d6:64:96:b6:
         38:a3:3d:4a:22:3b:78:93:43:08:67:2e:d5:be:19:1a:27:51:
         4b:29:81:5a:22:40:9c:26:c5:4b:c0:e0:96:19:66:68:52:1e:
         69:f8:23:05:59:89:e2:e8:6c:55:d4:b4:11:24:fd:b1:31:f7:
         96:95:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:10:16 2024 by rpki-client on console-ams.rpki-client.org