Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa
File:                     323830333a623134303a3a2f33322d3332203d3e203532333536.roa (raw, json)
Hash identifier:          I7HzplotlhNk2MY2IJuNUKNJsJgaIrkH+2g0e0pkrBc=
Subject key identifier:   7E:40:D9:96:CF:A0:42:D5:36:D8:5F:79:92:E4:5E:CB:98:E1:B6:2D
Certificate issuer:       /CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
Certificate serial:       2AF79A7C993409373008A94F62060D24600B73BD
Authority key identifier: 1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa
Signing time:             Tue 05 Mar 2024 18:21:15 +0000
ROA not before:           Tue 05 Mar 2024 18:16:15 +0000
ROA not after:            Tue 04 Mar 2025 18:21:15 +0000
asID:                     52356
IP address blocks:        2803:b140::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f7:9a:7c:99:34:09:37:30:08:a9:4f:62:06:0d:24:60:0b:73:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
        Validity
            Not Before: Mar  5 18:16:15 2024 GMT
            Not After : Mar  4 18:21:15 2025 GMT
        Subject: CN=7E40D996CFA042D536D85F7992E45ECB98E1B62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:56:7d:04:ea:76:21:4e:09:99:a8:b9:5c:
                    ec:fc:db:f2:f6:27:d9:c8:8f:e4:8c:69:fe:61:16:
                    9f:47:20:ed:18:7f:71:8e:41:76:75:04:12:3a:33:
                    50:ed:0a:63:74:12:7d:31:fe:af:f7:2c:88:17:39:
                    67:2d:10:14:06:7c:bf:18:3f:9d:7d:65:83:dd:45:
                    79:7c:f8:3b:56:eb:5d:07:1b:85:32:b1:cb:bc:60:
                    d7:99:89:bd:6b:ba:b8:3c:64:ef:19:c0:12:95:32:
                    c4:07:75:78:79:a5:f7:11:fc:86:fd:09:d9:55:a0:
                    77:13:79:f9:18:4e:15:63:83:7e:74:95:3e:bf:39:
                    bc:e7:69:7a:bc:4f:7c:e5:38:30:ab:34:5d:79:5a:
                    96:2f:6b:04:e8:e0:9c:a7:43:d5:71:90:69:0f:2e:
                    5d:15:2f:f8:91:50:ce:e0:40:9b:51:fa:9b:44:08:
                    16:b0:a0:c9:4a:aa:3d:72:ea:1c:53:b3:f1:4b:e1:
                    90:62:27:94:10:fa:3d:cb:e5:e1:95:e5:08:c3:63:
                    29:58:76:92:04:94:61:3f:99:3e:27:df:ae:79:b6:
                    2f:2a:0e:88:bf:7e:f5:d7:6b:65:b7:4a:77:05:65:
                    75:f6:0b:75:38:51:41:de:f8:07:05:d3:ea:72:21:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:D9:96:CF:A0:42:D5:36:D8:5F:79:92:E4:5E:CB:98:E1:B6:2D
            X509v3 Authority Key Identifier:
                keyid:1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:43:81:89:35:e7:58:fc:48:ac:d8:01:4a:ab:1d:20:6f:49:
         18:73:4e:67:d1:56:e5:a3:f5:71:43:07:aa:c9:aa:c1:3c:a9:
         d6:e5:f7:2e:cf:b0:ac:95:a3:92:a2:2e:ce:07:31:77:b5:d9:
         50:60:df:c7:af:fc:ff:7a:11:69:75:a9:72:23:27:a9:c0:c0:
         da:ef:ec:c7:45:fd:41:2b:59:fd:34:85:5c:95:01:4a:2f:4d:
         0b:94:40:6b:a9:e6:d0:d8:ad:ac:8b:43:6a:94:9b:e3:cd:f1:
         79:cb:c6:eb:11:51:91:90:41:4c:6b:a4:2a:a2:0b:c8:46:8b:
         aa:41:bb:0a:9d:5a:80:4d:dc:48:81:16:98:e4:27:fc:c8:57:
         6b:63:2c:1b:c1:f8:ff:7d:e1:23:ec:02:d3:05:e4:46:f8:f2:
         d7:ac:5e:a9:36:47:c4:b5:27:c7:93:de:23:30:59:77:44:22:
         88:05:e3:ce:e2:64:59:cc:5c:58:90:a4:76:48:59:4f:92:3c:
         46:24:9e:1b:71:0b:5f:8c:32:d6:01:77:3d:2a:cf:bc:d8:fd:
         4a:2a:6f:01:d8:9b:9b:79:72:6a:aa:8e:0b:97:0f:25:d8:56:
         68:53:a4:39:2a:5f:21:bc:8e:87:71:3a:e8:9f:b0:7e:b4:ee:
         2f:74:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:51:46 2024 by rpki-client on console-ams.rpki-client.org