Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a333030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a333030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          cV+QEZ1Z0g9Lv2MdyNIPh91n48FPLa+WeZYYtVMJ/sw=
Subject key identifier:   1A:FE:BB:10:8C:22:5A:0D:C9:2C:4C:7E:06:8E:F7:6A:E1:5B:1C:00
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       5B319BC05F40FE3501AA28B0230801129AE501A1
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a333030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 12 Oct 2024 06:30:00 +0000
ROA not before:           Sat 12 Oct 2024 06:25:00 +0000
ROA not after:            Sat 11 Oct 2025 06:30:00 +0000
asID:                     273087
IP address blocks:        2803:bf90:3000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:31:9b:c0:5f:40:fe:35:01:aa:28:b0:23:08:01:12:9a:e5:01:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Oct 12 06:25:00 2024 GMT
            Not After : Oct 11 06:30:00 2025 GMT
        Subject: CN=1AFEBB108C225A0DC92C4C7E068EF76AE15B1C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:d5:42:51:4f:fb:bb:41:7b:df:d5:09:19:
                    a9:18:23:3d:a0:2d:3b:c9:bd:55:ec:65:70:56:9e:
                    8b:2d:8b:f0:0a:cc:9d:ac:80:e5:ce:bd:95:72:b1:
                    0c:3a:94:ee:b4:5d:96:dd:10:df:71:c9:68:d1:ab:
                    d5:eb:51:12:67:67:b7:39:3e:76:f9:60:bb:c9:d9:
                    1f:7c:e9:b6:b9:03:fc:8b:98:66:3c:19:40:50:8e:
                    c8:d5:2f:31:07:4c:b3:ea:17:22:03:35:2c:4e:65:
                    7b:fc:92:9b:c8:c1:da:9a:44:c1:62:95:a9:63:7c:
                    7e:24:36:35:1d:90:da:81:a8:f8:71:48:0c:de:b7:
                    59:ed:a2:8a:8d:ee:dd:88:8d:0d:15:50:a3:9b:d7:
                    ae:d8:03:b6:4c:ed:3e:3b:60:5b:70:65:59:37:7f:
                    87:de:5b:d3:87:75:61:1c:e7:ae:fd:0e:16:ce:ac:
                    03:3d:74:7b:67:74:d0:9c:17:b0:cf:4b:fb:cb:59:
                    6c:c0:c2:71:89:06:f9:41:98:32:2b:19:fc:f2:ac:
                    a6:db:30:d9:0e:0a:9b:b0:4c:57:3a:99:c0:2b:6a:
                    bb:37:14:a3:15:2d:ed:4c:63:e0:f0:c1:b8:ac:7b:
                    58:85:77:8e:18:47:0d:00:b9:e0:a7:f4:96:96:bd:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FE:BB:10:8C:22:5A:0D:C9:2C:4C:7E:06:8E:F7:6A:E1:5B:1C:00
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a333030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:ed:87:f8:35:31:f9:ea:a2:a1:01:90:66:cd:b0:6b:71:
         3f:5d:31:b0:b2:a2:45:b6:68:f4:51:e5:f0:8a:47:f8:b1:36:
         c0:ec:cb:52:03:84:09:4b:9e:90:43:d2:c0:fd:fe:fc:6a:34:
         f1:a4:0f:9a:1c:54:74:c0:a4:0a:9f:d4:12:06:a8:21:51:ae:
         16:6b:86:13:7b:eb:b7:7c:11:0e:46:ff:ae:4e:58:92:be:5e:
         0a:be:e7:54:cf:e2:f4:9b:b2:a4:18:19:ad:d4:67:d4:50:71:
         67:5f:03:f9:05:38:f9:81:af:4b:29:02:10:d8:bc:16:18:d5:
         be:5e:fe:6a:90:19:58:35:d8:e9:ff:c6:6b:4c:29:2d:99:95:
         77:43:db:81:04:46:ed:16:dd:79:32:59:7b:2c:d8:75:5e:13:
         5e:c1:e2:ca:31:dc:1f:eb:f4:bb:e3:d8:30:cd:16:ee:ec:46:
         0e:33:de:df:77:85:3e:56:f7:ac:3c:12:59:ea:16:4c:9b:25:
         27:58:4d:c9:44:ce:4c:6d:d8:5a:04:b4:fd:f9:b4:ae:07:d6:
         0b:65:96:c1:84:72:fd:97:1f:30:df:3b:31:fe:2c:3a:40:79:
         9d:85:56:25:69:0c:c4:f3:dd:62:2e:fb:1c:f1:54:db:46:f5:
         51:fc:e9:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org