Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          zkwANju02ifGGEYQxfXNTV/V3hO2Pz7xSuxf8h3PMqk=
Subject key identifier:   9F:4E:9B:98:7A:5F:B2:35:C7:45:6B:AB:7B:8B:9D:CC:44:C8:ED:D2
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       50A7C8AF19BF1AFD414B8C4B3100DD350038F1DA
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 12 Oct 2024 06:30:01 +0000
ROA not before:           Sat 12 Oct 2024 06:25:01 +0000
ROA not after:            Sat 11 Oct 2025 06:30:01 +0000
asID:                     273087
IP address blocks:        2803:bf90:7000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a7:c8:af:19:bf:1a:fd:41:4b:8c:4b:31:00:dd:35:00:38:f1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Oct 12 06:25:01 2024 GMT
            Not After : Oct 11 06:30:01 2025 GMT
        Subject: CN=9F4E9B987A5FB235C7456BAB7B8B9DCC44C8EDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:5d:14:b4:70:5f:11:44:1c:dd:30:94:98:
                    8c:79:23:52:fe:9b:b4:ff:78:a1:43:c6:bd:ab:9a:
                    09:21:2a:03:b9:0a:eb:66:f8:eb:0e:02:bf:cb:a8:
                    b3:97:41:07:fa:77:7b:a4:50:37:65:cf:6c:26:e6:
                    b0:20:59:8f:98:79:74:0b:c1:33:54:48:f2:20:8b:
                    b2:85:e4:f2:89:6d:df:cc:a3:6a:35:48:90:82:4e:
                    1f:fa:45:6e:8d:4b:85:d0:cd:cf:44:c0:f3:01:fd:
                    f4:80:21:06:6d:4b:4a:6f:35:df:e9:84:ab:d2:08:
                    4e:5a:e6:22:20:66:d5:9a:d9:db:a8:24:e1:b1:c9:
                    a9:4f:3c:df:2e:0d:df:5a:e4:0d:b7:f6:9c:e7:bc:
                    29:c5:f0:2d:88:bd:e4:ae:d9:13:67:e9:84:29:e3:
                    67:e6:23:98:cd:60:14:29:72:1c:de:ca:be:e4:a7:
                    11:e9:f9:c4:18:9f:1d:73:0b:c8:e3:a8:40:f4:b2:
                    56:af:39:8e:f7:a8:aa:b8:fc:11:00:73:05:bd:1b:
                    02:1e:f1:93:a7:0a:81:a5:71:83:a3:77:71:2d:e9:
                    dd:af:04:9e:04:e6:fe:7d:5d:71:59:0c:7d:d1:87:
                    a6:69:e5:10:96:48:c6:c8:19:e8:b5:08:2f:46:b9:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:9B:98:7A:5F:B2:35:C7:45:6B:AB:7B:8B:9D:CC:44:C8:ED:D2
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a373030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:f9:39:73:e3:6f:94:28:5d:7c:85:ca:7f:5d:34:65:23:
         ad:2a:1a:42:9d:13:b6:f6:50:a6:5e:03:54:72:97:84:e4:06:
         3d:51:94:d0:d7:5c:ef:49:22:c8:69:dd:6e:31:60:02:9e:21:
         7f:c0:42:c3:23:3b:7e:d9:f7:cf:e6:c3:e2:57:dc:e4:59:e0:
         cb:72:45:a0:34:28:22:50:f4:85:99:ec:a5:83:00:64:7c:dc:
         0c:da:12:81:66:76:be:e4:a9:ca:84:cc:73:7f:29:53:61:2a:
         67:89:22:fa:a0:d6:2e:e6:d6:76:f5:18:be:b1:36:f1:9c:db:
         7d:31:2d:d1:5b:0e:d7:8e:f7:df:9e:f6:b3:f7:91:d8:bd:f3:
         6b:54:03:ed:f1:6f:d3:85:5b:08:4c:2d:b2:0a:13:bc:94:3e:
         27:37:35:df:d4:46:24:8a:66:37:be:4d:15:65:7a:82:db:53:
         f2:4d:97:b3:58:93:a2:0b:92:be:19:d5:9a:8d:07:77:0e:19:
         0d:6d:94:be:08:b7:73:ad:13:19:22:4a:af:da:d7:0e:a9:f0:
         fe:86:2b:e3:51:27:c2:9a:1f:1a:54:17:68:35:32:77:a4:47:
         41:10:07:f8:87:d4:f9:5d:42:0b:72:2d:2c:4c:39:25:3e:3e:
         62:a2:59:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 23 02:13:12 2024 by rpki-client on console-fra.rpki-client.org