Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a613030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a613030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          uIReP5Pw81cgy5cVXpdu0EDnWEwRJRY91vhf0hsDlsA=
Subject key identifier:   1E:DC:A7:ED:0D:8A:AD:CD:49:8C:79:CB:DC:3A:60:8E:6C:13:26:39
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       4D23D127085688C3705F6CF4F46954054D05AD82
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a613030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 12 Oct 2024 06:30:00 +0000
ROA not before:           Sat 12 Oct 2024 06:25:00 +0000
ROA not after:            Sat 11 Oct 2025 06:30:00 +0000
asID:                     273087
IP address blocks:        2803:bf90:a000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:23:d1:27:08:56:88:c3:70:5f:6c:f4:f4:69:54:05:4d:05:ad:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Oct 12 06:25:00 2024 GMT
            Not After : Oct 11 06:30:00 2025 GMT
        Subject: CN=1EDCA7ED0D8AADCD498C79CBDC3A608E6C132639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:1a:de:5a:40:6b:c6:56:94:45:2f:dc:96:
                    20:f4:11:3a:42:61:83:b1:6e:fa:f0:93:32:df:79:
                    4f:c3:6f:ce:81:a1:d9:20:4f:2e:22:2c:32:6c:af:
                    22:69:ee:f3:b0:68:f7:85:d6:8a:5a:d7:54:f1:31:
                    ba:33:8c:94:f7:21:37:4c:86:cc:86:91:c6:ba:37:
                    72:1f:8c:9e:61:6b:55:3d:15:d3:02:95:09:d1:1d:
                    72:56:2d:fd:18:f9:15:77:b7:b7:c7:89:c7:82:71:
                    88:9a:db:2d:67:40:c7:9b:6f:bc:8b:fa:74:aa:b4:
                    65:54:f1:4e:d6:ac:1f:b1:dc:0a:d4:f6:96:68:e7:
                    83:5f:20:14:06:90:b3:bc:f8:28:e7:c4:6a:dc:53:
                    78:95:ff:85:2a:fb:6d:78:42:b3:8c:cb:97:97:6f:
                    47:e1:cc:72:c5:13:f2:3f:2a:d7:ed:6e:8a:8e:ef:
                    76:a4:48:32:47:5b:c6:fd:4b:37:bb:06:39:cf:d8:
                    46:ed:98:15:f5:5b:49:40:5a:09:24:bf:38:14:fe:
                    e8:ec:14:8d:8b:ac:ca:2d:b9:12:3f:59:7b:15:93:
                    02:b3:3d:17:51:3d:11:e7:60:95:b9:47:af:82:af:
                    fc:7e:80:57:ce:de:fc:9f:c4:18:64:7b:d5:89:eb:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DC:A7:ED:0D:8A:AD:CD:49:8C:79:CB:DC:3A:60:8E:6C:13:26:39
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a613030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:68:9b:16:e4:98:0e:56:2f:68:37:74:6e:32:a6:9b:99:
         3d:e2:f7:c9:5a:0a:69:59:4c:3f:36:7f:72:63:31:22:94:db:
         c8:95:80:97:bf:22:ec:0f:68:4a:e0:ad:0e:29:2a:f5:8d:8f:
         2f:c5:fd:49:b6:b6:df:29:82:63:a6:db:6d:f2:71:b4:15:7b:
         11:9d:45:49:f7:0f:e8:0f:1b:8e:8c:56:47:12:37:d5:db:7a:
         4c:3f:08:d5:0d:18:73:f7:17:8c:6e:63:cd:d6:ee:81:72:fd:
         f9:32:0b:2b:73:20:0a:2f:44:9f:5b:57:ea:99:0e:0f:b1:f0:
         b8:61:53:85:b5:05:90:fe:82:69:c6:9a:81:0e:c9:e1:1e:24:
         c1:5d:27:ce:a1:9e:f3:45:cd:f5:24:77:8d:49:af:12:5f:f4:
         ad:d5:0c:25:40:73:68:7d:f0:3d:8e:1a:2a:ea:12:f1:18:4c:
         3f:ba:21:1c:c6:d0:25:91:37:c1:c6:c6:83:01:4e:30:e8:92:
         82:36:0b:ca:5e:5e:74:a7:b1:a2:19:27:84:b9:c2:e4:31:ac:
         5e:46:c7:a6:15:2d:22:d5:2f:3a:02:72:26:7b:5b:ef:bb:b5:
         52:fc:06:16:fd:fc:93:de:e2:2b:53:81:b3:8c:5f:54:00:ae:
         76:9d:6f:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org