Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a653030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a653030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          Ha9HILFYnqqHQCufdt9u7+VRalfO7jzGfsj1zMnWnN8=
Subject key identifier:   C2:47:6D:17:93:10:DA:BC:03:CC:09:C6:BA:56:B8:9F:4E:1B:36:A6
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       75740A2D3458F036CC2536C669186141F1B3791A
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a653030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 12 Oct 2024 06:30:02 +0000
ROA not before:           Sat 12 Oct 2024 06:25:02 +0000
ROA not after:            Sat 11 Oct 2025 06:30:02 +0000
asID:                     273087
IP address blocks:        2803:bf90:e000::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:0a:2d:34:58:f0:36:cc:25:36:c6:69:18:61:41:f1:b3:79:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Oct 12 06:25:02 2024 GMT
            Not After : Oct 11 06:30:02 2025 GMT
        Subject: CN=C2476D179310DABC03CC09C6BA56B89F4E1B36A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:ab:0d:fc:75:f8:0a:89:6c:dd:68:03:ae:
                    bd:cb:74:23:34:5c:d5:da:fd:0e:90:a0:44:d8:0a:
                    4a:e9:70:54:8d:1e:b9:25:40:9e:e1:1e:09:14:5b:
                    19:48:a2:48:eb:13:b6:f7:4c:89:db:6a:6f:6b:44:
                    b7:dd:bd:f0:6b:8d:9a:d7:55:02:5f:d5:4f:03:28:
                    49:84:99:35:02:2c:a1:fb:01:00:c6:4f:70:37:80:
                    8c:23:2c:db:2f:7a:e0:85:8a:5b:e5:1d:b4:c9:7a:
                    66:db:a3:33:44:0b:8f:7a:20:92:96:7c:86:19:68:
                    a4:29:d6:75:46:a8:5d:09:40:35:c2:29:8f:d0:ce:
                    38:d2:1f:1d:c6:96:df:29:33:fc:73:d1:89:e1:fa:
                    11:54:c7:71:bd:cb:e3:dd:dc:6b:8a:ef:0a:3c:ec:
                    f0:1e:d9:74:10:8e:d9:f1:36:3a:62:1f:26:d4:8f:
                    9d:cf:bf:b7:f6:12:b3:2a:de:c8:68:ff:cc:d9:1e:
                    45:25:a8:5d:e0:b5:1c:29:6b:03:c8:04:5e:4d:9e:
                    eb:2a:03:f8:51:c1:a8:5e:97:17:4e:1a:7c:e9:27:
                    59:38:bf:40:82:a2:d0:7d:4a:79:d8:f0:a9:be:27:
                    72:b2:a4:94:ac:d0:4c:6a:bb:3a:f6:12:f0:8f:60:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:6D:17:93:10:DA:BC:03:CC:09:C6:BA:56:B8:9F:4E:1B:36:A6
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a653030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:ee:45:d3:0c:07:0b:95:9a:2d:90:54:04:72:d0:6f:96:
         9a:12:9f:d5:17:10:f5:39:4a:f0:3b:cf:93:2b:0f:ff:be:25:
         90:7e:e6:09:28:43:d0:19:df:9f:e9:12:e4:fd:3f:a1:5a:6c:
         f9:73:48:ae:37:f4:62:5e:3a:49:a3:c4:15:d4:2f:f3:5a:8e:
         1d:58:78:20:1d:fd:5f:8e:83:28:75:5c:e0:4d:8f:ca:a5:eb:
         47:64:11:a5:e5:75:e8:43:24:84:ab:43:c5:1a:22:4b:e1:3d:
         94:01:d1:31:c4:65:59:d4:70:9e:da:b4:23:96:7d:3e:88:3e:
         cc:87:65:8d:87:8f:07:0f:79:e8:da:a2:4f:4c:70:c6:93:f5:
         84:0b:21:17:66:1e:aa:af:d6:ab:a8:da:dd:ea:28:bf:ff:91:
         fa:e7:d7:50:ce:2b:9d:bc:a1:21:f5:ee:a7:9b:19:1c:ec:2f:
         39:99:47:5f:03:bf:63:d2:18:8b:cd:e3:b3:51:5f:5f:4a:74:
         ef:11:fc:d2:37:07:44:ee:b7:7b:60:b2:44:84:08:66:83:48:
         e0:aa:4f:06:80:94:d2:41:1c:ca:bc:01:09:b5:0c:02:54:af:
         75:b7:83:5b:a3:e8:2d:db:94:5c:6b:b5:0a:25:92:2e:21:7b:
         f5:05:3d:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org