Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3130303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3130303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          6aq9rmZFO6mMKhcqWcpoEriMzNegdSlq6tmcslr4URk=
Subject key identifier:   BC:BE:66:01:6C:7F:03:5F:FD:05:C4:CA:6D:FE:BA:9F:80:D8:35:34
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       0E3F2C40EC7F54E8C494C263E87116CD2A26AE71
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3130303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 04 Jul 2024 20:10:03 +0000
ROA not before:           Thu 04 Jul 2024 20:05:03 +0000
ROA not after:            Thu 03 Jul 2025 20:10:03 +0000
asID:                     273068
IP address blocks:        2803:b790:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3f:2c:40:ec:7f:54:e8:c4:94:c2:63:e8:71:16:cd:2a:26:ae:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jul  4 20:05:03 2024 GMT
            Not After : Jul  3 20:10:03 2025 GMT
        Subject: CN=BCBE66016C7F035FFD05C4CA6DFEBA9F80D83534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:97:a2:d6:e1:26:04:3c:1b:f7:29:c5:ad:
                    11:7d:76:72:a6:fa:8c:d6:85:10:28:7f:24:b4:bb:
                    9f:9d:37:77:c6:79:48:d4:6a:30:c2:6f:64:f7:10:
                    29:f2:98:3c:8d:4d:0c:ed:57:ad:3c:e2:ce:90:a8:
                    7e:4d:af:bb:b6:5f:52:86:8d:32:7e:0e:dc:1a:f5:
                    08:df:a0:54:fa:b7:67:3d:46:25:b7:f4:65:c9:9b:
                    6e:e7:d4:45:62:6f:a7:02:df:50:ca:1a:77:c8:0d:
                    fd:de:03:63:fa:33:38:be:f9:d2:ad:8c:41:b5:3b:
                    9e:e9:f4:5b:9e:4d:d5:81:56:b2:9f:dd:a0:ce:c9:
                    2c:39:27:0e:8d:cd:d7:cb:39:c8:23:12:c4:62:cb:
                    42:3d:23:8f:94:17:f7:53:79:77:e5:5c:2b:f3:fb:
                    99:2e:49:ea:8e:2b:39:8f:c4:51:a1:d6:af:7a:be:
                    87:25:ec:e8:e7:ab:1a:fe:fd:af:d2:20:9a:eb:bb:
                    19:98:d6:22:58:17:8d:b9:bc:5a:9d:12:70:84:59:
                    8d:9f:c7:8f:21:3c:eb:a9:3c:9f:59:ce:a3:84:0e:
                    e5:b9:24:01:fa:e7:c0:e0:6c:99:a4:5a:eb:0b:13:
                    d7:67:ea:e7:1b:ec:50:e4:d2:50:7a:fc:e2:8d:5a:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:66:01:6C:7F:03:5F:FD:05:C4:CA:6D:FE:BA:9F:80:D8:35:34
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3130303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:37:2a:b9:c2:3e:08:89:b0:6e:94:ed:16:54:b4:29:0d:03:
         58:85:21:a5:24:91:12:da:fb:d3:ab:cf:fe:a5:d0:ee:01:1c:
         8d:ee:0c:17:09:4c:86:1c:95:86:3c:70:c0:e2:98:ea:10:d1:
         be:d5:e0:46:64:52:75:2c:64:db:c6:4e:f4:4b:5f:b3:be:8a:
         f5:f7:2f:27:e0:96:53:66:16:79:2a:0f:fa:6b:55:47:37:97:
         02:9e:c9:5b:37:d2:e4:82:3f:93:f3:70:1f:26:2e:56:82:7d:
         b0:93:bf:d3:45:5e:94:b9:b8:76:71:48:81:21:7e:d8:fc:41:
         c8:fa:be:56:7c:0c:28:01:3e:61:88:f6:81:52:43:f6:f4:9d:
         4f:43:51:a5:2d:4f:2a:bc:5b:e7:2e:1a:d1:52:33:ab:cc:94:
         6d:2d:2f:d7:25:6c:d6:e2:9d:b1:5a:d7:7f:c0:8a:14:61:5b:
         dd:68:75:eb:77:08:96:c9:16:a2:d4:f5:b8:af:7e:25:4b:3a:
         84:3f:b3:0e:91:c7:53:ce:97:89:66:af:95:c0:74:05:39:74:
         2b:13:ec:26:da:93:f5:1f:1b:47:5c:98:d0:d7:5d:38:89:d5:
         48:5f:7f:73:98:57:d2:33:f8:8d:49:dc:4f:6f:68:be:26:1e:
         0b:49:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:21 2024 by rpki-client on console-ams.rpki-client.org