Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          WXYEMgKtm0W4y33V1cdL2hhy9nit5vso51U2ylln304=
Subject key identifier:   88:1F:56:34:8F:F9:ED:ED:29:1D:50:74:A5:33:32:EE:9C:CF:4D:ED
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       28DD566F6519DB1E25E094BBE0C66BAADEC3E4CE
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 04 Jul 2024 20:10:01 +0000
ROA not before:           Thu 04 Jul 2024 20:05:01 +0000
ROA not after:            Thu 03 Jul 2025 20:10:01 +0000
asID:                     273068
IP address blocks:        2803:b790:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:56:6f:65:19:db:1e:25:e0:94:bb:e0:c6:6b:aa:de:c3:e4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jul  4 20:05:01 2024 GMT
            Not After : Jul  3 20:10:01 2025 GMT
        Subject: CN=881F56348FF9EDED291D5074A53332EE9CCF4DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:d4:dc:6c:2c:84:5a:77:e4:12:8d:2b:6a:
                    02:78:08:82:59:e5:ab:9a:bd:25:01:32:c6:75:9a:
                    66:49:2b:83:92:ef:9b:1e:df:42:9a:0e:23:c2:e4:
                    8c:3a:b5:7a:48:00:e6:1f:18:c4:d9:9b:7d:66:3c:
                    d2:a8:b7:60:ea:7c:6c:8d:e6:16:cf:67:ab:eb:a3:
                    c3:0b:05:5a:c8:7d:1f:a4:2f:3f:6b:91:dc:d1:4c:
                    ff:2f:82:d3:69:67:fe:79:14:d6:5d:ab:60:e5:6a:
                    8e:48:9c:b6:16:00:79:f6:ae:27:cf:a4:91:03:78:
                    6b:02:e9:53:a1:36:fe:93:e2:ac:40:14:94:1f:8f:
                    4a:cb:67:42:54:64:08:64:5b:f0:aa:f9:d6:b9:62:
                    cc:da:e4:64:73:4a:e9:74:c8:33:ab:f9:80:b8:b9:
                    14:10:a8:55:2a:22:31:13:ff:86:74:8f:f6:61:63:
                    e8:f2:c4:c6:e2:1b:70:7a:e5:55:df:99:c0:19:11:
                    64:57:8d:1d:79:7f:e8:c0:30:7b:aa:03:f8:1b:0d:
                    75:fd:85:1c:bd:43:e5:64:6b:75:8f:e9:86:a4:fa:
                    2a:d1:75:f1:33:24:df:ee:65:ed:d3:f2:ea:01:f5:
                    47:ad:43:33:18:7b:d0:07:cb:c8:08:4a:2f:f8:21:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:56:34:8F:F9:ED:ED:29:1D:50:74:A5:33:32:EE:9C:CF:4D:ED
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3330303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:0c:8c:d7:f0:84:c5:4f:0b:28:0d:31:b1:4d:c8:db:4a:
         b5:ef:56:fa:ca:2d:b6:8d:f9:6a:1d:5f:b3:f4:5c:a0:ee:ca:
         dd:0a:4a:37:4a:59:94:b2:f7:a5:d7:5f:e4:cc:1a:e0:6e:68:
         d4:08:61:8b:12:51:24:56:b1:75:c7:9e:b2:7b:23:35:86:2f:
         b7:b4:73:73:84:5f:fb:50:ea:9b:a4:98:06:07:25:04:8f:d7:
         7c:1b:d1:ca:c3:b9:48:bc:5f:66:e1:15:e9:d2:87:89:82:61:
         9f:68:54:b0:65:cb:5c:c3:52:c3:d1:90:17:87:68:c2:ce:48:
         1b:41:ce:2a:6c:20:aa:54:b9:1f:8d:34:1a:27:90:15:2b:81:
         fb:dc:83:83:91:ef:d3:7f:15:a7:43:ff:0c:5e:ae:ec:dc:e4:
         41:46:38:9b:9c:c9:40:89:d7:ca:c4:21:7f:24:35:80:8b:cb:
         7e:8f:04:30:f6:14:fd:bb:fc:e6:a6:f8:91:a0:17:24:6a:95:
         0e:e1:a9:56:b0:7f:0c:8f:17:64:4d:d2:4d:b9:81:d3:de:48:
         45:97:77:bb:6a:f2:40:c5:4f:ed:48:09:28:aa:05:e6:31:74:
         1e:ae:f6:59:9e:49:36:aa:58:40:14:2e:e6:36:c0:ec:8d:2c:
         1e:b0:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org