Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          7rfyk3seTLwHXuLCEYICVPkKf1Ctiw4tLSF9Knepj3I=
Subject key identifier:   74:24:0F:D2:EA:1F:AD:6F:D4:35:04:5A:36:02:97:63:19:91:1B:29
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       335DE19EC0F0A3D3FC81F19595BB221B0B349A32
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 04 Jul 2024 20:10:00 +0000
ROA not before:           Thu 04 Jul 2024 20:05:00 +0000
ROA not after:            Thu 03 Jul 2025 20:10:00 +0000
asID:                     273068
IP address blocks:        2803:b790:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:e1:9e:c0:f0:a3:d3:fc:81:f1:95:95:bb:22:1b:0b:34:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jul  4 20:05:00 2024 GMT
            Not After : Jul  3 20:10:00 2025 GMT
        Subject: CN=74240FD2EA1FAD6FD435045A3602976319911B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:20:5f:ff:f9:0b:e3:0d:1b:0c:f5:c8:8a:
                    1d:d6:0d:2c:90:6e:a9:19:2e:3b:18:8b:eb:f5:e8:
                    da:d3:42:18:b6:91:7a:47:47:30:9c:af:47:71:94:
                    89:60:8e:8d:4b:e6:0d:48:4d:b0:09:fc:3c:ec:75:
                    37:b8:9a:f2:23:8c:9d:fb:e8:59:d4:d1:23:b9:65:
                    17:4d:cb:31:da:09:f0:b1:55:c2:03:f4:f0:79:65:
                    26:52:73:3a:8e:15:85:c3:17:3e:fe:6b:43:41:a0:
                    5a:d6:67:12:24:17:1c:d6:d9:01:dd:ae:4f:f5:67:
                    15:15:40:6e:d2:ce:41:34:51:e0:37:3b:67:47:1a:
                    71:c7:20:33:15:39:42:45:e2:ee:b7:90:07:d1:17:
                    50:55:2d:4e:85:d1:69:0f:97:b0:d1:e2:c5:fe:66:
                    cf:fb:e4:30:ea:4c:45:f8:20:ba:3a:6f:66:6c:27:
                    10:f0:1d:3b:55:47:7f:d5:83:6c:e7:33:b1:0e:1d:
                    b2:da:b9:b4:b0:81:74:98:cb:c3:fe:b5:27:c1:3a:
                    9e:1f:6b:5c:82:fa:b5:1e:eb:64:66:69:28:0e:dc:
                    6d:db:c7:88:0b:7a:80:56:44:92:74:77:b3:ef:c0:
                    6f:e3:5a:d0:63:85:3a:d5:b2:db:42:92:db:56:e4:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:0F:D2:EA:1F:AD:6F:D4:35:04:5A:36:02:97:63:19:91:1B:29
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3430303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:d2:54:ad:ca:58:be:e5:c6:63:87:6a:03:c1:c0:76:58:
         ce:95:79:18:f8:df:2a:d0:3f:13:14:e5:c8:25:34:92:bd:08:
         90:fb:d0:ce:d3:7b:38:87:bb:d3:90:06:ce:9f:a7:57:4d:9e:
         50:a1:09:21:b5:ef:65:22:f2:83:6a:bd:d3:37:e7:a0:d4:cd:
         00:7b:06:56:93:5c:73:33:3b:e6:2d:43:17:84:63:84:04:07:
         6d:40:02:c0:b4:a9:57:89:a0:ef:42:9e:75:e7:d3:3f:2b:5c:
         ce:70:e4:73:c3:f7:0c:d4:8d:da:d1:d1:9d:00:62:62:14:6f:
         50:21:0c:e1:0c:5e:4b:8a:29:61:e2:0e:eb:41:ba:02:4b:65:
         f0:05:4e:62:35:49:9a:9a:f0:83:e3:5e:48:7b:5c:1d:e0:e5:
         d2:50:5a:34:96:0c:17:dd:20:9f:7d:a3:36:f7:77:cb:73:5a:
         53:15:88:d0:8d:56:70:e3:f0:3d:ec:1f:ac:96:7e:52:fe:aa:
         db:bc:77:92:ce:0c:78:34:3e:04:7d:65:f6:1d:6f:0a:37:d3:
         c0:39:b8:48:90:77:a8:db:52:96:c6:40:78:0a:57:7a:36:e6:
         b0:df:e7:e4:7e:ed:8e:f6:ff:da:08:89:5b:57:a5:08:b2:ed:
         6a:20:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org