Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          N13mJgR0ijQJbZmMmWEpCZVPt/DXbT1jw6mmSJU+13Y=
Subject key identifier:   BE:E2:CE:31:53:DB:1D:4C:DE:9C:7D:5A:07:65:5A:C2:AE:B8:49:9C
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       0592578AC3FB6F1AD631E62B43BC05673B110ADB
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 04 Jul 2024 20:10:00 +0000
ROA not before:           Thu 04 Jul 2024 20:05:00 +0000
ROA not after:            Thu 03 Jul 2025 20:10:00 +0000
asID:                     273068
IP address blocks:        2803:b790:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:92:57:8a:c3:fb:6f:1a:d6:31:e6:2b:43:bc:05:67:3b:11:0a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jul  4 20:05:00 2024 GMT
            Not After : Jul  3 20:10:00 2025 GMT
        Subject: CN=BEE2CE3153DB1D4CDE9C7D5A07655AC2AEB8499C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:df:64:eb:a0:e1:f7:6f:a9:a6:90:81:03:
                    0f:4a:88:c4:02:12:5b:fc:56:4c:c8:68:34:c9:14:
                    c4:b1:fe:7c:40:5b:95:60:6c:d3:32:fa:ae:ba:53:
                    05:57:f9:a5:5b:05:a5:fa:ed:3b:3b:17:d1:92:04:
                    95:e2:ce:ea:52:91:a2:81:a0:d1:77:6b:d8:b7:0d:
                    d7:05:fe:18:a4:5b:0f:a4:ae:ab:89:26:6c:66:8f:
                    43:3c:6e:57:c9:7f:5c:75:e4:43:bf:7d:db:ce:b1:
                    02:56:19:68:35:5f:02:fc:b7:b0:79:f2:d1:cb:0e:
                    99:e8:1a:68:d1:38:d9:c6:38:b0:64:86:d3:f4:b6:
                    ac:a3:d1:a9:29:da:3f:88:91:f9:19:3a:3f:23:1f:
                    80:43:7d:f8:f8:59:62:1f:b3:21:68:c6:e5:17:33:
                    9c:32:57:56:78:84:69:ab:9b:de:da:17:17:a0:da:
                    8a:43:ef:cb:0f:c4:9f:6d:37:9f:9c:12:8e:f2:c1:
                    42:12:34:76:e2:47:95:c0:49:f7:01:15:44:0f:4d:
                    96:a3:cf:cc:51:f0:dc:97:ab:66:a2:d5:75:f2:b6:
                    cd:72:10:51:84:d0:fc:97:44:04:30:88:15:19:ba:
                    8f:46:eb:b0:f7:f0:ef:39:5c:2d:d9:58:e2:1a:70:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:CE:31:53:DB:1D:4C:DE:9C:7D:5A:07:65:5A:C2:AE:B8:49:9C
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3830303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:2b:68:1d:85:22:92:9d:5d:a9:7f:4c:41:4f:de:90:9d:
         42:0e:9c:85:84:31:79:05:b3:4e:c6:09:60:a9:6f:84:1d:55:
         a9:23:4a:bf:66:d2:77:5f:2a:e4:cd:ae:e0:aa:98:a1:04:f3:
         c9:b5:2c:b3:56:ee:02:77:9c:11:dd:6d:90:93:bf:bb:56:50:
         6c:09:66:b9:75:74:9d:59:8e:8e:8b:5d:72:00:8f:0f:e8:e5:
         9e:68:e9:ea:d5:2f:73:ea:5e:73:97:b7:f1:a2:b6:1b:c5:4e:
         3f:b1:e4:2e:ac:9d:64:8d:ef:71:7d:b7:25:0e:40:84:d7:51:
         c4:64:4e:46:cb:b0:ab:db:84:41:57:fa:e4:b8:0b:85:f0:cc:
         0a:91:7d:61:c0:1c:59:10:03:d0:d8:72:fa:33:ed:1a:4c:03:
         6f:d6:ab:5a:b4:45:80:4e:26:97:d6:e4:2f:5e:12:c4:b6:35:
         f3:ef:75:e2:f6:82:49:fc:eb:60:b8:28:0d:18:de:36:0d:61:
         80:51:78:d9:75:53:42:ac:74:66:03:71:1a:70:d1:4d:6a:e6:
         c9:5b:cf:55:ca:f3:a1:e8:1f:33:ab:70:8c:38:38:44:58:a5:
         fe:74:51:cf:62:25:e9:d4:34:dd:d4:d6:a2:bb:a4:28:db:09:
         42:14:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org