Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa
File:                     323830333a663065303a3a2f33322d3438203d3e20323639383634.roa (raw, json)
Hash identifier:          xQ58YIBLP39dvKkys7hOeN15Eh8WGGw4mKcdCiDPZ78=
Subject key identifier:   F0:24:D5:D0:C8:D0:AB:DE:A4:05:36:0B:C6:31:74:DF:FA:77:88:EE
Certificate issuer:       /CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
Certificate serial:       7B5D8F31E7BFBF74D4D52BA04D541EDD8C9A5DC9
Authority key identifier: 4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     269864
IP address blocks:        2803:f0e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5d:8f:31:e7:bf:bf:74:d4:d5:2b:a0:4d:54:1e:dd:8c:9a:5d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=F024D5D0C8D0ABDEA405360BC63174DFFA7788EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:2d:e6:27:d0:ad:50:fb:c9:7e:f9:48:55:
                    a8:6d:73:0a:46:6e:15:a1:91:20:40:4b:2f:82:31:
                    03:ac:a6:96:1c:73:44:42:96:ec:fd:a1:74:47:ff:
                    17:45:81:9e:c5:25:3c:74:e0:01:27:68:4b:8a:14:
                    1d:b3:c2:8f:d2:44:66:4b:59:cb:e5:c4:2d:e5:a1:
                    a8:5b:d0:fd:5a:84:dd:1c:ce:55:45:40:a1:59:f7:
                    38:8e:40:21:f2:f5:20:5c:12:09:6e:a8:84:b1:38:
                    53:7a:bc:f1:3d:2f:42:fb:2c:ec:f4:0c:14:43:31:
                    f2:ed:03:2e:b5:d6:7a:fa:e2:8b:c0:74:83:7f:9b:
                    f5:cf:9e:3b:f0:49:66:bd:70:4f:8a:4b:d6:c5:34:
                    66:91:41:81:74:64:b1:d8:6c:54:44:c5:ba:ec:05:
                    6c:70:00:0b:80:5d:06:89:b4:60:7d:f5:40:76:cb:
                    93:b2:37:d2:a6:a3:0a:03:d2:ec:18:cf:3f:ff:7c:
                    5f:c8:95:18:c2:fe:23:22:83:c1:36:5b:64:8f:2d:
                    79:b0:48:4b:6d:06:ef:22:52:de:71:32:2e:b8:78:
                    e3:19:d7:69:26:76:50:04:f2:5d:33:9b:bf:e8:15:
                    40:fd:f9:8b:07:a0:b6:ba:c4:07:92:34:7f:8a:26:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:24:D5:D0:C8:D0:AB:DE:A4:05:36:0B:C6:31:74:DF:FA:77:88:EE
            X509v3 Authority Key Identifier:
                keyid:4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/323830333a663065303a3a2f33322d3438203d3e20323639383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:77:2e:be:4f:11:3d:a2:e6:d7:83:19:37:8f:ab:38:5a:8a:
         ce:d7:6a:89:7a:fe:46:71:28:64:d8:c7:fc:34:76:95:19:27:
         07:60:91:d8:e1:13:d7:cd:71:41:74:55:2c:1c:a4:a4:78:49:
         f8:78:c2:8c:31:12:0e:6c:76:4d:ce:3f:61:2a:ed:6a:a3:61:
         05:c9:58:60:67:6b:66:73:d7:87:f6:2b:78:a4:5b:b6:06:a2:
         7f:21:b4:bc:01:4e:52:fa:a8:2c:b5:d7:a2:67:fa:ca:41:c2:
         a9:71:95:74:dc:5e:40:01:00:4d:b6:d3:e3:be:e4:28:e3:c9:
         97:72:ac:dc:25:b7:3e:e2:c8:a5:b8:c4:28:43:fa:cf:f1:ce:
         df:06:56:b1:c2:a1:f9:12:9a:c5:55:2b:34:30:f2:40:44:6a:
         0d:f2:a7:4f:c6:9a:1e:3d:c4:2d:df:33:f0:11:be:3f:d5:55:
         eb:08:ab:41:56:65:61:1d:f0:7a:ad:b3:3d:12:66:78:34:20:
         12:97:b2:c4:9d:38:49:c2:15:b4:da:f5:09:c2:d2:ca:c5:c5:
         79:97:e9:5c:eb:8c:bc:83:8e:2c:8d:4e:b9:81:ea:d5:5a:43:
         7f:b4:61:f6:d4:8b:4d:1d:dd:c0:55:4f:74:d3:ff:dd:f5:16:
         bc:17:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:45:04 2024 by rpki-client on console-fra.rpki-client.org