Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a336139303a3a2f33322d3438203d3e20323732383732.roa
File:                     323830333a336139303a3a2f33322d3438203d3e20323732383732.roa (raw, json)
Hash identifier:          zc7sGbrYUwC81xquYdhrtebu+XuFG1QyrAMRL5CaLS4=
Subject key identifier:   78:14:31:41:AF:57:F2:E2:CD:BC:8A:50:45:E9:DA:1D:E5:26:9B:49
Certificate issuer:       /CN=767FD56E8257BDEBA22E443767B9E4B7EB036071
Certificate serial:       29C6659E17AC9688CEE52175241C25B402AB8C05
Authority key identifier: 76:7F:D5:6E:82:57:BD:EB:A2:2E:44:37:67:B9:E4:B7:EB:03:60:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a336139303a3a2f33322d3438203d3e20323732383732.roa
Signing time:             Tue 05 Mar 2024 17:46:54 +0000
ROA not before:           Tue 05 Mar 2024 17:41:54 +0000
ROA not after:            Tue 04 Mar 2025 17:46:54 +0000
asID:                     272872
IP address blocks:        2803:3a90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c6:65:9e:17:ac:96:88:ce:e5:21:75:24:1c:25:b4:02:ab:8c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767FD56E8257BDEBA22E443767B9E4B7EB036071
        Validity
            Not Before: Mar  5 17:41:54 2024 GMT
            Not After : Mar  4 17:46:54 2025 GMT
        Subject: CN=78143141AF57F2E2CDBC8A5045E9DA1DE5269B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:89:f0:f2:eb:0f:9a:cf:54:f8:68:b2:d8:
                    20:ff:26:35:18:0b:e6:1a:0f:b8:fb:09:60:3a:b3:
                    93:3b:03:b5:22:89:c6:0b:8c:fb:93:88:89:40:f7:
                    9e:06:16:47:eb:73:2e:b9:5e:6d:3b:5f:d9:36:fd:
                    50:22:b4:c0:1c:41:83:99:7a:e9:79:5a:9b:ab:8d:
                    27:92:9d:b0:a0:7c:6c:c6:3e:ae:13:d9:18:da:8a:
                    ae:c7:ed:32:18:fe:77:fc:78:bf:cb:d8:65:3f:d7:
                    43:4c:86:b8:b3:0d:8b:35:51:42:84:23:bf:47:4b:
                    90:6c:8d:46:ee:1b:12:c4:df:f7:4f:38:6c:b5:0e:
                    f4:0e:0c:30:e5:a3:b1:bd:4c:75:2f:50:2d:ce:e5:
                    ef:cd:3b:d4:dc:5f:0b:f6:06:70:f4:6f:9e:20:70:
                    a7:c4:1a:42:12:17:93:be:ee:bd:79:d5:de:d1:d8:
                    a9:cc:b0:b7:b9:3f:f4:c0:21:a7:72:60:eb:2d:79:
                    c0:f6:f7:34:17:b2:2e:06:91:a2:73:b0:48:92:ac:
                    2e:ec:35:e9:06:06:16:36:a5:f9:11:9a:65:e3:ee:
                    6e:a7:20:5a:c1:e6:bd:40:12:0c:d1:47:6c:52:34:
                    4e:c8:83:90:1f:a9:d7:b7:60:e7:95:ad:50:52:39:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:31:41:AF:57:F2:E2:CD:BC:8A:50:45:E9:DA:1D:E5:26:9B:49
            X509v3 Authority Key Identifier:
                keyid:76:7F:D5:6E:82:57:BD:EB:A2:2E:44:37:67:B9:E4:B7:EB:03:60:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/323830333a336139303a3a2f33322d3438203d3e20323732383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:20:40:c8:cd:23:ce:50:c8:31:90:88:6b:96:dd:a1:be:64:
         b7:6c:e0:02:9e:cf:99:b7:dc:4c:fb:6d:fe:19:30:26:24:62:
         70:d1:41:61:11:d7:e7:dd:6c:0d:2b:6f:2e:54:31:48:f9:58:
         eb:b7:c6:29:e9:81:2a:52:03:d3:df:fb:82:6f:81:54:c1:31:
         4d:6d:59:bc:42:67:52:4d:89:f9:92:91:1b:1f:2c:c6:6b:37:
         05:88:cf:6c:1b:16:17:99:8b:e1:91:92:39:fd:2d:c0:93:c1:
         34:11:99:bf:fb:26:a1:b5:29:97:f1:26:f4:f2:0d:72:24:11:
         f6:e3:9f:f7:5f:0b:f3:2f:79:bd:e4:a6:6c:1e:0e:8b:7d:be:
         33:d2:ca:d0:6f:39:94:62:b7:8d:f7:35:4e:9a:42:7b:77:18:
         44:2c:9c:25:4a:56:43:34:1a:d1:bb:69:cb:87:32:39:25:96:
         be:0f:6b:86:9e:ae:ab:68:b4:4a:5c:db:ac:69:d0:3f:2f:b4:
         85:c5:9d:14:09:aa:fe:b4:02:d4:2b:10:61:3b:f4:f4:ef:aa:
         ea:09:bb:6f:e2:54:05:1b:ac:5e:3f:e0:2e:a0:5d:be:27:c4:
         c0:c7:8b:6e:67:2f:4e:fa:bb:43:d9:b5:f4:c1:50:0d:9f:29:
         ce:3e:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org