Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
File:                     323830333a616561303a3a2f33322d3332203d3e20323637363738.roa (raw, json)
Hash identifier:          izjbRvVyDaN35mh9a/82xnFbhZuDs2THHH99Q2VV4m8=
Subject key identifier:   98:7D:36:8E:35:6D:2B:9F:28:CE:AD:C8:AF:69:90:69:AD:29:3A:E8
Certificate issuer:       /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial:       2BC4157FE81FE16A24B6B5C6B204E5C2FE0752E0
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
Signing time:             Tue 05 Mar 2024 17:57:55 +0000
ROA not before:           Tue 05 Mar 2024 17:52:55 +0000
ROA not after:            Tue 04 Mar 2025 17:57:55 +0000
asID:                     267678
IP address blocks:        2803:aea0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:15:7f:e8:1f:e1:6a:24:b6:b5:c6:b2:04:e5:c2:fe:07:52:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
        Validity
            Not Before: Mar  5 17:52:55 2024 GMT
            Not After : Mar  4 17:57:55 2025 GMT
        Subject: CN=987D368E356D2B9F28CEADC8AF699069AD293AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:54:36:d7:78:24:8b:e4:c8:c8:67:96:46:
                    cc:34:c2:27:09:21:6f:35:2d:7d:88:ef:6a:c1:d5:
                    6b:a9:f1:e0:77:6d:58:06:a8:04:6e:3a:aa:f8:3b:
                    8b:a8:bb:81:0b:e1:73:6c:65:a9:e4:29:21:b4:fc:
                    ab:3d:d9:21:49:33:e2:32:26:c9:d1:6a:44:ef:33:
                    1d:d1:67:45:03:b5:7e:dd:0e:e4:58:d5:20:14:db:
                    c7:e4:ed:09:be:f2:8a:a3:c3:9f:90:1a:db:f8:94:
                    81:3e:6f:e0:41:3a:c5:1a:54:29:6d:dd:a6:bc:95:
                    cb:59:04:ad:3f:9d:dc:22:83:6d:de:a4:89:45:2c:
                    24:05:ee:3f:4f:0d:24:7a:38:d1:b0:9a:ac:a1:03:
                    ce:2b:f0:54:cd:6a:2e:60:cd:02:c4:fb:1c:1e:b5:
                    5c:47:f3:4e:3e:49:d3:d1:cc:14:cb:03:bf:4c:e2:
                    19:75:9c:ec:c6:63:a5:b4:f5:11:b6:13:50:df:8c:
                    63:09:0b:d1:0d:48:ee:ad:68:50:f6:63:c2:2b:78:
                    2f:e6:69:6f:4b:77:16:8c:c6:05:2a:ca:c8:97:c1:
                    1d:9a:9e:02:1f:14:30:8c:b7:e8:09:02:16:d3:46:
                    a5:1b:9f:b7:f1:64:e7:e8:fb:98:eb:57:d5:90:23:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:36:8E:35:6D:2B:9F:28:CE:AD:C8:AF:69:90:69:AD:29:3A:E8
            X509v3 Authority Key Identifier:
                keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:e0:61:18:c6:8f:fc:36:a1:72:79:e2:58:86:ba:f7:41:
         65:86:f9:ac:24:3f:5f:f4:9a:96:b6:dd:22:20:eb:d9:24:87:
         70:0e:35:b2:33:93:ad:22:28:bf:bb:02:dc:ad:de:cd:f6:dd:
         6a:6d:0e:05:8d:94:80:07:d2:25:1a:0e:00:ca:08:66:c4:3d:
         37:c6:a4:ee:16:ab:e7:d1:f2:be:13:68:01:d1:b6:7f:32:bb:
         1a:c5:e1:17:18:59:05:8c:7d:b7:54:1f:3a:17:75:0e:13:fa:
         e6:2e:4b:54:e2:d8:c7:aa:05:e7:64:6e:bc:58:29:26:0b:11:
         ab:2c:59:44:8e:51:32:a8:3f:51:30:8e:26:cc:e1:ff:8a:ff:
         12:90:73:59:a7:97:a3:cc:21:61:75:0d:45:ae:e3:3c:c1:d3:
         40:d2:fb:60:3b:50:9f:67:18:a7:a2:bf:70:76:44:33:1e:55:
         94:1f:c4:93:d7:0d:cd:a4:00:bd:7b:cd:9d:2d:c6:68:7c:d2:
         b4:97:30:7b:51:f3:37:42:ac:de:9c:41:fe:fa:37:a9:c3:7c:
         f3:28:d5:3d:ae:dc:e8:04:88:44:e9:65:87:3f:02:08:00:28:
         e5:51:d0:3b:de:cf:f9:88:03:61:ff:53:fa:94:3f:60:e8:ae:
         25:28:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org