Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/323830333a336535303a3a2f33322d3438203d3e20323733323332.roa
File:                     323830333a336535303a3a2f33322d3438203d3e20323733323332.roa (raw, json)
Hash identifier:          ZhiMOdgnNEPXoI0/8VYeMRqPmlw0ZDW5mTQH7t8UbD4=
Subject key identifier:   E6:D9:F2:22:38:D2:16:BC:E8:99:4A:BD:29:13:9F:FA:03:74:F4:D6
Certificate issuer:       /CN=95E37AF69A83C08434029C69C204722B775FB22D
Certificate serial:       4EF1F5FC4DC99744F2BBEA28F62F76128CBE622E
Authority key identifier: 95:E3:7A:F6:9A:83:C0:84:34:02:9C:69:C2:04:72:2B:77:5F:B2:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95E37AF69A83C08434029C69C204722B775FB22D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/323830333a336535303a3a2f33322d3438203d3e20323733323332.roa
Signing time:             Wed 04 Dec 2024 20:40:00 +0000
ROA not before:           Wed 04 Dec 2024 20:35:00 +0000
ROA not after:            Wed 03 Dec 2025 20:40:00 +0000
asID:                     273232
IP address blocks:        2803:3e50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/95E37AF69A83C08434029C69C204722B775FB22D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/95E37AF69A83C08434029C69C204722B775FB22D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95E37AF69A83C08434029C69C204722B775FB22D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Dec 2024 04:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:f5:fc:4d:c9:97:44:f2:bb:ea:28:f6:2f:76:12:8c:be:62:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E37AF69A83C08434029C69C204722B775FB22D
        Validity
            Not Before: Dec  4 20:35:00 2024 GMT
            Not After : Dec  3 20:40:00 2025 GMT
        Subject: CN=E6D9F22238D216BCE8994ABD29139FFA0374F4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:7f:00:7e:3f:56:84:06:68:d4:88:ca:25:
                    69:81:7c:90:56:b9:ac:8f:70:27:30:d4:14:be:72:
                    b4:32:c6:16:29:43:c5:58:87:4c:a2:c3:b7:27:23:
                    bf:31:73:48:36:a0:6b:3e:2a:c1:2b:4c:c0:a5:b3:
                    b3:b4:c9:81:bb:1e:3d:df:9e:fb:a7:5c:e8:af:30:
                    16:1e:72:af:ff:b8:04:b9:d7:73:95:ae:7e:2d:0d:
                    1b:0f:3f:a6:f0:ab:f3:e6:f0:09:ea:dc:25:5b:a6:
                    d2:e4:84:0f:5e:a4:75:19:4d:63:c9:a8:6a:b7:b7:
                    e1:37:76:93:07:25:4a:25:5b:67:2e:56:73:d7:ed:
                    34:5e:d8:2b:ac:f7:c5:c5:a2:07:50:85:11:24:67:
                    d7:f2:a3:11:d3:0b:3f:0a:d6:e5:9c:9e:6c:02:2a:
                    f8:f5:9d:a4:33:e6:2f:a5:3b:2b:04:e4:64:41:3e:
                    f4:d2:2e:2f:2a:b6:17:97:47:c7:7a:b1:4a:56:9c:
                    91:7b:06:e2:6e:bc:34:fe:e0:58:5e:b8:ee:56:b5:
                    e1:29:09:eb:46:30:34:31:a9:9c:53:9c:69:4a:12:
                    7f:47:cc:73:fd:70:ce:7d:3c:13:3a:0a:67:9b:fb:
                    af:74:92:c6:da:48:5f:ce:e6:fb:ea:5f:0e:37:0e:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:F2:22:38:D2:16:BC:E8:99:4A:BD:29:13:9F:FA:03:74:F4:D6
            X509v3 Authority Key Identifier:
                keyid:95:E3:7A:F6:9A:83:C0:84:34:02:9C:69:C2:04:72:2B:77:5F:B2:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/95E37AF69A83C08434029C69C204722B775FB22D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95E37AF69A83C08434029C69C204722B775FB22D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/323830333a336535303a3a2f33322d3438203d3e20323733323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:77:e1:ce:4e:7e:9f:e2:55:99:b1:14:c3:5f:be:4f:1e:
         b6:36:d8:3b:eb:21:c7:c8:a7:9a:b8:61:19:36:87:04:31:f1:
         ed:43:86:42:34:dc:11:7f:c2:13:50:d3:18:9a:83:8d:70:0c:
         1c:09:d8:a9:29:80:f3:59:99:94:b8:d8:51:8e:92:06:03:ff:
         2e:e6:92:a0:fa:3f:8e:39:87:5c:f9:f0:c8:06:1d:57:5f:55:
         75:75:01:c6:a5:24:59:c6:dd:c8:f9:5d:05:7b:03:16:6a:68:
         8e:21:1e:e5:0e:08:06:cf:28:44:ca:94:79:cb:76:49:2b:b5:
         cc:ab:0e:fa:f7:85:3d:4e:9f:07:d4:c1:51:d3:ce:b5:be:ae:
         ab:cc:68:37:b2:9d:eb:af:ee:78:69:d3:d1:53:0e:97:2d:75:
         ee:60:96:fb:ed:46:55:eb:2b:f8:f1:14:0f:d7:54:50:f6:ba:
         72:75:09:ce:52:4b:52:e2:c0:03:fc:53:17:30:de:45:57:74:
         d6:e3:75:f5:4b:e4:aa:6f:c4:b4:bf:90:21:43:74:a1:58:9f:
         69:2d:47:d3:f9:d2:54:be:53:dd:3e:ca:9b:a0:5d:63:13:b2:
         98:57:e8:c6:11:a5:0e:a3:1f:66:f8:93:8f:35:0a:b5:7b:75:
         11:40:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 04:30:32 2024 by rpki-client on console-fra.rpki-client.org