Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa
File:                     323830333a336634303a3a2f33322d3438203d3e20323634373534.roa (raw, json)
Hash identifier:          gX4tGaMrbGQePw9HxZ4jgFDFh0amxClqLhjUcfgCq4s=
Subject key identifier:   83:37:EA:05:B4:A0:9B:E1:05:B6:3F:39:60:10:CF:0F:AE:44:90:11
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       0D36825EDE83855A3300CB0EA7425BBB28A4055C
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:36:82:5e:de:83:85:5a:33:00:cb:0e:a7:42:5b:bb:28:a4:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=8337EA05B4A09BE105B63F396010CF0FAE449011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:ca:57:2a:72:d6:56:d7:da:d8:52:55:9c:
                    7d:64:7f:9e:fd:ee:ef:f8:10:df:6e:62:8f:97:5f:
                    d2:e8:1d:ef:c5:08:12:94:c6:50:f4:17:19:1b:b2:
                    9d:4c:59:d4:d4:2b:44:cc:cd:87:b2:3f:0e:ab:c6:
                    6a:d0:c0:7c:3c:a7:26:15:9e:66:2c:e4:f4:f7:64:
                    1e:ae:d3:ce:71:2c:be:ca:41:5a:e9:0f:44:8c:a2:
                    33:5e:70:a9:5f:3f:c3:39:db:ea:23:c4:8c:a4:ef:
                    33:86:e8:fd:66:df:0d:e9:e1:8e:d0:bb:7b:b7:2f:
                    f3:e1:0f:a3:e3:11:a6:68:12:48:c8:5f:a9:7d:bb:
                    58:0e:ae:7f:b1:a5:e6:ea:b6:2f:88:34:e9:f5:60:
                    03:9c:dc:c3:58:ec:7d:24:fd:04:82:ee:42:cd:b9:
                    37:8b:49:bc:b7:2a:cc:31:2c:52:09:23:7c:2d:65:
                    82:19:77:46:4b:3e:81:d2:05:1e:87:0b:13:db:98:
                    97:4e:4d:33:f4:22:3c:a5:b5:b1:37:a7:3d:f1:04:
                    8d:5b:72:94:df:6e:ed:fb:7d:91:be:7e:ec:d2:29:
                    e9:54:57:e8:42:93:34:dd:85:64:69:f6:75:cf:93:
                    35:b6:1a:3c:c2:c8:d6:9e:5e:49:c4:aa:84:1f:96:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:EA:05:B4:A0:9B:E1:05:B6:3F:39:60:10:CF:0F:AE:44:90:11
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/323830333a336634303a3a2f33322d3438203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:14:c2:a8:d1:f1:86:ee:d0:c2:7b:a2:e7:1a:37:9a:4c:a2:
         e1:ac:0a:5f:3b:20:bc:98:f9:89:0d:f5:82:be:7a:98:f7:fb:
         00:aa:40:12:d8:27:17:f3:2a:74:b5:80:76:1b:9f:18:1b:d9:
         60:6b:57:c2:ba:bf:d4:81:01:8a:41:00:92:c5:9c:6d:6e:8c:
         1f:a7:7c:51:e1:09:47:10:c4:44:c7:0e:14:f4:a7:4e:a7:19:
         1f:9d:56:8e:2d:b3:b4:66:ba:dc:34:e5:de:b0:b3:dd:4f:e0:
         84:39:c2:ad:78:b3:3f:75:1c:5d:85:93:2e:fb:94:65:d5:ea:
         f4:46:00:4a:e7:df:37:ee:d6:63:ed:18:16:ad:76:33:22:a9:
         fb:bb:f8:65:bc:98:5a:b8:37:84:bd:4f:18:99:3a:9e:ce:9f:
         60:8b:8a:04:9b:8e:a5:24:7e:94:ae:b3:86:82:42:98:93:a1:
         ed:6b:ce:3f:c7:d1:7f:9f:79:b0:f4:d0:3e:be:90:f8:10:c5:
         6a:44:68:0e:61:93:8e:0d:74:fa:22:b3:95:f4:97:46:67:c8:
         b6:6f:c3:96:1c:03:b9:8a:f8:dd:7d:df:72:3b:74:61:38:6f:
         a3:5c:00:66:3e:0c:a9:b4:7e:b9:c5:8d:b9:d0:29:b3:5a:44:
         6b:3d:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org