Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
File:                     323830333a613138303a3a2f33322d3332203d3e203238313138.roa (raw, json)
Hash identifier:          Uz6bQOAym8dShznjn55hz1lvorHMEtdlorqtWmqIX/k=
Subject key identifier:   3D:33:A7:AF:9D:63:30:1F:63:B7:F5:28:81:44:34:01:7B:BF:32:3E
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       75EC2FC076CD56B19C7F80D191088FF0345C3C0A
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:13 +0000
ROA not before:           Tue 05 Mar 2024 18:04:13 +0000
ROA not after:            Tue 04 Mar 2025 18:09:13 +0000
asID:                     28118
IP address blocks:        2803:a180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:2f:c0:76:cd:56:b1:9c:7f:80:d1:91:08:8f:f0:34:5c:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:13 2024 GMT
            Not After : Mar  4 18:09:13 2025 GMT
        Subject: CN=3D33A7AF9D63301F63B7F528814434017BBF323E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:2e:29:be:82:b4:9f:ca:27:78:9e:86:c1:
                    29:a1:45:a3:3b:99:0a:fe:5d:47:ae:5b:88:a3:df:
                    93:f5:81:f1:22:b3:50:5f:f8:be:4e:a1:c2:15:74:
                    55:5b:03:2b:1c:24:f3:6a:fb:bb:16:a5:75:31:37:
                    c5:05:03:1a:f1:c0:e7:db:3d:1f:a7:04:34:47:8f:
                    7e:ad:04:8f:0a:d8:7e:a2:82:ac:d8:79:30:46:39:
                    ca:51:ac:58:1a:0f:d7:54:7d:c3:c0:a7:a7:5a:71:
                    76:14:95:2a:68:62:c7:dc:b5:bf:6b:49:d5:02:a0:
                    3a:b9:0c:bf:ed:41:4e:a3:3d:ba:2c:77:6f:d2:18:
                    55:79:b2:a8:34:9b:d6:be:0d:0a:d3:03:32:dd:9c:
                    0a:b2:08:4e:dd:9f:30:c0:22:f0:b3:31:9c:75:ca:
                    fa:27:1b:5f:dc:3a:f1:2e:76:84:b2:b3:c5:64:9f:
                    8d:36:3b:b0:0f:65:d0:26:00:0d:66:00:80:9b:02:
                    95:b7:52:b5:ee:7b:4b:71:41:98:ef:f2:dd:7c:cb:
                    f6:60:37:a7:3f:43:cd:b5:04:51:9e:0d:8c:30:33:
                    11:d4:db:68:e9:18:ee:63:15:1c:49:89:18:bd:f3:
                    34:70:e8:7c:2b:59:49:a7:ec:6c:64:ed:22:0b:3e:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:33:A7:AF:9D:63:30:1F:63:B7:F5:28:81:44:34:01:7B:BF:32:3E
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/323830333a613138303a3a2f33322d3332203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a180::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:10:73:63:97:1c:cc:97:d3:e8:e0:76:ed:9a:c6:0e:87:
         b4:d4:53:78:85:31:9e:cf:19:c3:27:2d:cd:bd:f2:bd:7d:04:
         a1:8c:31:4a:d5:30:f2:f3:84:ac:3f:95:39:3a:01:1d:81:f3:
         a1:0d:3d:38:df:df:36:6b:e9:af:f1:85:56:43:30:89:fd:b6:
         dd:f1:8b:4f:b2:d1:0d:0d:7b:5e:ed:fc:92:c1:9d:65:65:1c:
         7e:f4:99:f8:01:63:73:82:36:f4:5f:12:ba:60:69:4e:4b:41:
         67:54:ab:9d:96:28:1c:7f:bc:98:e5:13:92:79:a4:2c:1d:57:
         5d:9e:5c:d1:08:3c:1d:35:d7:0e:8f:4f:cf:5b:92:95:33:3c:
         26:78:1a:7e:e5:22:a0:bc:97:f4:35:39:13:dc:e1:fa:da:99:
         3a:23:9c:45:55:c2:d0:25:31:45:ac:35:cf:d7:d6:e2:a3:63:
         ca:61:70:25:1f:63:36:f1:7a:85:db:69:32:b1:41:11:ad:7c:
         ba:32:76:d4:0f:ce:66:c4:72:3d:23:04:5d:56:47:f1:78:d5:
         e7:46:89:dc:16:1c:84:8f:d0:c0:dd:6e:f3:1a:c0:49:a1:92:
         43:91:89:bc:20:c7:7a:47:48:f7:31:bf:37:be:46:ed:5c:c1:
         4c:35:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org