Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/323830333a373461303a3a2f33322d3332203d3e20323637373031.roa
File:                     323830333a373461303a3a2f33322d3332203d3e20323637373031.roa (raw, json)
Hash identifier:          ppW7CHJCCGYfss6wfLPgd/Nrk/lADNNl9O0ERh9t5AE=
Subject key identifier:   02:BF:95:DE:1F:C3:6C:72:57:EE:61:7E:80:1C:13:6E:BC:C9:C7:56
Certificate issuer:       /CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B
Certificate serial:       46F578A16AA67B58B850D5190D1582CADED2402A
Authority key identifier: 62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/323830333a373461303a3a2f33322d3332203d3e20323637373031.roa
Signing time:             Tue 05 Mar 2024 17:52:01 +0000
ROA not before:           Tue 05 Mar 2024 17:47:01 +0000
ROA not after:            Tue 04 Mar 2025 17:52:01 +0000
asID:                     267701
IP address blocks:        2803:74a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:78:a1:6a:a6:7b:58:b8:50:d5:19:0d:15:82:ca:de:d2:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B
        Validity
            Not Before: Mar  5 17:47:01 2024 GMT
            Not After : Mar  4 17:52:01 2025 GMT
        Subject: CN=02BF95DE1FC36C7257EE617E801C136EBCC9C756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:b8:c4:3b:18:3a:c3:f1:44:42:48:c3:e2:
                    c5:3d:5e:ff:db:61:31:3d:e5:b5:b4:e3:68:c2:32:
                    db:08:32:43:b7:1e:5a:2e:ab:cb:79:4f:09:ba:44:
                    d2:b3:42:1f:34:ce:62:85:48:3a:6b:40:c0:74:00:
                    9d:f1:d5:00:56:c9:7c:10:9a:7a:3e:8e:85:22:91:
                    3d:31:7d:12:17:23:0b:6b:28:8f:3b:68:05:22:56:
                    2f:c8:c6:a4:a1:1a:4d:48:aa:27:66:c4:cc:0b:2f:
                    fa:4f:be:c3:e1:b6:10:fe:3d:12:e9:a4:84:2f:a3:
                    5d:52:ef:25:bb:26:b2:4d:4b:f4:0a:a5:9b:f3:c7:
                    f2:57:91:94:d4:0a:b1:d7:2f:cd:1f:a3:f6:ba:8e:
                    64:d7:49:44:53:92:b3:67:3e:5a:10:54:a3:e1:d0:
                    4c:cf:55:38:87:bc:50:95:a6:6d:d9:a5:ae:20:24:
                    e0:02:8a:fc:72:9c:5c:b6:31:cc:f6:61:4a:ce:16:
                    92:96:ac:cf:67:e9:45:71:17:b0:54:9a:63:84:3b:
                    9d:23:b8:bd:58:d5:0b:63:bb:fb:fb:fd:e5:9e:66:
                    d9:b6:86:3c:fd:9f:58:75:64:1e:49:de:dc:ab:fa:
                    d0:38:ff:63:89:59:ae:7d:af:da:76:1d:ad:59:90:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:95:DE:1F:C3:6C:72:57:EE:61:7E:80:1C:13:6E:BC:C9:C7:56
            X509v3 Authority Key Identifier:
                keyid:62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/323830333a373461303a3a2f33322d3332203d3e20323637373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:74a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:17:f8:0e:af:b0:4d:a2:60:53:b6:2f:2a:a0:58:a7:f6:
         4e:52:bc:5c:d3:49:f6:e9:92:d5:40:02:5f:c3:44:8d:a4:73:
         c5:34:fb:bb:47:ed:2c:9b:6d:ce:49:5f:9b:56:36:36:8f:3c:
         91:e8:99:b0:08:c6:fa:19:b1:43:f0:1c:16:e7:63:2b:15:20:
         ec:bc:d6:8d:4d:6f:79:cc:49:ad:2b:5b:c7:43:b4:ae:d7:8c:
         2a:da:d9:47:50:fe:e9:a6:8a:e4:06:6a:81:2f:f1:47:09:8e:
         44:2d:a0:30:a0:32:d4:89:a8:b2:11:8b:9b:70:5d:a3:14:82:
         59:59:58:cb:59:24:78:ec:75:55:cd:c1:a5:5b:28:fa:71:6e:
         d5:f4:1c:30:b6:bd:9a:d2:9e:a1:67:c1:4c:b4:6c:e9:d7:1a:
         fe:8d:4c:0b:0a:56:50:84:6d:bd:e4:fc:5d:e4:aa:6e:1b:16:
         30:f3:a3:2f:38:7b:ef:9f:b2:5c:d9:ee:31:f1:90:13:9d:7f:
         96:3d:1f:9e:f8:e2:3b:30:96:2b:da:23:6e:be:a7:0d:4b:bd:
         39:83:1c:59:e4:fa:ee:37:19:44:94:1e:57:48:f4:cd:12:64:
         5f:ad:f8:84:f3:67:51:b4:1d:f2:d8:32:dd:78:d9:8b:40:50:
         be:43:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:45:05 2024 by rpki-client on console-fra.rpki-client.org