Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/323830333a386632303a3a2f33322d3438203d3e203237383834.roa
File:                     323830333a386632303a3a2f33322d3438203d3e203237383834.roa (raw, json)
Hash identifier:          aOd8bZs1SpcJwLyKBGywNsuT8VCjCVsvfQuGhAhFh14=
Subject key identifier:   40:FA:F3:7E:75:38:18:F5:1A:C4:52:2C:A3:7B:F0:9F:05:57:EF:77
Certificate issuer:       /CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
Certificate serial:       7E7DB354247663058708012178B403D244BE531A
Authority key identifier: 0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/323830333a386632303a3a2f33322d3438203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:20:11 +0000
ROA not before:           Tue 05 Mar 2024 18:15:11 +0000
ROA not after:            Tue 04 Mar 2025 18:20:11 +0000
asID:                     27884
IP address blocks:        2803:8f20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7d:b3:54:24:76:63:05:87:08:01:21:78:b4:03:d2:44:be:53:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
        Validity
            Not Before: Mar  5 18:15:11 2024 GMT
            Not After : Mar  4 18:20:11 2025 GMT
        Subject: CN=40FAF37E753818F51AC4522CA37BF09F0557EF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:cc:1f:87:91:a7:75:6a:f8:bb:81:91:10:
                    9b:b2:f3:d9:25:84:4c:e0:47:87:af:96:2d:43:ce:
                    6f:a5:d7:5a:2e:3c:c8:b1:74:ef:2e:20:2b:ac:f9:
                    36:cc:e0:b5:f2:f4:eb:a5:a7:58:79:fd:fe:9e:1f:
                    1d:e8:b3:aa:50:a2:07:51:b1:79:8a:cb:91:80:7b:
                    80:66:00:81:ae:7a:a0:a1:96:93:15:b9:77:24:67:
                    73:e7:2f:d0:d7:4c:e8:3d:28:a1:5f:64:8f:73:55:
                    c5:a3:62:84:f4:20:c6:c7:0c:fc:9d:db:41:b9:a4:
                    c0:d1:c0:6f:be:ca:af:51:b1:b9:fa:69:f3:ec:c6:
                    eb:86:94:c1:48:99:e7:6c:d2:95:71:b7:c1:cd:48:
                    90:af:c0:1e:22:4b:ff:cc:be:4f:e7:8c:f8:84:1f:
                    b6:ea:1c:81:ac:47:a2:74:f9:34:d7:cc:1d:5c:d8:
                    8f:83:77:0c:af:22:93:6f:43:21:97:c6:6f:33:25:
                    a6:50:af:58:fb:a1:48:9d:47:67:ef:d0:35:06:60:
                    de:71:96:c4:e7:56:a3:96:ca:50:68:08:11:1f:d6:
                    d4:3e:2a:f0:9e:93:54:d5:9d:ba:e5:5e:aa:43:28:
                    4d:74:f8:c8:59:b1:00:40:cc:f5:1c:5b:57:8d:cb:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:F3:7E:75:38:18:F5:1A:C4:52:2C:A3:7B:F0:9F:05:57:EF:77
            X509v3 Authority Key Identifier:
                keyid:0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/323830333a386632303a3a2f33322d3438203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:e1:c8:09:be:71:83:2a:af:50:61:36:ea:20:e3:10:d4:b7:
         2d:76:f5:e2:4b:53:94:e9:73:0b:cf:45:22:ac:33:de:bd:a4:
         13:50:79:0c:dd:27:55:41:75:f2:d3:ec:62:37:68:e3:42:cc:
         90:49:4c:ad:df:b5:21:42:1d:ab:70:c9:db:ff:7e:45:e1:0d:
         0f:a9:3d:61:9d:23:67:7d:76:47:95:02:64:8b:f4:a0:3f:74:
         d2:af:be:e3:15:52:74:59:d1:81:06:8f:9c:2e:f9:9a:c0:51:
         89:5b:84:ca:cd:e8:89:9c:de:eb:93:0b:95:cc:13:0a:a3:08:
         a5:49:3e:ef:65:73:bb:b8:78:e4:3a:de:04:b4:0d:b6:8d:f0:
         91:4b:35:a3:29:d5:a0:3e:cd:b2:6c:ce:95:33:b1:81:05:8f:
         ea:40:6c:5b:7b:a6:c4:19:23:1c:85:b8:44:a6:37:48:dd:45:
         33:db:e1:59:d9:12:00:55:9f:8f:51:48:cf:00:c1:b8:b5:f2:
         1a:74:10:25:95:e8:16:9b:84:f7:8b:2d:ba:c7:7e:16:f5:2f:
         49:7e:26:e8:2d:2e:47:8e:98:e7:35:63:c8:5f:bb:a2:06:cc:
         e4:3b:40:5d:f6:bf:3e:96:40:7e:80:be:b4:9d:bd:ae:bd:83:
         82:ec:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:29:28 2024 by rpki-client on console-ams.rpki-client.org