Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/323830333a643765303a3a2f33322d3438203d3e20323731373738.roa
File:                     323830333a643765303a3a2f33322d3438203d3e20323731373738.roa (raw, json)
Hash identifier:          VxbQEG/ZSEFCyWCY9aN0OEQc6Dw86jV+mIWVBky14Qs=
Subject key identifier:   44:D1:F1:E1:AF:E0:D4:57:89:1C:13:29:E7:C2:E6:F9:BD:C7:B6:E1
Certificate issuer:       /CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
Certificate serial:       10B369396008959DE7F431B6792BC0B2EB83EFB6
Authority key identifier: A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/323830333a643765303a3a2f33322d3438203d3e20323731373738.roa
Signing time:             Tue 05 Mar 2024 17:43:16 +0000
ROA not before:           Tue 05 Mar 2024 17:38:16 +0000
ROA not after:            Tue 04 Mar 2025 17:43:16 +0000
asID:                     271778
IP address blocks:        2803:d7e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:69:39:60:08:95:9d:e7:f4:31:b6:79:2b:c0:b2:eb:83:ef:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
        Validity
            Not Before: Mar  5 17:38:16 2024 GMT
            Not After : Mar  4 17:43:16 2025 GMT
        Subject: CN=44D1F1E1AFE0D457891C1329E7C2E6F9BDC7B6E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:21:66:ea:2c:32:b4:9c:0f:71:f2:3f:06:
                    31:c2:c4:54:c5:d3:dd:f1:99:7c:52:20:ee:c5:ba:
                    33:d7:c1:10:3e:71:60:6e:fa:de:0e:6b:f3:48:6a:
                    3e:8a:9f:eb:1f:98:e7:07:54:1b:ab:b7:9e:7d:20:
                    6b:76:9d:24:3f:70:79:ea:0f:31:6e:8b:91:c3:77:
                    86:bd:e4:a1:94:58:2d:00:3b:62:f0:5e:2e:90:c0:
                    3f:47:33:4c:8a:e4:c4:88:bc:cb:8c:a5:0f:a4:c9:
                    6b:91:05:0f:42:0d:8c:5b:a2:8b:bd:a3:d1:30:ad:
                    57:17:dd:03:31:2f:73:b3:5a:e1:ec:2a:eb:92:f9:
                    c5:ec:af:42:5d:6c:0a:61:ed:49:58:fe:d7:9d:36:
                    78:a0:58:cb:62:7f:e9:b9:8e:4b:05:d9:1d:13:d4:
                    6e:f3:c6:24:01:96:29:59:d1:03:34:24:62:bd:4c:
                    cd:58:cc:e0:9a:7d:71:70:0c:b9:97:18:e5:ae:9d:
                    f6:54:05:a4:a6:f9:e0:0a:1d:d3:f4:7d:a3:b7:49:
                    81:21:c8:61:01:93:35:3f:91:18:52:0c:09:67:53:
                    63:79:fa:18:10:60:9c:e1:b3:75:da:cc:75:2c:72:
                    69:08:af:5b:ab:b7:bb:e8:fc:0f:a7:f2:9b:54:df:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D1:F1:E1:AF:E0:D4:57:89:1C:13:29:E7:C2:E6:F9:BD:C7:B6:E1
            X509v3 Authority Key Identifier:
                keyid:A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/323830333a643765303a3a2f33322d3438203d3e20323731373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:ee:31:58:4e:80:50:2c:0f:88:87:c0:c5:23:88:05:95:
         a2:de:8d:07:56:ab:78:91:19:d7:dd:e6:e4:33:a7:c0:5f:97:
         a0:89:43:be:8e:a3:1b:bf:d5:b8:ba:ef:29:11:c3:aa:e3:5b:
         52:40:4a:49:44:10:d7:59:88:80:d9:dc:50:fd:ad:42:cb:51:
         f8:e2:71:0e:c0:e8:48:6c:e4:ab:ce:7e:58:1f:40:fc:1a:48:
         86:89:70:d0:4e:96:b3:e6:a8:5c:0d:83:4a:26:10:14:37:30:
         cf:89:41:6a:64:e3:29:3e:3a:2b:65:bf:77:8a:58:6d:2d:e9:
         12:4e:6c:a0:f1:9a:66:1f:9e:64:39:26:ef:eb:19:0b:29:ab:
         b3:f9:87:97:9a:ac:56:a0:d7:52:35:9b:9d:b0:8d:45:f4:9a:
         60:a3:3c:52:c1:15:22:c3:ed:67:78:27:db:8a:5c:e7:4c:da:
         f2:07:0c:a5:c9:81:fb:db:d6:93:13:46:18:c0:c0:33:49:60:
         eb:87:ef:89:e4:a0:76:ab:69:09:a6:43:6b:fa:12:9d:88:88:
         2a:45:86:ab:b0:9b:a5:cb:55:ff:a3:a7:f6:b6:9f:c4:db:88:
         29:8b:5c:7d:fd:77:89:76:4e:bf:2e:0f:cf:58:28:20:c7:ad:
         4a:a8:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org