Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa
File:                     323830333a663765303a3a2f33322d3438203d3e20323731373733.roa (raw, json)
Hash identifier:          /7FRjnynBdOaEReFPmA2LHGvQov6z8aLCUEduFwJX18=
Subject key identifier:   28:34:B5:13:EF:48:13:4F:0A:C6:89:1F:09:FB:00:7B:1A:1F:7E:63
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       7CA4E7B74117E5087211F01B29845B073BBCFAB1
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:20 +0000
ROA not before:           Tue 05 Mar 2024 17:36:20 +0000
ROA not after:            Tue 04 Mar 2025 17:41:20 +0000
asID:                     271773
IP address blocks:        2803:f7e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a4:e7:b7:41:17:e5:08:72:11:f0:1b:29:84:5b:07:3b:bc:fa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:20 2024 GMT
            Not After : Mar  4 17:41:20 2025 GMT
        Subject: CN=2834B513EF48134F0AC6891F09FB007B1A1F7E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:e9:41:84:77:4a:39:b9:09:ff:cd:75:7b:
                    ae:30:0a:7f:35:39:37:53:06:ae:ae:31:d0:ca:61:
                    d6:a2:c3:5e:04:6e:c4:33:4e:70:a5:79:58:97:cd:
                    9b:b1:78:01:54:aa:fd:7c:f7:59:e6:6d:0b:87:e8:
                    f6:61:7c:6c:4c:4e:40:ed:f9:41:52:de:96:f5:bf:
                    b8:c5:73:41:58:4a:32:b6:00:be:ff:c1:d8:29:a2:
                    b7:8c:ba:83:65:af:81:4b:3b:a2:bd:ae:5e:01:6c:
                    b0:78:3c:df:54:b0:05:55:14:9c:34:1b:da:b7:13:
                    28:4f:de:05:54:1c:74:9c:13:24:3b:70:77:0d:3d:
                    5c:94:a6:5b:95:c2:b7:f8:cf:ff:0f:66:44:6b:29:
                    b0:f2:0e:77:e9:22:b3:1c:ea:83:45:69:e1:cd:ab:
                    94:29:36:b3:37:6a:ee:71:ea:7b:8e:ed:d0:48:bc:
                    8d:c6:8c:1f:42:5c:d7:a3:0c:a3:75:0c:68:e0:05:
                    b6:9c:34:12:38:41:0d:2d:3e:6e:d9:00:c4:fe:5a:
                    03:d3:09:9c:62:ff:98:15:42:5a:6c:93:b6:de:1b:
                    5a:a4:93:76:e8:33:a9:d2:04:0e:f2:8c:4f:12:cd:
                    1d:f7:5f:6d:cc:b8:f8:fa:70:1f:6d:75:32:4c:29:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:B5:13:EF:48:13:4F:0A:C6:89:1F:09:FB:00:7B:1A:1F:7E:63
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:94:90:71:07:29:29:07:4d:34:80:e5:8a:91:c0:41:30:
         b1:cc:2b:9b:cb:23:86:d3:b8:8f:62:f4:95:51:bd:c8:64:1a:
         4e:26:d7:57:a8:20:69:5d:85:06:3e:fd:c3:a6:76:88:4c:1c:
         1c:01:41:d0:b7:26:fc:c1:34:1a:4d:40:66:fc:6a:40:48:86:
         1a:bc:11:71:e8:bb:eb:5b:6b:71:61:6b:a1:76:67:05:d2:d1:
         fd:af:67:08:84:8c:f3:5e:29:43:48:52:dd:c9:83:d8:88:7d:
         6c:3b:5a:2f:da:f4:e8:ec:cc:6a:77:d2:a3:67:dc:6e:66:b5:
         11:7d:8f:87:7f:50:0e:17:29:2c:71:5a:a2:f3:a4:62:10:cb:
         45:78:71:39:b5:f3:0d:ac:e0:b9:8f:46:aa:5c:9f:fe:37:83:
         c8:c9:dd:df:fa:08:5d:a1:c9:cd:10:de:82:b6:b7:e0:55:2a:
         b3:83:50:67:27:62:ed:a2:cc:f8:17:45:42:cd:70:7c:b0:72:
         46:59:98:e3:25:00:bd:2c:46:89:3a:e7:34:a4:dd:78:7b:11:
         89:40:23:61:6d:d2:d8:e2:a7:a0:50:d7:93:be:60:08:44:52:
         fc:41:0d:a3:7f:0b:eb:28:d2:4f:c2:87:ed:2a:b9:5f:21:b7:
         c5:f3:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:13 2024 by rpki-client on console-ams.rpki-client.org