Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          7Yg3mJcDMRZZJoQtSHUC3NNLWmNbdu3JBB3rZOK2UfQ=
Subject key identifier:   4A:F6:9A:EB:1D:B2:D8:9B:71:B5:70:FE:CC:17:4A:81:79:8D:27:6C
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       63B9C5EA64D8D0A01F0B3CBC071674846275AF24
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 05 Mar 2024 18:02:10 +0000
ROA not before:           Tue 05 Mar 2024 17:57:10 +0000
ROA not after:            Tue 04 Mar 2025 18:02:10 +0000
asID:                     270037
IP address blocks:        2803:15e0:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b9:c5:ea:64:d8:d0:a0:1f:0b:3c:bc:07:16:74:84:62:75:af:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Mar  5 17:57:10 2024 GMT
            Not After : Mar  4 18:02:10 2025 GMT
        Subject: CN=4AF69AEB1DB2D89B71B570FECC174A81798D276C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:2f:9b:4e:15:99:ab:13:00:e4:dc:3c:a6:
                    c6:a2:4b:f8:92:d2:73:55:81:f4:98:d2:c8:2c:c1:
                    86:6d:05:5f:44:0c:45:7a:db:17:b6:92:fd:fa:bd:
                    11:08:31:3e:ec:79:d0:1e:65:e1:2a:2b:46:a8:2a:
                    7a:0d:40:16:49:67:2d:6a:ba:ec:c5:2a:83:cf:b8:
                    08:97:ba:4d:ad:d3:0e:9b:1a:79:b6:41:68:1b:d8:
                    ba:e4:1a:7d:fe:52:80:e2:80:cf:3d:11:56:da:ee:
                    44:89:77:28:2b:0b:2a:be:1e:64:3f:34:e5:ab:15:
                    86:b7:38:76:1f:02:f0:e3:eb:10:8a:fe:1e:0f:a2:
                    81:4c:59:9b:e0:7d:27:8e:fe:3f:c3:dd:f9:95:55:
                    98:01:d9:62:52:14:61:b1:44:0f:fe:66:fe:2a:1b:
                    06:79:82:95:b9:0e:5c:9a:cd:66:85:70:66:dd:d7:
                    99:86:f0:fd:1b:be:97:14:c7:14:0c:ef:ff:fe:00:
                    10:0b:08:5b:23:fa:2e:b3:ce:7f:11:3c:6e:03:f4:
                    63:5a:46:11:f8:17:73:6c:e9:55:8e:a6:92:c3:1e:
                    1f:82:0b:40:4b:c2:e1:62:9b:bd:f1:a7:d0:b7:29:
                    a2:bf:ae:fe:a2:57:9b:b0:d9:b3:f0:40:96:78:c3:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:9A:EB:1D:B2:D8:9B:71:B5:70:FE:CC:17:4A:81:79:8D:27:6C
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3130303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:d9:38:c5:f3:c1:db:2f:c8:ce:63:fd:2a:d9:da:f6:c7:
         4b:2c:a2:57:80:4b:28:5f:0e:ec:56:89:b1:68:0d:7c:2c:5c:
         37:c4:84:b5:49:86:cf:12:cd:77:f4:38:74:30:13:81:d8:30:
         9b:61:3a:ab:e5:31:36:a2:bd:d3:cf:2a:94:d9:f9:fa:e8:96:
         a9:41:0c:f0:2e:fe:25:4d:72:51:e4:34:94:62:ef:da:1a:f6:
         17:1b:1f:98:fa:18:1a:df:53:ba:68:7a:f8:22:0d:8f:ec:a6:
         3b:d9:b9:0b:64:76:6c:3d:71:9d:0b:b6:02:40:df:20:93:2c:
         35:b3:99:ae:45:c6:0c:56:3b:73:c4:22:f1:c6:35:4c:e8:22:
         ab:b7:75:65:88:2d:06:42:cd:22:09:b7:35:29:28:df:2f:93:
         c3:2d:d0:84:d7:c9:77:3d:0b:45:6b:3f:eb:e6:e1:8e:6b:85:
         20:0a:29:88:79:5c:db:77:58:07:6e:6c:e0:9c:a1:df:ad:b2:
         40:86:79:05:af:46:cd:f1:b8:b9:6a:02:ae:96:0e:9b:6e:73:
         b4:63:90:b0:0f:35:fb:b0:ae:c5:69:3f:08:47:e9:c8:e6:7b:
         71:a7:b6:a0:6f:ca:43:ff:d2:d0:4d:f1:cd:84:d4:77:05:ab:
         17:53:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org