Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3230303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3230303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          wija1OlrA3VURhixA9PaVcbL0oAtwpQqOT1v1FwygRM=
Subject key identifier:   22:DD:46:8F:9B:0E:8F:29:A0:B6:8D:5F:0A:BA:C9:16:F3:8D:63:75
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       5A26C608AF100101284FD87C56B4EE5ACA96EA7C
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3230303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 05 Mar 2024 18:02:09 +0000
ROA not before:           Tue 05 Mar 2024 17:57:09 +0000
ROA not after:            Tue 04 Mar 2025 18:02:09 +0000
asID:                     270037
IP address blocks:        2803:15e0:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:c6:08:af:10:01:01:28:4f:d8:7c:56:b4:ee:5a:ca:96:ea:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Mar  5 17:57:09 2024 GMT
            Not After : Mar  4 18:02:09 2025 GMT
        Subject: CN=22DD468F9B0E8F29A0B68D5F0ABAC916F38D6375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:6e:7a:e3:4f:c9:69:a5:b2:44:07:57:57:
                    15:0b:fb:6b:08:7d:06:d2:6a:80:5a:ac:eb:f7:a2:
                    e2:9d:51:1a:e3:b3:b3:37:1c:29:51:bc:f4:bd:27:
                    5c:49:2c:be:5d:5c:87:2e:80:9b:e9:df:c9:50:be:
                    98:8b:78:98:96:87:59:00:ca:67:86:74:aa:12:bc:
                    5e:dd:80:c5:ea:95:ab:63:e4:40:a1:92:92:51:35:
                    b6:17:43:aa:73:79:81:6d:5f:38:bd:86:ab:a7:88:
                    32:ea:94:f2:35:da:6e:b6:cc:72:f5:a9:55:c7:89:
                    e3:e5:04:2e:a0:c0:47:1e:94:0a:40:48:d3:5b:10:
                    18:fb:6a:82:eb:f4:2e:94:b6:3f:2d:53:03:a6:4c:
                    6b:f4:f6:c8:ff:64:d9:79:12:85:39:9d:a4:73:a8:
                    3a:47:f4:cf:bd:dc:bd:8c:14:8a:aa:eb:51:22:77:
                    73:61:2e:83:07:e7:d2:20:ba:50:9f:c3:9f:67:e4:
                    14:43:3a:f6:10:6e:78:76:54:4b:2a:af:ed:47:42:
                    13:56:b2:0d:86:f4:ea:11:2b:86:a1:c6:97:05:de:
                    24:74:f6:38:19:de:82:ab:a4:c1:23:bc:ba:28:16:
                    cb:39:79:a6:cb:f6:07:c9:eb:de:26:e2:2b:8f:de:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:46:8F:9B:0E:8F:29:A0:B6:8D:5F:0A:BA:C9:16:F3:8D:63:75
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3230303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:31:27:2f:e9:dd:cd:f6:1d:02:dc:b9:00:d7:1c:e5:09:
         72:51:fc:f6:4d:1b:c7:48:21:09:34:e3:70:f4:e2:70:8b:7f:
         ae:0b:31:da:ce:5b:4a:a1:9c:2d:95:9a:42:c1:8a:62:ef:1e:
         cd:af:8f:3f:b5:1e:af:0d:96:47:b3:a4:3d:80:ec:46:63:b5:
         2c:c2:f2:8d:f1:bb:9c:c6:ef:9f:8e:a8:58:93:b5:ce:0e:9a:
         c7:69:0c:da:a3:b7:f9:02:1b:0c:f0:46:b4:20:e2:6d:b1:42:
         3c:af:86:0b:1a:44:04:f9:3c:87:24:b6:4c:fe:df:c8:57:0d:
         42:52:62:29:82:67:d6:1d:6a:f1:53:97:2d:28:d2:54:11:c9:
         2e:98:e7:d8:f3:d8:ee:8c:28:b2:ff:4b:b7:f9:46:3c:40:50:
         60:d8:b8:2a:20:61:bf:71:3c:66:52:4e:9f:61:26:ae:06:75:
         8a:43:a2:cc:aa:c3:11:ca:52:0c:e1:40:a3:2c:a1:3d:00:c2:
         c8:a9:23:15:49:fb:57:af:49:c2:b8:fc:70:2d:9b:d0:c8:53:
         63:5c:a0:86:6a:9a:5a:55:48:87:78:07:21:10:0e:12:89:0f:
         fa:70:65:f2:00:00:d7:6c:f4:60:ec:46:c1:51:9c:72:99:63:
         55:f2:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org