Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          2Izb450jqLj0VR0xGHJf9y59XjoFR6ycUDoyoAamhBg=
Subject key identifier:   34:B9:D7:E1:1D:41:8B:02:28:6E:19:4F:80:D2:E1:A5:0F:B6:CB:53
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       249F15006D2048087F05A0C219A9911552220518
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 05 Mar 2024 18:02:10 +0000
ROA not before:           Tue 05 Mar 2024 17:57:10 +0000
ROA not after:            Tue 04 Mar 2025 18:02:10 +0000
asID:                     270037
IP address blocks:        2803:15e0:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9f:15:00:6d:20:48:08:7f:05:a0:c2:19:a9:91:15:52:22:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Mar  5 17:57:10 2024 GMT
            Not After : Mar  4 18:02:10 2025 GMT
        Subject: CN=34B9D7E11D418B02286E194F80D2E1A50FB6CB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:77:5d:91:69:f0:1e:45:08:f1:8e:9a:eb:
                    0a:51:cf:13:3f:b8:e6:d7:8d:c2:73:d8:ec:5c:17:
                    0d:cd:d3:91:b6:b4:73:63:f6:1f:ca:19:bb:a2:53:
                    76:29:0d:a3:37:09:16:27:10:5f:28:78:9f:39:fe:
                    8c:3c:4a:fc:3b:a8:5d:e5:9a:1f:4f:d8:3d:d5:4e:
                    2f:8f:14:a6:73:ab:69:57:d1:c4:58:97:0a:14:cd:
                    d0:30:f9:3f:46:68:5e:b9:70:d8:5f:f1:04:7b:af:
                    88:73:86:10:c0:6f:bf:64:a3:33:9c:13:51:16:03:
                    af:ba:27:b6:12:30:b2:c5:bb:d7:a2:6c:01:41:2b:
                    13:27:67:f9:4d:c6:c7:45:3d:3d:fd:0e:ad:c1:6f:
                    0c:18:0f:8e:ee:01:68:02:9c:85:f4:63:71:ad:70:
                    14:83:7b:40:a1:fb:75:7f:4f:7d:1d:07:6c:bd:17:
                    58:88:ac:ec:31:cc:8a:69:4e:08:b5:6d:a5:29:c5:
                    a8:3a:ca:0d:08:16:81:9f:ae:6d:32:e2:27:b8:ac:
                    cf:b8:b3:65:83:98:76:0d:40:50:98:33:e6:57:61:
                    6a:7e:2c:97:df:6a:5c:1b:03:11:e6:13:11:31:e8:
                    58:c9:92:49:a3:31:cf:4b:f4:8b:f9:d3:ec:4a:f8:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B9:D7:E1:1D:41:8B:02:28:6E:19:4F:80:D2:E1:A5:0F:B6:CB:53
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:b1:4f:0c:73:5b:cd:97:14:d0:6c:96:92:11:28:99:f0:
         b3:d8:80:fc:a8:bf:a5:75:32:e7:8c:9c:15:e8:62:2f:c9:8d:
         04:81:70:df:14:85:cb:44:0d:f9:72:13:46:5e:25:98:8c:4d:
         83:16:9a:e0:7c:d8:b9:75:c6:f7:2a:12:91:23:c4:c7:7e:21:
         3e:a8:3f:4f:88:04:7f:a1:23:c3:1e:97:82:48:08:cf:ff:29:
         53:83:40:ce:61:21:6b:e2:2f:64:ee:59:0a:1a:06:6a:c1:2d:
         3a:99:bd:a6:07:c8:de:24:cd:4e:5d:5e:d5:0e:8a:f2:07:bc:
         b8:76:78:14:eb:76:e2:0e:33:04:ea:b7:ec:aa:74:d9:47:f5:
         0f:97:85:8d:04:15:ea:2a:34:24:26:8b:d8:c2:85:6b:db:91:
         22:bc:b9:24:8f:2a:cf:00:d7:5b:ad:26:ad:a4:05:34:0f:f8:
         00:bb:42:a2:58:69:bf:e7:50:c9:41:ea:c4:93:ed:87:fb:80:
         4f:50:e7:8a:95:0f:94:1d:0d:99:10:58:04:e7:6f:d8:33:e9:
         c5:76:20:83:d0:1b:60:d6:5a:ae:44:3f:2d:fd:c6:3c:7d:7e:
         5b:96:78:55:d1:45:e1:dc:76:db:09:c7:9c:1f:dc:71:4d:35:
         f7:0a:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org