Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
File:                     323830333a663665303a3a2f33322d3438203d3e20323639393736.roa (raw, json)
Hash identifier:          SojHgumZYyrTSyem/HonrUySh3pwHzTsoc68sxZRO2o=
Subject key identifier:   D7:AA:CD:A3:5A:05:B9:8A:CC:B5:1F:F6:45:9B:95:10:5F:F9:1D:C0
Certificate issuer:       /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial:       050AC5839CBED679C4E74DA9AED22B74AFAE0E11
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa
Signing time:             Tue 05 Mar 2024 18:20:44 +0000
ROA not before:           Tue 05 Mar 2024 18:15:44 +0000
ROA not after:            Tue 04 Mar 2025 18:20:44 +0000
asID:                     269976
IP address blocks:        2803:f6e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:c5:83:9c:be:d6:79:c4:e7:4d:a9:ae:d2:2b:74:af:ae:0e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
        Validity
            Not Before: Mar  5 18:15:44 2024 GMT
            Not After : Mar  4 18:20:44 2025 GMT
        Subject: CN=D7AACDA35A05B98ACCB51FF6459B95105FF91DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:5f:8a:1f:ca:5e:55:47:fa:30:25:4a:2a:
                    ba:1d:c0:8c:20:f6:1a:44:60:7f:10:4f:30:1f:82:
                    49:24:55:9d:7e:95:d1:7e:43:96:86:b3:62:7e:df:
                    10:d9:4e:13:41:55:8d:c1:f6:18:90:9e:d4:07:d8:
                    0b:7b:93:85:2c:c7:ed:82:53:47:20:7f:b2:9b:c2:
                    7b:e3:fc:4f:dd:30:02:96:ab:4b:c6:c8:40:59:a0:
                    eb:69:cb:c5:bf:98:51:ea:d8:90:16:2e:dc:3d:d4:
                    58:86:9b:aa:19:51:fd:64:86:40:af:28:ca:41:a0:
                    58:9d:2b:f5:16:f5:45:e9:b5:1a:80:4e:9b:21:ea:
                    3d:aa:ff:9f:23:80:15:b1:b7:ce:e3:37:44:fa:52:
                    76:85:9a:f3:c0:55:1d:5c:a3:6d:48:e1:88:79:f6:
                    ae:96:ce:f9:36:e6:d9:2a:58:79:f8:4c:e0:32:26:
                    bb:f6:f3:10:22:d5:72:2f:93:da:0f:9b:d2:f2:78:
                    0d:1a:f6:e7:9f:03:e1:92:e2:76:1d:f5:8a:9a:2e:
                    10:7d:9e:0a:76:71:57:a4:42:ef:ec:d7:af:c1:7b:
                    09:17:22:05:b7:c9:78:71:af:f3:be:da:12:5d:98:
                    74:20:8e:b2:64:c6:53:b7:83:b8:4d:5b:8a:60:b6:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AA:CD:A3:5A:05:B9:8A:CC:B5:1F:F6:45:9B:95:10:5F:F9:1D:C0
            X509v3 Authority Key Identifier:
                keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/323830333a663665303a3a2f33322d3438203d3e20323639393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:f2:43:3f:d8:60:d8:85:3a:19:33:65:ea:d5:bb:f3:55:
         ca:c7:6b:ac:10:6f:c4:6b:af:e1:4e:1a:e2:84:94:17:5a:ed:
         45:a2:27:28:d1:9f:9f:bb:32:bc:08:b4:48:ce:f3:83:87:c4:
         fb:a7:7c:d0:82:46:65:f8:5c:fd:02:ae:1b:f3:af:1c:b0:d9:
         13:08:73:d6:10:8d:78:a0:ba:07:9a:e2:86:5f:13:b8:ae:c5:
         62:c8:20:e5:ec:86:fb:b0:3d:bb:58:b0:11:1c:4f:c3:92:df:
         19:5e:e3:e5:8e:ca:b1:d0:70:93:bd:90:a5:31:26:a7:fe:9e:
         ac:17:36:97:28:ad:b4:eb:a1:49:0f:0a:0e:ea:c3:b6:09:41:
         93:43:b0:d5:81:b7:e8:bf:af:57:b5:ac:f8:58:9e:3c:26:8f:
         c8:fd:de:c6:a8:2f:ef:29:85:2a:fd:63:42:d6:61:1c:df:09:
         1d:32:4f:55:35:86:dc:73:0b:71:93:26:bf:26:39:c2:1c:d2:
         44:b1:9f:9f:64:3b:0f:f8:4d:0f:63:ab:2f:ff:81:9f:5f:29:
         d8:f7:dd:0e:19:e7:7e:d7:3c:e9:46:fb:0d:6f:13:47:72:ab:
         0a:3c:c6:1f:67:d6:ae:4c:e3:3d:da:65:5b:0a:99:bb:fc:9c:
         84:c5:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org