Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a343030303a3a2f33352d3335203d3e20323639383332.roa
File:                     323830333a6636303a343030303a3a2f33352d3335203d3e20323639383332.roa (raw, json)
Hash identifier:          BoWTauRMzd0Shc8tvKQ9qtJWhsUAxpGFauD/4D7Dnak=
Subject key identifier:   8A:33:55:D5:0E:D9:EA:3E:D3:2D:02:2F:7D:1E:07:E2:CE:15:4A:30
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       27CC77D816E032C777F747554218A4712FAC545D
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a343030303a3a2f33352d3335203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:32 +0000
ROA not before:           Tue 05 Mar 2024 17:52:32 +0000
ROA not after:            Tue 04 Mar 2025 17:57:32 +0000
asID:                     269832
IP address blocks:        2803:f60:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:77:d8:16:e0:32:c7:77:f7:47:55:42:18:a4:71:2f:ac:54:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:32 2024 GMT
            Not After : Mar  4 17:57:32 2025 GMT
        Subject: CN=8A3355D50ED9EA3ED32D022F7D1E07E2CE154A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:34:69:97:15:ad:b7:27:4c:0c:d8:83:00:
                    bf:95:02:53:02:a1:44:ac:d4:ae:f9:e0:a2:f7:64:
                    f5:79:0a:b1:76:b5:de:d7:5e:ca:95:e7:05:2e:43:
                    89:81:df:15:93:6c:f6:3e:07:29:e9:21:32:9b:44:
                    ea:8f:19:28:12:55:05:13:43:57:38:e2:42:06:94:
                    60:0f:93:9a:85:56:b1:b1:bb:0b:bb:9a:28:85:a8:
                    1f:1a:e0:73:97:d0:9f:9d:0b:07:d0:f4:a0:a7:f9:
                    e8:30:99:69:a3:d4:0c:83:7c:a4:24:b6:29:07:cf:
                    f2:62:40:86:2a:30:5f:33:c7:db:e1:41:74:24:89:
                    13:47:e3:03:b5:95:c7:0d:29:67:2d:d9:a1:a7:17:
                    f8:51:aa:ca:61:20:5d:da:00:3f:3a:d1:2c:07:b7:
                    88:88:21:bc:c0:a6:c7:0c:61:a7:bd:75:7c:a3:68:
                    ee:11:ce:66:08:4d:50:cb:f7:0c:eb:43:d1:25:66:
                    f1:2f:f4:a2:76:08:27:ef:89:90:a7:d9:15:84:c8:
                    7c:2b:5d:2d:ed:13:47:d3:42:4c:23:7b:c9:cc:fe:
                    ca:9c:27:5a:b0:ec:d7:60:87:15:31:7b:42:ab:0e:
                    02:1e:59:48:31:73:13:f1:d8:f4:e0:d8:91:cd:e8:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:33:55:D5:0E:D9:EA:3E:D3:2D:02:2F:7D:1E:07:E2:CE:15:4A:30
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a343030303a3a2f33352d3335203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:ce:b1:4f:a5:23:67:a2:4e:d0:a4:15:aa:48:da:bb:de:
         fe:d8:8d:31:ee:1b:b2:d1:36:8a:a3:45:0c:df:3b:0a:e9:f1:
         20:39:a8:22:5f:c3:e8:82:79:74:a4:94:e8:07:02:59:cc:b3:
         21:87:19:5e:52:d6:07:41:93:d6:7a:37:25:1e:90:29:dc:0a:
         4f:48:bf:cf:ef:43:d8:d1:e0:40:f5:0e:a8:7a:3f:e2:f1:6d:
         f8:cb:a0:27:75:c2:83:43:39:c5:dd:3a:61:02:ce:6c:99:9e:
         85:bf:a4:3f:eb:b4:dd:1a:84:b4:30:69:77:5c:30:69:34:ea:
         fb:7d:7f:f8:83:1d:d1:f6:57:c5:7b:a1:f8:a8:ef:c9:5a:d4:
         5d:1a:7d:73:07:90:1f:97:c1:d6:da:02:04:9b:37:0c:03:47:
         ed:c2:f6:de:7b:10:a8:f9:37:96:b2:7b:c3:cb:99:67:b3:38:
         ad:e9:f5:6d:8f:a5:ba:59:4c:a6:77:b1:0c:be:3f:25:26:1d:
         fe:d5:be:b5:18:9e:a2:c4:45:e0:9e:87:a0:88:15:be:f9:4b:
         01:15:15:35:19:5c:3b:87:f4:eb:9e:50:19:dc:69:da:74:9a:
         64:09:ab:db:92:be:65:7e:20:af:fd:65:a6:f8:75:d9:3b:38:
         1e:af:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:55:00 2024 by rpki-client on console-fra.rpki-client.org