Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a633030303a3a2f33352d3335203d3e20323639383332.roa
File:                     323830333a6636303a633030303a3a2f33352d3335203d3e20323639383332.roa (raw, json)
Hash identifier:          6slLfoRcdQMjzpXrz+thH1TMiivdswjioqBCFCnkCNU=
Subject key identifier:   DB:8E:3D:8F:8B:1A:7F:72:81:1A:39:27:51:4D:92:75:F0:75:B0:28
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       2CD9018293C5A576F06C52FADDDA8F17BD16739A
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a633030303a3a2f33352d3335203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:33 +0000
ROA not before:           Tue 05 Mar 2024 17:52:33 +0000
ROA not after:            Tue 04 Mar 2025 17:57:33 +0000
asID:                     269832
IP address blocks:        2803:f60:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d9:01:82:93:c5:a5:76:f0:6c:52:fa:dd:da:8f:17:bd:16:73:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:33 2024 GMT
            Not After : Mar  4 17:57:33 2025 GMT
        Subject: CN=DB8E3D8F8B1A7F72811A3927514D9275F075B028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:0d:9f:0a:21:28:87:87:64:5c:c0:05:c4:
                    4f:ae:d1:83:c4:cf:ce:f6:bf:99:fb:79:f9:32:4f:
                    8e:13:db:0c:66:71:eb:cf:7d:d6:e3:83:93:69:2b:
                    05:58:40:8d:46:04:da:a4:26:4c:51:67:b4:d3:31:
                    8c:f9:8d:d9:91:a2:8c:81:fc:e9:2b:a4:1a:13:fa:
                    cc:ed:d9:7c:3a:07:e1:dd:b2:fa:41:20:fc:d1:7a:
                    86:0a:9c:9f:2e:9d:bc:ca:19:99:2e:5b:65:19:c9:
                    fa:4d:5c:c8:bf:e9:cb:22:f8:44:9f:94:cf:7e:11:
                    46:09:35:9f:a6:11:e7:ca:b6:53:6d:19:c6:ad:73:
                    ac:21:1f:dc:c8:db:a5:df:e9:8e:ba:aa:5a:8c:72:
                    84:86:93:4c:d6:e2:64:c8:6c:70:8c:ac:bc:76:4a:
                    fa:93:a3:f1:b4:b4:b2:d7:43:39:8a:0c:01:3e:f1:
                    29:62:c1:c5:ec:1f:a5:76:5a:0c:90:3e:3d:e5:de:
                    ef:59:9f:ea:71:9f:57:45:27:bb:43:2c:07:a2:98:
                    51:65:1f:05:e5:c5:29:45:ad:67:10:91:1a:c0:a6:
                    f7:b2:8d:de:14:2c:8e:8a:83:17:ca:92:5b:48:84:
                    f3:46:2a:90:ec:94:20:07:fc:cd:98:0f:70:e9:da:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:3D:8F:8B:1A:7F:72:81:1A:39:27:51:4D:92:75:F0:75:B0:28
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a633030303a3a2f33352d3335203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:42:5e:ca:35:2e:ec:c7:19:fb:bf:10:a7:ea:2e:09:cb:
         71:74:7e:1e:db:e8:26:17:1a:76:5a:cc:e1:7e:62:7f:78:92:
         cb:1e:5b:b7:cc:fe:3c:c1:69:46:26:b5:6b:30:df:9c:62:9c:
         86:45:e9:06:85:0a:89:1a:40:1a:d0:5a:99:0d:d8:1c:fb:2a:
         53:6e:3b:d8:22:b4:dd:16:b5:97:16:b7:26:20:63:a5:8c:2e:
         06:31:a1:cc:90:dc:44:4e:8c:4e:72:38:86:49:67:83:83:51:
         3b:21:79:74:4c:b3:e3:f2:f7:d4:c2:90:c4:04:9e:d3:e2:b1:
         ad:cc:84:51:dc:d0:9d:5c:38:89:07:08:29:8c:8f:67:05:b0:
         7d:4a:28:03:cd:96:c8:ee:2a:db:2c:a1:ff:a5:72:f0:6e:74:
         cb:26:66:75:0e:fa:f2:cc:1a:49:bb:47:d2:7c:15:f8:bc:33:
         4d:63:25:55:4d:f6:55:c2:66:fb:cb:e8:09:35:d9:58:44:54:
         f1:78:d4:14:57:16:26:ea:8f:ff:53:1e:f5:c0:f1:d4:39:7a:
         ff:33:a5:78:4a:a0:6c:63:28:9b:e9:f4:6b:86:fc:b4:7c:4d:
         12:f6:a4:0d:a1:83:1c:3f:d2:25:9c:56:2e:c3:a6:95:ae:54:
         be:de:e4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:55:00 2024 by rpki-client on console-fra.rpki-client.org