Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa
File:                     323830333a363865303a3a2f33322d3332203d3e20323639383734.roa (raw, json)
Hash identifier:          bJgOot1KOxzicN9JRPktczEi7nEClpO7FG/U6uBCDzY=
Subject key identifier:   DC:38:F9:43:BE:12:9E:81:49:63:D5:04:7A:BB:5B:E4:E6:C3:0F:37
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       4D65F36BA9D4BB0262EC7D0BC9D3BEAA056BF3E4
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa
Signing time:             Tue 05 Mar 2024 17:45:08 +0000
ROA not before:           Tue 05 Mar 2024 17:40:08 +0000
ROA not after:            Tue 04 Mar 2025 17:45:08 +0000
asID:                     269874
IP address blocks:        2803:68e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:f3:6b:a9:d4:bb:02:62:ec:7d:0b:c9:d3:be:aa:05:6b:f3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Mar  5 17:40:08 2024 GMT
            Not After : Mar  4 17:45:08 2025 GMT
        Subject: CN=DC38F943BE129E814963D5047ABB5BE4E6C30F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:74:e2:46:2c:78:63:b2:19:84:eb:57:7d:
                    2f:c6:19:08:9d:68:b0:3a:95:64:03:1f:95:15:29:
                    28:7a:cc:92:99:73:8b:5c:86:0a:f0:c9:53:cf:7c:
                    30:ec:e4:69:27:8f:7c:a3:05:5b:69:4b:24:24:d3:
                    e5:3e:af:2a:d2:41:d9:db:de:d3:ef:9c:07:4b:f3:
                    f6:d0:a5:cc:c7:89:cf:bb:70:06:47:bf:d6:ac:6f:
                    82:74:d2:0b:41:2f:61:57:be:a3:60:90:26:9e:f1:
                    ae:99:2a:e3:c1:96:b1:61:1b:da:7b:64:de:20:11:
                    ab:22:2c:b9:e5:2a:50:98:6d:14:54:d4:3f:95:1c:
                    00:7b:ec:f4:f2:70:83:26:68:9c:fb:76:d1:ee:d2:
                    dc:55:be:eb:9a:7b:47:70:2a:61:a4:83:91:ab:bf:
                    af:ed:a4:18:0b:f6:01:93:11:f3:85:9d:b9:ab:8c:
                    73:ce:7f:91:76:27:f9:e7:c3:a1:4e:78:e6:67:e2:
                    6a:fc:d1:8b:fa:de:fd:c4:55:e8:43:47:20:ef:31:
                    45:91:e9:78:25:38:35:10:d7:be:7f:e1:b8:e6:4d:
                    31:65:be:fc:d6:be:67:4b:bc:3f:0f:ea:33:7b:cd:
                    8c:22:8d:4a:b6:28:79:39:ab:ad:47:46:d9:82:1d:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:F9:43:BE:12:9E:81:49:63:D5:04:7A:BB:5B:E4:E6:C3:0F:37
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/323830333a363865303a3a2f33322d3332203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:68e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:5d:b5:23:e3:1a:59:72:3b:45:af:d6:ba:bf:a6:75:c5:
         8d:21:bd:b4:12:85:47:07:2c:60:79:94:68:3e:33:21:c7:b7:
         52:b3:f6:4e:c4:af:ed:c5:65:d4:7b:74:69:6c:05:cc:71:e2:
         47:19:3b:ba:37:b0:c1:d5:06:97:b0:70:42:3e:9a:8d:2d:dd:
         e5:57:13:d7:68:8d:19:75:74:7b:fc:04:da:38:a1:a0:f8:cc:
         93:d7:74:d3:6f:35:26:3e:af:17:0c:ac:cf:ba:d9:02:8f:fc:
         a3:9f:f7:a6:6f:2a:81:37:3b:05:71:c7:ed:9e:28:6a:e8:b1:
         c2:37:9d:b1:ad:f7:bb:2b:dc:40:0f:97:88:5c:ad:b0:d9:af:
         ab:4b:2c:05:9d:d0:02:8e:20:39:2f:89:77:af:8f:40:ac:99:
         7b:1d:8c:9b:57:42:92:9b:cd:0e:6c:32:34:1a:4b:d6:87:aa:
         a7:97:02:2e:d1:6d:7c:d6:6d:b7:bf:bb:52:fc:d8:44:cc:77:
         e3:ec:f0:0f:86:2d:f2:c8:f9:e3:3a:46:1e:fa:c1:24:22:e2:
         f4:ee:4c:51:c0:ca:36:af:ed:30:1d:03:d6:69:d3:a4:9f:96:
         5d:07:aa:7d:68:37:ac:30:87:8b:2e:9d:47:a1:6e:a6:d8:2e:
         63:47:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org