Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/323830333a336638303a3a2f33322d3634203d3e20323633373339.roa
File:                     323830333a336638303a3a2f33322d3634203d3e20323633373339.roa (raw, json)
Hash identifier:          LzhmIMPvIOBiPOULUz17IkYCcnPao6SKUUM1QCWcG3Y=
Subject key identifier:   2A:BF:DF:25:E9:73:5B:C6:14:8C:A9:61:55:98:E2:D3:71:D5:F3:AA
Certificate issuer:       /CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
Certificate serial:       0D75313690A07BA69A7FA8364B2CF20C72E44BE9
Authority key identifier: 75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/323830333a336638303a3a2f33322d3634203d3e20323633373339.roa
Signing time:             Mon 15 Apr 2024 11:40:00 +0000
ROA not before:           Mon 15 Apr 2024 11:35:00 +0000
ROA not after:            Mon 14 Apr 2025 11:40:00 +0000
asID:                     263739
IP address blocks:        2803:3f80::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:75:31:36:90:a0:7b:a6:9a:7f:a8:36:4b:2c:f2:0c:72:e4:4b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
        Validity
            Not Before: Apr 15 11:35:00 2024 GMT
            Not After : Apr 14 11:40:00 2025 GMT
        Subject: CN=2ABFDF25E9735BC6148CA9615598E2D371D5F3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:b7:06:d9:18:2b:b1:13:34:32:c5:48:3f:
                    60:5d:01:3e:32:59:3e:dc:9e:46:e8:f7:0a:c7:eb:
                    6a:6c:b7:4d:47:d7:36:e4:d5:ce:1e:94:6f:7f:16:
                    af:33:b1:e5:ee:64:d9:40:83:8b:ff:07:28:91:6f:
                    96:21:b1:3a:4e:a1:66:46:d8:b7:97:c3:0e:45:c1:
                    e4:a9:4b:32:44:84:d3:15:dc:64:86:44:a2:37:c2:
                    43:ac:9b:1f:9a:c0:05:51:62:ea:5c:11:50:40:b5:
                    45:76:fe:71:47:dd:f1:c3:c6:47:0d:e9:3b:20:e9:
                    40:6a:90:78:54:1c:aa:d4:62:54:c4:a0:4a:d6:59:
                    79:fe:98:6b:94:fa:f4:76:61:e5:0f:40:e3:d1:a7:
                    51:9d:03:30:33:9c:4f:d8:69:86:c7:4c:8a:87:60:
                    e7:56:c8:c6:d0:72:57:2e:76:fe:4e:c4:82:5d:21:
                    49:c5:00:dc:30:1a:13:46:40:40:00:7e:c1:38:1c:
                    8e:6f:b1:db:ef:d7:ed:a2:fd:df:c0:ab:a9:31:6e:
                    ef:ad:52:cd:9a:85:b8:ea:99:f5:fb:15:cb:90:cd:
                    79:5e:68:d0:02:92:da:d4:2a:19:64:90:91:99:65:
                    e1:b1:43:40:83:fb:c1:65:86:a3:9a:de:d6:71:96:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:DF:25:E9:73:5B:C6:14:8C:A9:61:55:98:E2:D3:71:D5:F3:AA
            X509v3 Authority Key Identifier:
                keyid:75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/323830333a336638303a3a2f33322d3634203d3e20323633373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:ae:cb:bf:59:40:f6:f8:e2:0f:7a:d7:0f:08:6a:39:09:
         77:c0:46:8d:a6:68:60:6e:e1:cb:47:0c:3e:9a:ee:7f:d7:87:
         f5:47:69:d1:83:76:2b:9c:c8:b0:c3:8e:33:7b:3b:8c:17:88:
         3c:2f:4c:80:49:2e:3c:11:40:af:fc:85:2f:39:9b:b1:48:d5:
         62:be:9f:34:e1:dd:7e:90:15:13:e4:ee:6b:3c:db:6b:82:8f:
         58:82:9f:2e:5d:f6:ad:9d:b4:8b:cc:f4:95:ec:2e:fd:27:b3:
         93:ab:53:7c:d5:90:e5:81:a0:cd:bd:86:2d:b5:fd:7d:0c:06:
         50:f4:f2:f6:c0:1c:71:05:cd:19:f4:ea:d5:fa:6e:22:22:33:
         5d:ff:4e:cd:62:9d:2a:f4:79:01:ae:3a:0f:53:20:69:9f:1f:
         ad:b4:ca:a8:9c:5d:ca:02:2a:5f:e7:39:a3:db:83:c3:c8:2c:
         a2:90:54:7f:57:25:6c:8f:02:34:87:41:c0:7e:cd:b1:49:69:
         81:3d:58:70:c3:20:54:02:bb:47:c2:2e:f7:64:0a:14:8f:44:
         d0:34:1d:ff:e6:6c:98:fe:a0:aa:d1:f4:11:a2:ef:02:3b:f7:
         b9:ff:d8:9b:6f:2b:90:bd:f1:0a:05:5b:90:2f:4a:4b:0d:63:
         a6:14:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:20 2024 by rpki-client on console-fra.rpki-client.org