Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa
File:                     323830333a373736303a3a2f33322d3438203d3e20323639383239.roa (raw, json)
Hash identifier:          drfJq3MJWm+V5RM0td14tcEcq9Fu90cDayq6kPhS/hk=
Subject key identifier:   7E:86:6C:7B:F0:86:85:65:35:96:00:A0:5E:76:14:3B:C6:61:D8:4D
Certificate issuer:       /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
Certificate serial:       59A5A7C04530894EC61BC4B46AB4535CC909FEE7
Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa
Signing time:             Tue 05 Mar 2024 17:56:19 +0000
ROA not before:           Tue 05 Mar 2024 17:51:19 +0000
ROA not after:            Tue 04 Mar 2025 17:56:19 +0000
asID:                     269829
IP address blocks:        2803:7760::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:a7:c0:45:30:89:4e:c6:1b:c4:b4:6a:b4:53:5c:c9:09:fe:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
        Validity
            Not Before: Mar  5 17:51:19 2024 GMT
            Not After : Mar  4 17:56:19 2025 GMT
        Subject: CN=7E866C7BF0868565359600A05E76143BC661D84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:78:a5:09:3a:1b:ee:8b:fb:49:d0:94:ba:
                    ce:ff:8d:87:f7:b7:a6:b2:88:39:73:74:b6:8c:c8:
                    a9:63:34:d6:45:8d:fd:52:6d:b6:18:97:06:e2:57:
                    52:a4:78:34:27:b1:2d:5a:e5:6c:cc:05:7f:b1:b9:
                    65:d0:93:9a:33:73:d9:05:43:06:ad:97:c5:52:0c:
                    91:9a:11:00:be:d4:de:51:e4:64:d4:ff:e3:a2:5c:
                    59:30:12:1c:81:4b:8d:d7:26:dd:79:bc:08:29:79:
                    8f:5b:b7:45:7c:44:c6:cf:29:45:92:33:69:f0:ff:
                    fc:78:85:17:db:32:3c:7a:d8:f2:b6:65:3e:bf:30:
                    61:12:90:a6:92:27:a4:47:46:a4:a6:a0:3f:fc:71:
                    e4:c7:8d:ea:40:95:79:25:38:8a:c5:36:21:c3:72:
                    57:dc:02:1b:a4:27:7d:37:13:28:25:b5:09:17:a6:
                    ba:4d:3d:f5:bc:b4:cc:ee:91:c7:c0:8a:62:58:be:
                    6d:23:e8:8d:0f:19:98:72:aa:6e:40:8e:86:63:42:
                    63:18:da:cd:c6:15:03:76:b5:37:c4:2b:eb:4b:a9:
                    c8:dd:3a:c3:cd:5b:11:f6:65:9c:22:ed:40:48:ba:
                    b3:f0:c9:49:c9:3b:fe:08:34:01:ec:b7:8e:6b:c4:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:86:6C:7B:F0:86:85:65:35:96:00:A0:5E:76:14:3B:C6:61:D8:4D
            X509v3 Authority Key Identifier:
                keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/323830333a373736303a3a2f33322d3438203d3e20323639383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:55:5e:45:8c:3e:1f:f0:33:8a:47:73:74:6a:9f:62:a7:
         ea:17:62:49:3e:f6:5a:a5:dc:b6:01:9a:fc:46:4b:bf:bd:2a:
         ef:47:3a:4d:e0:8a:c3:19:74:fe:68:50:b2:17:4a:d4:77:0a:
         fd:09:32:b5:81:8e:b5:15:9e:41:78:4a:13:94:e3:f1:89:b4:
         db:8a:a3:e7:93:9d:ed:ef:d2:eb:96:51:f3:19:61:3c:42:9f:
         00:fc:a2:26:f3:57:ba:b1:d1:15:fe:5e:13:a5:9c:32:a2:70:
         72:23:71:b1:76:eb:68:0f:9b:04:2b:da:8b:b9:34:f4:12:9a:
         fd:39:6c:6e:18:45:72:6b:e8:07:d7:ef:ca:e0:a5:7c:05:24:
         20:46:86:b8:7c:e9:fe:d0:66:93:b9:1c:e9:6a:8a:89:0e:38:
         0b:cf:30:19:c9:9a:7e:ec:24:4a:58:76:aa:28:8d:47:c2:1c:
         00:b9:c9:80:b8:65:ef:39:9b:ad:ea:f0:67:04:d5:48:0d:42:
         d9:a2:37:4d:13:4b:e0:5d:fc:93:67:c3:61:1c:3f:b9:6e:c3:
         d1:ff:1b:48:c3:d1:29:f0:c3:63:54:90:cc:46:06:af:91:d8:
         e5:b6:7f:73:d6:a4:13:d6:2c:69:13:75:5a:15:58:d1:09:a0:
         e6:f3:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:55:38 2024 by rpki-client on console-fra.rpki-client.org