Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330313a3a2f34382d3438203d3e20323633373933.roa
File:                     323830333a3834303a323330313a3a2f34382d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          b6Ytuny6c7rtNL2v1fVNN6Qpnd4kneQ+lkZctvUbk58=
Subject key identifier:   F2:DE:EA:95:80:21:95:B4:47:17:3A:05:70:B5:C0:1B:8C:6E:23:44
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       7C38652FA1294CDCB08330596C4D0D97EF82D5F9
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330313a3a2f34382d3438203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:57 +0000
ROA not before:           Tue 05 Mar 2024 18:14:57 +0000
ROA not after:            Tue 04 Mar 2025 18:19:57 +0000
asID:                     263793
IP address blocks:        2803:840:2301::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:38:65:2f:a1:29:4c:dc:b0:83:30:59:6c:4d:0d:97:ef:82:d5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:57 2024 GMT
            Not After : Mar  4 18:19:57 2025 GMT
        Subject: CN=F2DEEA95802195B447173A0570B5C01B8C6E2344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:53:99:c8:84:ff:17:c9:34:08:68:78:5b:
                    f5:c6:0b:c2:a3:6a:4a:84:a3:ea:a7:9e:19:e5:82:
                    ac:f1:9d:42:7d:a6:0f:18:92:44:37:08:6d:fe:77:
                    4b:c6:ab:ec:00:10:a5:50:71:b3:8d:74:2c:bd:48:
                    dd:33:05:68:4f:43:00:bf:0a:c5:8c:9c:6e:24:10:
                    e8:ee:e1:22:6e:39:28:79:71:6f:cd:dc:26:89:60:
                    51:90:b7:4a:00:5b:84:8a:d7:61:a1:79:49:f7:9d:
                    cc:8a:a1:a5:4b:b7:61:99:41:86:c9:45:9d:4b:49:
                    2d:b5:2e:26:4d:2e:de:04:9b:f9:7b:9b:c0:1c:33:
                    76:d7:84:37:13:fb:f6:7c:3c:af:d3:fd:ba:6a:6c:
                    1f:ad:d8:1c:22:b5:3b:d3:1f:fa:b2:ce:79:d4:ab:
                    8e:e5:d9:08:6f:3e:a6:c2:78:77:2c:d1:7c:1e:cc:
                    bc:6c:e7:39:75:6d:75:4c:31:b5:3c:40:48:84:12:
                    27:8f:57:bf:98:c2:c5:de:09:af:99:46:3e:82:56:
                    0b:b4:69:b8:2d:d8:13:42:26:0a:37:18:f0:94:04:
                    0f:67:a1:fe:64:74:bc:8e:e9:a0:8e:c9:84:2f:fb:
                    c2:d9:6b:75:9c:74:f2:28:a8:fb:66:38:e9:03:dc:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:EA:95:80:21:95:B4:47:17:3A:05:70:B5:C0:1B:8C:6E:23:44
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a323330313a3a2f34382d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840:2301::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:aa:28:2e:38:e6:5f:24:17:2b:a2:2c:16:7d:1f:85:28:96:
         8d:72:a9:7d:6f:67:3c:1f:36:5f:4c:5d:ba:73:cc:0e:b3:1b:
         00:e0:57:48:3a:31:2f:01:db:28:eb:81:02:25:d9:38:68:21:
         d5:1d:38:ef:27:c5:28:6c:93:bc:dc:20:7c:69:e0:c5:b0:03:
         fc:ba:47:82:6d:37:61:e4:9d:a5:69:43:8c:3e:60:3c:90:2b:
         0f:b8:78:a7:95:4c:bb:11:03:a2:ce:9d:b1:3a:bb:d7:40:4f:
         97:b2:ac:86:61:24:2d:8e:20:fe:f0:9f:45:e4:23:4c:b6:b5:
         42:1d:7f:54:ee:fb:9f:87:08:97:3d:76:9d:e2:e2:fc:6b:dc:
         77:24:6f:07:a3:88:7e:2e:81:75:8e:c1:36:a9:a5:e4:c4:bd:
         94:30:be:ba:4c:e3:0f:c1:d0:4b:9f:20:3c:c0:8b:90:36:24:
         fc:7c:c0:25:20:82:29:33:e0:c5:35:2c:04:ed:05:5f:aa:fd:
         a1:9a:54:7b:59:07:6d:33:b6:df:ca:b3:58:1b:7b:71:1a:39:
         f7:e2:3e:28:0d:8c:92:77:d3:8e:ad:8b:e7:4d:96:d8:30:6e:
         d1:40:c8:55:0e:12:d8:14:62:6f:a6:2f:68:03:10:08:71:08:
         da:dd:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:12 2024 by rpki-client on console-fra.rpki-client.org