Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa
File:                     323830333a653365303a3a2f33322d3438203d3e20323730303731.roa (raw, json)
Hash identifier:          DhwO2Ytk+JQuR5DSZI5pK7Rj2xPDFTRnl9goNlSIt1U=
Subject key identifier:   75:DB:81:7E:99:5B:2D:6C:13:2E:DE:A2:1F:51:0F:A8:12:B1:73:FB
Certificate issuer:       /CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
Certificate serial:       0AC3BBB52D8EB2A20B83F7BDE226FF02A357822A
Authority key identifier: B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa
Signing time:             Tue 05 Mar 2024 18:03:39 +0000
ROA not before:           Tue 05 Mar 2024 17:58:39 +0000
ROA not after:            Tue 04 Mar 2025 18:03:39 +0000
asID:                     270071
IP address blocks:        2803:e3e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:bb:b5:2d:8e:b2:a2:0b:83:f7:bd:e2:26:ff:02:a3:57:82:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
        Validity
            Not Before: Mar  5 17:58:39 2024 GMT
            Not After : Mar  4 18:03:39 2025 GMT
        Subject: CN=75DB817E995B2D6C132EDEA21F510FA812B173FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:66:7e:ad:05:e3:b8:1b:1b:ae:23:88:91:
                    dd:e6:af:78:52:d1:9b:04:03:e9:b5:8a:58:ac:24:
                    57:0c:1e:02:9a:bc:26:56:ae:a6:b6:2e:9e:48:9b:
                    fb:a3:d4:80:9f:23:d8:5d:c8:77:5b:e2:f9:2f:ce:
                    5a:78:f6:d2:b0:d0:cf:40:a0:72:be:56:8e:ba:78:
                    aa:82:76:9e:a4:75:87:af:6c:b6:e2:8b:c2:c0:2e:
                    87:83:c0:61:9c:59:3a:e8:25:47:f4:aa:fb:a3:84:
                    f5:be:c7:a7:3d:74:15:46:e1:58:a5:76:ea:54:66:
                    41:a3:b3:b1:6b:13:25:0e:4d:7c:dd:47:cb:34:49:
                    f1:49:bc:24:64:ac:01:8d:62:f5:08:75:a1:3a:c7:
                    54:5b:f4:28:bb:85:67:d8:3b:bc:06:57:80:b3:99:
                    63:81:c6:67:3a:d1:87:c3:4d:ec:0e:f2:bd:46:93:
                    ad:3f:22:cf:61:01:f4:4b:7e:a6:e2:d1:29:a3:ca:
                    96:11:60:97:24:ea:81:35:9f:20:f4:10:b5:cb:17:
                    0e:ed:0a:78:35:e4:c8:22:ac:18:b5:61:e0:86:db:
                    d7:5f:8b:d5:bb:a7:30:2e:08:a1:c4:d0:ae:4c:b8:
                    ad:24:0c:67:dd:6f:9f:d2:5c:c6:42:0e:c1:93:ba:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DB:81:7E:99:5B:2D:6C:13:2E:DE:A2:1F:51:0F:A8:12:B1:73:FB
            X509v3 Authority Key Identifier:
                keyid:B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:d3:cd:35:09:cb:a1:ee:14:bb:b7:c4:46:f2:2c:84:f2:
         98:2c:1f:f7:ef:8d:bb:08:b7:9d:3d:da:26:dd:f5:9f:31:ab:
         04:70:79:1a:5f:a2:4e:88:5c:7d:33:51:5c:93:07:f5:f8:c9:
         e3:65:8f:95:d2:ec:b2:bf:48:af:9d:79:29:0b:05:ff:8b:e9:
         f2:e0:e2:62:41:f5:27:73:0b:98:f5:e8:d4:4f:0a:43:2a:f0:
         76:fa:a1:c2:30:da:e8:9f:9a:f5:1c:b8:d4:1a:2f:6b:a5:26:
         af:d7:ce:c9:9c:6e:9b:5b:61:87:5a:27:ab:1f:69:20:5a:d4:
         44:e8:6d:42:f3:81:99:24:5e:63:52:1c:6b:76:d9:6b:d7:d3:
         1c:6e:59:d3:e8:d5:1e:b4:be:b3:07:f7:b7:42:4b:bc:8d:62:
         7f:a3:b8:c9:38:37:34:98:12:cc:27:54:bd:9c:29:27:de:b7:
         7e:fa:59:19:f4:33:75:cd:c3:59:ad:e7:56:b7:e3:1b:44:92:
         b8:c5:16:db:17:41:d3:86:29:4c:bd:f4:5e:a3:9d:a3:29:1d:
         ad:68:42:3a:c1:cf:df:37:35:53:0e:60:15:46:ad:47:98:42:
         bf:c2:6f:5e:8a:0a:dd:ba:8b:a7:8f:ca:04:9e:83:32:bc:57:
         8d:e7:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org