Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/323830333a643031303a3a2f33322d3438203d3e20323731373939.roa
File:                     323830333a643031303a3a2f33322d3438203d3e20323731373939.roa (raw, json)
Hash identifier:          L+ZapiuVx1C/HlspeNyE9S8aqwuNr+bXlD+g4bOuXXg=
Subject key identifier:   3C:F8:9F:79:D6:66:63:72:34:44:0C:3B:08:90:28:AF:EB:97:BE:43
Certificate issuer:       /CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
Certificate serial:       4131C7F8F21F4F01C04EB70B56D793A10CC35FB5
Authority key identifier: EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/323830333a643031303a3a2f33322d3438203d3e20323731373939.roa
Signing time:             Tue 05 Mar 2024 17:49:09 +0000
ROA not before:           Tue 05 Mar 2024 17:44:09 +0000
ROA not after:            Tue 04 Mar 2025 17:49:09 +0000
asID:                     271799
IP address blocks:        2803:d010::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:31:c7:f8:f2:1f:4f:01:c0:4e:b7:0b:56:d7:93:a1:0c:c3:5f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
        Validity
            Not Before: Mar  5 17:44:09 2024 GMT
            Not After : Mar  4 17:49:09 2025 GMT
        Subject: CN=3CF89F79D666637234440C3B089028AFEB97BE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:0a:18:20:18:c5:6e:a6:9f:09:92:fe:22:
                    fe:e2:07:2b:83:19:95:51:e4:54:fa:fe:8a:38:e8:
                    22:27:88:a6:41:9d:68:db:50:69:bf:47:6b:a8:53:
                    73:c8:d0:95:a7:8c:34:41:04:f0:b8:29:ca:02:c2:
                    c1:fa:52:9d:2a:3d:98:62:83:05:58:dd:78:2e:99:
                    ac:42:32:f7:8c:ab:a9:6a:cc:25:79:55:b4:31:c0:
                    25:a5:b4:f0:72:db:72:52:ca:a0:54:71:14:6d:23:
                    25:54:cf:6e:53:21:e1:38:d7:a0:b9:ce:bc:62:41:
                    00:7c:00:ed:dc:23:43:e3:c6:18:fd:c9:4b:42:72:
                    87:10:d8:46:d7:5b:07:c9:af:16:da:a2:50:9a:d8:
                    aa:a8:f4:4b:0c:60:b3:21:f5:76:6e:f2:e6:f6:ef:
                    ac:e5:5a:bc:4f:24:de:65:fb:00:41:8b:4a:5b:6d:
                    c4:51:aa:66:dd:db:c5:7e:1a:0a:06:6b:f9:ab:ed:
                    8b:eb:c8:70:a8:95:44:b7:39:7e:57:4a:cf:99:32:
                    be:fb:a9:bd:5c:20:7b:99:e7:57:cf:19:86:d3:d6:
                    2f:90:f8:e7:5f:35:bd:a6:f4:67:77:e5:18:37:cf:
                    cd:4b:47:ae:ee:d3:2f:c0:93:ba:58:9a:41:ed:4e:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F8:9F:79:D6:66:63:72:34:44:0C:3B:08:90:28:AF:EB:97:BE:43
            X509v3 Authority Key Identifier:
                keyid:EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/323830333a643031303a3a2f33322d3438203d3e20323731373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d010::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:7d:56:8f:6e:93:ac:a8:7f:eb:a6:c4:6f:d4:ca:c7:0d:d7:
         85:0b:9e:90:da:ae:76:dc:77:c4:c4:d6:14:de:0b:01:8f:8f:
         77:5f:08:dd:ca:52:2f:9e:12:95:75:f1:13:25:eb:8f:10:70:
         e8:8a:8e:58:6b:ac:32:82:83:10:61:f4:a3:d9:73:9f:f8:b4:
         7d:4c:bc:ee:b9:83:32:a1:ef:fb:1f:fc:c5:ae:01:f1:ef:90:
         e3:f9:2c:1a:ed:c9:bd:b9:cf:84:6b:51:54:ea:1f:9b:c7:e3:
         ab:37:b3:88:f5:03:96:cb:5c:06:46:f1:ca:1c:5b:4c:5f:cb:
         3a:a9:26:9c:33:9c:5b:6c:6a:04:c4:47:c3:fc:b8:c2:00:13:
         1f:df:51:a8:aa:51:31:79:b8:56:1e:2e:7d:fd:09:2b:09:7c:
         ef:dc:2f:37:77:fd:ff:41:66:84:7b:68:f7:f1:fc:4f:6c:d6:
         c9:0f:e5:ab:fd:8d:16:ae:b9:a8:cc:ff:44:c2:96:eb:7e:cd:
         4e:8e:50:88:fd:7c:6c:6c:52:7c:3c:c5:84:b9:b9:5c:36:5d:
         9a:11:bb:58:ff:e6:2b:30:98:c4:85:e3:73:bc:94:dc:99:75:
         a0:75:bf:e9:b7:40:b6:fd:41:7b:db:18:4a:2b:4d:5d:4b:45:
         70:9e:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org