Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3436203d3e20323639383533.roa
File:                     323830333a313065303a3a2f33322d3436203d3e20323639383533.roa (raw, json)
Hash identifier:          mLD4IqEyryvdmV00qqOEXSTC751u9v8TDHFTX1SO818=
Subject key identifier:   46:C9:92:E7:F4:C0:A8:37:36:FC:D6:B8:84:36:BB:36:86:2C:89:A1
Certificate issuer:       /CN=A705052BB6C34BD8AC98D939073DF4308F336B54
Certificate serial:       081A76A7BEFA41FACC1422B6DF7700A9DB0213C5
Authority key identifier: A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3436203d3e20323639383533.roa
Signing time:             Tue 05 Mar 2024 18:02:00 +0000
ROA not before:           Tue 05 Mar 2024 17:57:00 +0000
ROA not after:            Tue 04 Mar 2025 18:02:00 +0000
asID:                     269853
IP address blocks:        2803:10e0::/32 maxlen: 46

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:76:a7:be:fa:41:fa:cc:14:22:b6:df:77:00:a9:db:02:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A705052BB6C34BD8AC98D939073DF4308F336B54
        Validity
            Not Before: Mar  5 17:57:00 2024 GMT
            Not After : Mar  4 18:02:00 2025 GMT
        Subject: CN=46C992E7F4C0A83736FCD6B88436BB36862C89A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:66:37:47:75:3b:f1:f3:3f:cc:3a:0a:1d:
                    19:99:bb:55:09:30:27:31:44:2f:6a:07:31:b6:12:
                    da:3c:b8:75:1c:06:e3:86:5c:b9:1f:a7:b8:7b:f4:
                    aa:11:f4:71:74:d0:fd:d2:9b:19:8b:d6:a1:c4:c5:
                    7a:33:2e:df:94:91:71:51:23:b3:df:a2:89:33:a0:
                    9b:ff:05:33:d4:6e:64:d9:b0:20:bd:bf:8b:8c:b4:
                    cd:96:f0:a2:c9:4c:fd:39:8e:b6:e5:2e:4a:64:c6:
                    23:14:3a:93:8b:66:fd:4f:99:6a:5f:b6:19:11:50:
                    e1:0c:e0:cc:cd:f2:e9:be:e5:bf:c2:3a:01:45:84:
                    3e:0e:01:db:af:84:ed:2a:dd:87:4c:fc:3d:98:6a:
                    32:cd:2a:55:62:78:a2:b6:4f:85:c9:e4:94:b0:f3:
                    20:fa:49:10:7f:4a:0c:5b:9d:d1:f7:e6:79:a2:ef:
                    cd:c5:b5:c9:e5:82:94:ef:d8:b3:17:46:71:88:0b:
                    6c:27:80:e8:dc:ea:39:8d:6c:84:83:d8:e2:51:66:
                    aa:6a:67:db:1e:3c:7f:b4:79:67:eb:a3:89:5c:a5:
                    18:51:4a:55:6a:53:b0:cc:11:13:aa:50:9a:a2:0f:
                    1d:3b:92:83:06:d4:e9:59:d3:5a:3f:86:1a:d1:b9:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C9:92:E7:F4:C0:A8:37:36:FC:D6:B8:84:36:BB:36:86:2C:89:A1
            X509v3 Authority Key Identifier:
                keyid:A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3436203d3e20323639383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:bf:38:e0:9f:0a:ee:e3:df:04:e1:4a:c3:29:6c:c8:dd:
         90:97:2b:ef:fe:bf:e1:bd:49:a5:ae:09:55:67:ae:ae:b4:5a:
         3f:f1:b6:67:a8:2e:bb:27:9c:7e:d9:85:f3:2e:25:70:69:3f:
         12:17:56:8e:b7:16:f3:36:0e:f2:e8:24:31:84:0f:b4:e1:74:
         d4:9a:32:c6:4a:6d:d8:f2:69:03:c3:d3:5d:f8:32:ab:9d:d1:
         31:7d:23:ac:d5:d6:25:0e:65:01:44:08:2a:f7:57:52:92:d0:
         d6:f2:41:bc:27:03:fc:37:b1:7f:68:eb:f9:4c:7d:71:c8:ee:
         53:f9:66:e8:34:40:a9:89:12:db:0f:8e:35:84:6f:61:82:92:
         ba:57:8e:d6:3a:83:12:cc:91:7c:46:d9:2c:8b:47:a5:9f:84:
         15:6a:03:6a:8f:2a:59:3b:05:a3:dc:4e:f8:6f:7a:47:5a:c4:
         6e:e1:86:e6:90:98:92:f2:00:29:f9:f5:84:80:e8:ef:57:fd:
         92:3b:cc:1e:d6:44:55:7e:bb:26:0d:84:c2:85:79:fb:eb:ca:
         73:d9:0b:bb:c3:96:f2:e6:59:d9:a7:52:e3:8f:07:e5:0d:9e:
         51:d1:11:63:35:b1:21:10:96:f4:31:f9:7d:05:2f:ec:bf:f0:
         85:11:7e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 21:04:58 2024 by rpki-client on console-fra.rpki-client.org