Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/323830333a623035303a3a2f33322d3438203d3e20323733313032.roa
File:                     323830333a623035303a3a2f33322d3438203d3e20323733313032.roa (raw, json)
Hash identifier:          sYthsT3+SX9C3fZrsuEgobq/s0EFCsaVzp1690C+FK0=
Subject key identifier:   37:F5:E3:49:D2:F3:B0:3D:DD:CF:FC:FF:AA:02:F1:C3:3B:F4:98:55
Certificate issuer:       /CN=5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5
Certificate serial:       3630744EA511AF84AEBA7AA0A2261E3F48C1EC9F
Authority key identifier: 5F:23:E7:EC:A4:EB:39:5B:6C:10:AF:3C:50:9F:DF:3E:CE:00:60:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/323830333a623035303a3a2f33322d3438203d3e20323733313032.roa
Signing time:             Tue 05 Mar 2024 18:08:40 +0000
ROA not before:           Tue 05 Mar 2024 18:03:40 +0000
ROA not after:            Tue 04 Mar 2025 18:08:40 +0000
asID:                     273102
IP address blocks:        2803:b050::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:30:74:4e:a5:11:af:84:ae:ba:7a:a0:a2:26:1e:3f:48:c1:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5
        Validity
            Not Before: Mar  5 18:03:40 2024 GMT
            Not After : Mar  4 18:08:40 2025 GMT
        Subject: CN=37F5E349D2F3B03DDDCFFCFFAA02F1C33BF49855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:a9:ba:d1:47:6b:94:a6:a9:50:9d:5a:21:
                    0a:4c:d3:9c:64:a7:ed:0d:0f:57:d4:30:2e:4f:8d:
                    8a:f4:02:d8:7a:60:e6:66:84:b0:76:be:6d:2f:4b:
                    52:e8:01:45:01:4f:e7:80:cd:c8:3e:84:48:ec:ca:
                    42:a9:2f:d3:4b:48:f6:73:d6:c0:9f:1d:9e:d9:72:
                    56:b5:69:8e:1f:61:59:d7:49:d5:e8:b6:54:ea:a1:
                    54:2c:95:ce:06:5c:f0:f8:fb:df:7e:11:29:0c:85:
                    bc:5e:06:ff:cc:4d:0a:dd:fc:7e:eb:7c:21:b8:00:
                    ff:cd:a4:88:6d:e7:ae:d2:e7:62:d8:c5:4f:fc:e6:
                    ed:6b:df:70:49:f9:6e:20:35:66:d6:43:0b:41:92:
                    ea:90:38:4c:bb:7c:32:5b:c3:d0:3e:d4:4e:16:fe:
                    be:65:99:bf:57:da:d1:14:44:af:3d:3c:33:2c:4d:
                    7e:8b:96:05:fb:76:b6:a6:cb:01:36:9c:d3:d9:13:
                    8c:50:be:3a:81:a7:89:53:cc:32:e4:ca:70:c1:ff:
                    c3:3e:4b:af:66:a3:a3:c2:5e:ba:34:7d:ab:b4:7e:
                    29:9a:1f:fc:8f:5e:82:82:59:13:95:84:cf:31:96:
                    dc:68:32:52:26:5c:d6:0a:6d:28:1f:2a:c0:0b:aa:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:E3:49:D2:F3:B0:3D:DD:CF:FC:FF:AA:02:F1:C3:3B:F4:98:55
            X509v3 Authority Key Identifier:
                keyid:5F:23:E7:EC:A4:EB:39:5B:6C:10:AF:3C:50:9F:DF:3E:CE:00:60:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F23E7ECA4EB395B6C10AF3C509FDF3ECE0060E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6C2BCD3D3E8AB3F563001541A274647E9A8CE4865E67F15645495CB93BAFBFD/0/323830333a623035303a3a2f33322d3438203d3e20323733313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b050::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:1e:1b:ea:b3:2d:fe:2d:ed:ed:12:4b:f0:eb:a0:0c:00:
         e6:75:50:84:70:3a:6b:7c:f9:a3:de:af:bd:c9:6b:76:fd:9a:
         38:1e:f8:cf:f5:3d:da:63:e6:20:87:46:d7:9e:05:c1:71:38:
         24:c9:e8:05:a9:6c:09:b6:84:43:fb:30:0c:75:fb:2a:38:4c:
         5f:15:4c:83:33:d5:9d:3c:ba:15:47:02:19:ea:e5:c0:2d:b1:
         b7:75:70:07:da:d5:f8:3b:0a:2e:23:03:82:cd:10:78:87:f8:
         ad:de:44:27:62:53:a6:3b:18:8c:9a:90:36:69:ef:66:c7:57:
         62:1a:c3:4e:c9:1f:66:00:0e:de:2e:82:c2:9c:3b:76:e6:d6:
         1f:bb:13:fe:ef:5a:50:2b:56:d1:40:c3:29:a5:94:34:09:45:
         64:db:d2:08:82:47:33:7a:3e:a8:73:08:53:6c:22:2a:73:29:
         d1:82:5b:b2:08:42:da:28:ce:b9:4c:2f:1f:dd:45:91:be:37:
         ae:b9:78:90:d4:2b:98:e7:05:5c:57:04:24:80:5e:ff:14:e9:
         5f:bd:52:18:a1:92:fe:61:c8:f3:9d:cb:32:f9:52:f4:5d:02:
         6d:2b:5a:0d:4d:c4:f8:ba:4a:0f:1c:dd:20:f1:56:22:9d:6f:
         29:c1:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:09:57 2024 by rpki-client on console-ams.rpki-client.org