Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
File:                     323830333a646331303a3a2f33322d3634203d3e20323731383831.roa (raw, json)
Hash identifier:          6wyhaexp/Sazwq20khufhUDQMZZBoW3qczfgaHkxbRA=
Subject key identifier:   59:13:A5:B3:47:B2:3A:2C:BA:A6:8C:3A:02:07:FB:80:98:11:C8:2A
Certificate issuer:       /CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
Certificate serial:       31F007296D8CB8339388FEAC26AE4EA409AF714A
Authority key identifier: 4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa
Signing time:             Tue 05 Mar 2024 18:14:38 +0000
ROA not before:           Tue 05 Mar 2024 18:09:38 +0000
ROA not after:            Tue 04 Mar 2025 18:14:38 +0000
asID:                     271881
IP address blocks:        2803:dc10::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f0:07:29:6d:8c:b8:33:93:88:fe:ac:26:ae:4e:a4:09:af:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
        Validity
            Not Before: Mar  5 18:09:38 2024 GMT
            Not After : Mar  4 18:14:38 2025 GMT
        Subject: CN=5913A5B347B23A2CBAA68C3A0207FB809811C82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:8f:c3:97:bf:81:4f:87:f2:3a:01:62:2e:
                    ac:80:56:3f:ea:0a:4c:8e:2e:b7:01:29:e3:26:66:
                    0c:70:2e:07:f0:a2:00:3a:ca:24:84:ab:90:6e:e0:
                    6e:51:b6:8e:a4:ec:32:31:e5:fe:14:33:03:6c:b4:
                    92:6e:fa:ff:c5:c2:9e:2b:ee:6e:ba:b4:c4:6d:3b:
                    50:74:10:c5:a5:89:b4:15:79:2e:b7:3f:cf:7d:6a:
                    88:7a:18:f6:9f:d7:27:9c:ae:44:16:2a:9f:91:26:
                    45:ef:cb:2e:38:95:69:e6:8e:6e:57:95:18:09:04:
                    a8:9b:e4:7c:c9:10:23:b7:29:1e:37:1e:10:f5:6a:
                    2f:c6:ef:06:5a:41:79:54:a7:92:80:70:75:8f:14:
                    82:5f:25:8d:d3:66:6f:f6:16:f6:d3:82:5b:e7:f4:
                    99:80:dd:ed:46:fa:58:74:7a:c6:fa:4f:3c:e3:09:
                    a0:0d:36:77:10:51:46:c2:f2:3d:78:b4:d4:c3:88:
                    09:09:6e:8f:f1:49:86:3a:6f:3d:b0:e0:c9:bc:82:
                    73:58:af:f4:73:81:45:4c:07:4a:92:53:90:51:46:
                    1a:f4:a2:59:3b:cd:89:18:bc:5c:af:b5:1e:b1:a1:
                    39:7d:4c:1e:28:70:af:a4:20:89:38:29:ba:e9:0e:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:A5:B3:47:B2:3A:2C:BA:A6:8C:3A:02:07:FB:80:98:11:C8:2A
            X509v3 Authority Key Identifier:
                keyid:4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/323830333a646331303a3a2f33322d3634203d3e20323731383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:20:11:61:af:4f:cd:bd:21:9b:2e:b0:92:a2:01:31:0f:7e:
         09:a4:45:18:7b:ce:d9:26:6c:5b:38:d4:3e:a0:59:05:f0:aa:
         bb:e6:1c:a3:59:9c:c6:8e:39:77:bc:d8:40:96:6f:61:b5:bb:
         3c:85:89:d2:e4:21:68:32:93:17:0e:84:04:68:88:98:89:1d:
         87:00:38:49:6b:24:b3:94:d8:f4:2e:3a:29:0b:d4:09:22:e8:
         3f:a3:d7:ac:e4:14:51:ed:a2:d0:b7:9b:0f:24:28:6f:b6:20:
         42:5b:da:a7:8c:78:69:97:26:b9:11:31:25:05:d7:74:38:05:
         cd:4d:0f:de:21:ea:73:a4:fe:fc:16:6a:95:c6:42:83:20:8e:
         c0:e8:2a:7c:9e:0a:b2:15:ac:9c:94:fb:6d:76:7a:cc:20:dd:
         d7:0e:cd:93:f0:23:3a:93:58:52:b8:00:b7:f4:01:cf:18:da:
         fc:0b:09:76:84:38:2e:fe:74:a8:5e:bf:a1:a9:5c:fa:00:fe:
         a7:64:63:db:72:08:99:af:85:23:8c:1b:04:c8:2c:28:d3:35:
         ce:95:7b:19:ea:df:49:79:4c:77:97:15:f2:b5:6a:2a:6e:96:
         c8:15:e4:b9:93:71:85:94:e9:f0:6a:a5:46:a7:ef:94:a3:ea:
         0d:72:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org