Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
File:                     323830333a3235303a3a2f33322d3438203d3e20323733313535.roa (raw, json)
Hash identifier:          BRpqL+pTFXODxFzWUWZR1afdhr8HBYvpaHRhwwe/vGM=
Subject key identifier:   35:48:B6:A0:5B:A6:5E:3E:C7:09:34:A3:27:31:5F:55:F7:52:B7:A0
Certificate issuer:       /CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
Certificate serial:       234F837DF3A7C725CBA3A48F761BF463442B5F88
Authority key identifier: C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa
Signing time:             Fri 26 Apr 2024 04:35:00 +0000
ROA not before:           Fri 26 Apr 2024 04:30:00 +0000
ROA not after:            Fri 25 Apr 2025 04:35:00 +0000
asID:                     273155
IP address blocks:        2803:250::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4f:83:7d:f3:a7:c7:25:cb:a3:a4:8f:76:1b:f4:63:44:2b:5f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9
        Validity
            Not Before: Apr 26 04:30:00 2024 GMT
            Not After : Apr 25 04:35:00 2025 GMT
        Subject: CN=3548B6A05BA65E3EC70934A327315F55F752B7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:56:ce:05:fa:73:4e:4b:95:67:b1:9b:7e:
                    4f:d4:bd:da:22:23:52:e8:8b:28:6c:04:c5:d1:1b:
                    e3:85:1e:36:2f:81:ae:c5:45:09:e2:28:db:30:ca:
                    ab:8f:85:8a:de:98:a0:b2:52:ac:44:53:3d:3f:f5:
                    53:1b:df:91:35:28:04:9a:aa:8b:cb:2f:d2:85:80:
                    3e:80:42:e5:50:c2:25:40:56:1e:97:76:c5:0e:58:
                    09:a9:97:c6:18:a3:4e:05:e5:6c:ef:07:0b:40:e2:
                    76:18:b3:4b:22:cb:54:14:2b:23:8d:18:1e:98:9c:
                    08:b7:51:56:d9:86:a4:71:cb:78:29:d0:70:e1:a9:
                    c4:18:7a:b6:10:4c:10:65:cc:6c:9a:ec:5b:88:40:
                    77:fa:1c:8e:18:9a:b2:57:78:27:ff:25:fb:b7:b3:
                    b3:18:ce:93:78:72:2a:af:5b:27:4d:d2:10:37:99:
                    28:0e:e6:4b:11:a8:9c:32:cc:7c:82:f4:f6:6f:89:
                    f9:37:ca:c5:a9:b5:01:c6:d8:dd:ec:0b:d4:bf:9e:
                    be:e6:39:44:fb:f1:72:89:73:08:65:24:b2:19:11:
                    a3:a4:56:46:f7:43:07:c9:ae:aa:c1:bb:08:60:51:
                    29:a6:0b:e9:28:eb:d4:1a:eb:05:a8:9d:90:03:0f:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:B6:A0:5B:A6:5E:3E:C7:09:34:A3:27:31:5F:55:F7:52:B7:A0
            X509v3 Authority Key Identifier:
                keyid:C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/323830333a3235303a3a2f33322d3438203d3e20323733313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:83:73:ed:e5:2f:d9:15:a2:b2:37:8b:d6:a8:b9:3c:32:d9:
         05:ad:c7:fc:a9:a3:c5:50:d7:a2:3c:8b:c3:6e:00:e2:d1:8d:
         89:1f:76:dd:ae:be:3f:62:6c:34:b9:da:ed:11:f4:59:93:8d:
         f4:79:c9:c2:31:f1:2f:f8:65:53:61:2d:37:92:8f:f0:8b:27:
         ec:ed:26:4a:a8:56:f3:f3:ab:39:71:53:66:3b:f0:4e:f2:b3:
         56:fc:dc:d6:07:0b:20:c1:62:c8:7e:01:a0:ee:b3:48:ad:12:
         ea:16:5b:85:d2:1a:b8:8d:5c:21:8c:8d:8e:1e:7a:fe:a7:4b:
         6f:16:6d:4f:b8:a7:10:a7:d0:78:cf:d1:5d:a6:2a:fd:d1:78:
         e0:dc:ae:28:30:e7:17:7b:9f:d7:c7:8f:4d:21:e0:b6:c3:6c:
         83:45:4f:02:1d:92:cc:4a:cc:fd:7e:17:92:a5:d2:c3:8f:6f:
         25:20:01:40:d0:70:da:16:37:e9:32:13:df:5b:11:75:f3:39:
         e1:09:76:18:07:45:e6:6a:51:c5:01:9f:4d:02:f8:20:3a:7c:
         b3:76:f8:96:3c:73:12:b8:1e:58:55:c3:5c:53:ec:61:5f:28:
         6a:81:df:96:5d:be:73:6b:bb:2f:9e:d6:15:84:c8:0e:6d:8d:
         d1:e0:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org