Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa
File:                     323830333a353031303a3a2f33322d3332203d3e20323731383033.roa (raw, json)
Hash identifier:          oJXi8ejvhWAsKPNrXhLXJtx00ZNMuZS3klyJvCpwXCY=
Subject key identifier:   7E:9D:77:47:94:20:32:CA:2B:CC:9B:1E:FC:6F:75:FC:2E:2F:4D:DD
Certificate issuer:       /CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
Certificate serial:       5A30BDE4AA172E766C0D1787D0DD5E6FE215BDAC
Authority key identifier: BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa
Signing time:             Tue 05 Mar 2024 17:42:26 +0000
ROA not before:           Tue 05 Mar 2024 17:37:26 +0000
ROA not after:            Tue 04 Mar 2025 17:42:26 +0000
asID:                     271803
IP address blocks:        2803:5010::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:30:bd:e4:aa:17:2e:76:6c:0d:17:87:d0:dd:5e:6f:e2:15:bd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
        Validity
            Not Before: Mar  5 17:37:26 2024 GMT
            Not After : Mar  4 17:42:26 2025 GMT
        Subject: CN=7E9D7747942032CA2BCC9B1EFC6F75FC2E2F4DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:e3:30:4d:29:1c:9f:10:5c:47:02:1d:b8:
                    8a:ba:8a:e1:85:cb:e3:d5:2c:fa:d5:89:0d:94:c0:
                    2a:8c:46:0c:cc:56:40:60:cb:65:3a:99:40:a7:37:
                    b8:35:0b:ec:c1:29:57:dc:56:ed:2d:f2:d4:d4:f2:
                    13:a7:b2:04:83:39:59:dd:7d:e0:97:a9:f8:31:2d:
                    0b:e8:4a:f8:fc:95:8c:8a:1e:8a:3e:2c:7e:90:1b:
                    85:52:77:15:14:99:c0:fe:94:45:b4:7d:d1:11:57:
                    a4:4b:5c:df:59:0f:87:57:15:e3:8e:34:e9:4f:8e:
                    c4:da:3d:cd:d0:d2:4b:e6:60:1d:b9:2c:e6:99:84:
                    90:32:70:ca:b2:d4:df:04:16:d8:15:63:99:d6:d2:
                    9e:87:22:50:45:22:d4:bd:cc:49:8e:bf:2c:80:27:
                    5d:dd:44:23:8f:67:6c:f9:36:2a:ee:e5:f3:43:ab:
                    50:5d:be:70:2d:c9:27:20:d6:85:c0:8e:d2:ac:a8:
                    9e:53:59:6e:ef:3a:21:90:f0:d0:1d:84:91:5b:b5:
                    f3:0d:47:d0:85:4a:d0:f9:c6:13:ae:3c:fa:e6:df:
                    9a:3b:e4:11:4b:9c:76:d0:a4:55:ec:fa:1d:a9:f7:
                    b7:b7:3f:55:09:6f:47:37:41:7d:60:7d:a8:77:30:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:77:47:94:20:32:CA:2B:CC:9B:1E:FC:6F:75:FC:2E:2F:4D:DD
            X509v3 Authority Key Identifier:
                keyid:BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/323830333a353031303a3a2f33322d3332203d3e20323731383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5010::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:39:5a:f4:ce:c1:6e:0b:1f:94:9b:1e:f0:63:60:70:9f:
         48:74:e7:81:c8:ef:0c:26:d4:c0:be:80:f4:67:f9:26:7d:5d:
         fa:33:51:8e:d5:85:8e:82:27:24:2b:29:1d:cb:c8:4f:e8:b2:
         40:36:e9:bc:0b:02:0f:65:49:8e:5c:b0:fe:3a:a3:1e:bb:58:
         2a:5b:60:fc:9a:54:b4:ce:5d:4d:9d:2a:2b:0f:ec:83:72:49:
         f5:40:c6:85:36:3d:f8:e9:dc:6c:6f:34:7f:4b:db:e8:6c:44:
         7c:da:12:e5:95:2e:2f:6a:4b:cc:38:26:d1:eb:d5:96:2e:16:
         ff:6a:ff:4b:2b:09:1a:61:54:f4:3c:76:54:5a:29:40:e4:c4:
         2b:2f:35:2f:ef:90:63:31:9d:d4:9e:b4:2f:2d:40:70:ed:bb:
         4e:0f:48:48:08:44:f6:a0:47:06:fe:a8:8f:09:23:d3:a1:8d:
         8b:ce:b9:e5:a7:1d:cc:95:d2:c2:57:74:31:17:f0:5c:8b:77:
         31:1f:75:d3:c7:a4:95:a8:d9:0d:35:bb:2b:e0:4f:21:c5:bc:
         2a:9c:3a:75:89:95:99:db:75:47:f1:36:e6:7a:b3:87:03:02:
         eb:04:90:b2:a8:24:bd:fc:a7:b6:13:4c:c0:e0:f5:d8:de:4d:
         07:6b:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:07:33 2024 by rpki-client on console-ams.rpki-client.org