Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/323830333a623536303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a623536303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          RZ7NnDhO8C2kY7lZP3nUyCFwn9DKBOVJavTBUZot0Jc=
Subject key identifier:   BD:0E:23:34:DC:0C:29:DF:69:34:CE:98:BA:39:D1:F2:52:CE:9A:30
Certificate issuer:       /CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
Certificate serial:       4B1D31D87138965261DD80FCCB89FAC860E9170C
Authority key identifier: 24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/323830333a623536303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:44:19 +0000
ROA not before:           Tue 05 Mar 2024 17:39:19 +0000
ROA not after:            Tue 04 Mar 2025 17:44:19 +0000
asID:                     52468
IP address blocks:        2803:b560::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1d:31:d8:71:38:96:52:61:dd:80:fc:cb:89:fa:c8:60:e9:17:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
        Validity
            Not Before: Mar  5 17:39:19 2024 GMT
            Not After : Mar  4 17:44:19 2025 GMT
        Subject: CN=BD0E2334DC0C29DF6934CE98BA39D1F252CE9A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:ab:85:6b:48:ac:eb:27:9f:d9:1a:4d:d2:
                    f7:f5:00:17:6a:74:53:dd:bd:20:02:3a:5d:83:bc:
                    58:58:f1:34:d2:b4:9e:ce:18:55:38:94:d3:f5:46:
                    f5:0e:aa:29:68:f2:bf:39:dd:2f:f7:39:76:92:69:
                    a4:d9:74:8a:ae:f6:67:43:ee:4f:78:89:5b:45:ed:
                    57:f9:c6:da:c1:3a:cc:84:6f:c8:80:c3:0d:73:84:
                    07:7f:6e:ac:71:cd:5f:56:e5:ce:5b:8f:96:99:9a:
                    fb:36:62:7e:b2:c4:07:06:a0:9e:3f:20:c2:29:39:
                    9f:e6:ad:fa:c6:4c:da:cd:14:f0:08:cc:d5:e2:6f:
                    4e:26:a2:08:a3:e0:15:e0:84:cc:92:20:32:1c:39:
                    bc:36:41:b4:e1:72:fe:f5:2e:04:a4:72:a5:23:69:
                    d1:f6:c7:46:35:ae:99:2f:b1:c7:32:2a:5f:1c:32:
                    cd:4f:ad:6e:98:ef:94:ce:98:03:5d:2f:f7:ed:95:
                    74:32:19:26:eb:eb:d5:54:4c:90:9d:91:a4:a2:75:
                    9d:d3:af:95:ce:13:84:24:f2:81:45:80:41:2f:cc:
                    83:fa:db:3e:54:4f:c7:47:d5:ce:a4:0e:31:fa:12:
                    80:f2:a4:fb:14:53:17:5c:83:ed:1b:9a:14:3f:ff:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:23:34:DC:0C:29:DF:69:34:CE:98:BA:39:D1:F2:52:CE:9A:30
            X509v3 Authority Key Identifier:
                keyid:24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/323830333a623536303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b560::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:d0:91:a4:de:95:31:15:0d:b9:84:bc:b9:0b:e1:aa:e3:
         60:6b:2b:1b:3a:29:c5:4b:d7:3f:6a:73:75:7d:6e:3c:20:0f:
         5a:71:ac:34:4c:e2:87:56:b1:ed:a7:55:05:2a:f2:15:69:15:
         2e:d4:43:80:73:b9:c7:f4:fd:60:1a:7e:3a:fd:08:f5:86:54:
         ad:6b:18:bd:3e:0c:27:45:a6:93:39:5c:7a:43:a9:74:ce:c4:
         36:9f:84:e5:e2:c0:35:aa:83:77:e8:38:14:eb:41:c8:3b:07:
         90:2f:69:85:ad:25:7a:8a:e9:f7:f3:1e:85:f7:0f:ed:87:21:
         55:c4:82:ce:02:c5:fe:6b:12:40:16:c4:60:62:67:1b:b8:22:
         c4:b8:79:c3:71:66:d5:20:e3:f4:61:9c:7b:26:ac:a1:34:f0:
         e5:8a:e3:58:92:25:d6:17:42:ab:7e:51:c5:c4:b3:b1:e7:b2:
         03:78:86:be:3d:08:66:84:c5:e7:a7:b5:22:a0:09:cd:a9:27:
         6c:55:01:ad:39:3b:ba:39:2b:7e:26:4c:bb:9a:72:46:79:17:
         cb:c8:1c:7c:18:d7:ac:4e:2f:97:9a:e0:05:bc:22:5f:a5:1b:
         a0:17:72:d0:25:4c:d6:c5:77:d7:0e:4d:b0:8a:94:b4:85:d0:
         eb:5a:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:29 2024 by rpki-client on console-ams.rpki-client.org