Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203132393536.roa (raw, json)
Hash identifier:          5Z403KrAwU0I2+tYqJ0NFgre2ZHu5iNpWMTHZ12xdk4=
Subject key identifier:   31:D5:2E:D3:FE:55:F4:19:AC:AB:D9:54:EB:15:FB:ED:24:6A:D3:DE
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       1E4298F5A52D99C749DEA8623B07CBC182BCCC91
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa
Signing time:             Tue 05 Mar 2024 18:10:50 +0000
ROA not before:           Tue 05 Mar 2024 18:05:50 +0000
ROA not after:            Tue 04 Mar 2025 18:10:50 +0000
asID:                     12956
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:42:98:f5:a5:2d:99:c7:49:de:a8:62:3b:07:cb:c1:82:bc:cc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Mar  5 18:05:50 2024 GMT
            Not After : Mar  4 18:10:50 2025 GMT
        Subject: CN=31D52ED3FE55F419ACABD954EB15FBED246AD3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:41:a7:74:94:77:9b:b8:de:71:18:6e:16:
                    d0:ce:68:c3:07:ba:20:11:ed:d9:75:e8:5e:3d:3b:
                    9b:33:cf:86:e3:e9:63:1b:73:91:63:08:c0:22:f8:
                    fc:4f:2b:75:8c:e0:48:50:86:03:34:d3:56:b3:b3:
                    f0:ed:ab:67:11:f0:fe:7c:2e:99:c3:49:5a:8f:35:
                    d6:d8:46:9b:33:71:3c:f3:06:ea:c6:fa:fe:72:d4:
                    84:a6:48:dd:f4:86:69:60:51:72:c6:bc:5b:81:b4:
                    6f:97:ba:e8:fe:52:f0:a9:fb:fb:19:eb:2a:4a:49:
                    12:9f:37:e3:e8:05:3c:e1:d0:17:bd:59:27:47:84:
                    1b:0f:37:c0:7f:f7:e8:9b:a3:51:7c:d9:74:c4:cf:
                    49:6b:b7:63:de:5f:6b:14:08:ce:bf:47:13:5b:17:
                    c1:57:30:00:45:05:7a:9f:a4:ba:2b:dc:2f:5c:66:
                    48:7c:8d:ec:89:19:54:64:80:0b:9b:b0:8a:d6:72:
                    09:81:63:0d:b7:c5:f1:1a:ed:89:7f:b5:94:8b:1d:
                    1c:d9:6f:c4:fd:eb:d4:a6:17:e9:38:9c:35:f8:86:
                    05:41:12:d0:08:d0:99:32:45:92:73:d9:8f:66:4b:
                    d7:f2:14:37:90:0b:f0:43:2a:18:40:67:92:ca:18:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:2E:D3:FE:55:F4:19:AC:AB:D9:54:EB:15:FB:ED:24:6A:D3:DE
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:59:c4:48:ac:d3:e4:13:4c:3d:a3:ed:29:07:cf:a7:66:e7:
         85:dc:50:f5:c8:8c:af:c3:04:9e:2f:0a:27:0c:1c:72:01:f6:
         46:07:14:c7:79:62:e1:9e:f8:fe:03:b7:c5:34:2f:c5:31:47:
         37:de:57:dd:e6:46:16:2e:79:3f:f9:d2:f3:da:03:27:1a:68:
         f0:e4:1c:71:06:72:63:a0:57:09:1e:c7:5e:f2:b3:4f:07:f9:
         16:9a:a7:98:41:ff:fe:be:42:07:f2:9b:be:34:2d:b9:ce:21:
         48:3f:01:c4:90:75:a6:ae:b5:b1:9e:73:bd:80:5b:e4:b2:ae:
         88:d5:54:c5:75:cc:21:81:18:40:9a:6f:7b:c2:65:b0:9f:0a:
         ae:f5:bd:86:f3:92:29:14:7c:99:c1:05:a5:14:aa:d1:f9:22:
         4a:fc:ef:db:ee:b5:82:60:f9:74:cc:d0:a3:39:4e:cd:a4:cb:
         f1:48:ac:13:5e:fb:22:99:f9:ae:05:02:85:0a:fc:5c:28:31:
         66:e9:d8:7c:6a:81:78:e1:88:0f:ef:5c:d2:2a:83:14:c1:99:
         17:b6:d9:14:dc:66:fe:61:0e:81:8b:d4:bd:bd:26:6e:b0:40:
         d4:4e:42:c7:79:64:bb:1e:1f:59:0b:8c:dc:53:1a:8a:e5:1f:
         a0:e2:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:32:14 2024 by rpki-client on console-fra.rpki-client.org