Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203237383535.roa (raw, json)
Hash identifier:          7DOZQr24G7e0unwF1vzgDOUQztBisokbqBswRiQdx/o=
Subject key identifier:   41:2D:F0:38:B7:71:95:3D:46:91:9C:D4:6B:55:0B:06:98:CA:88:3D
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       18058E5E6BF4CBAB2BA8CA967C0DED1FDB9B4B0B
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa
Signing time:             Tue 05 Mar 2024 18:10:51 +0000
ROA not before:           Tue 05 Mar 2024 18:05:51 +0000
ROA not after:            Tue 04 Mar 2025 18:10:51 +0000
asID:                     27855
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:05:8e:5e:6b:f4:cb:ab:2b:a8:ca:96:7c:0d:ed:1f:db:9b:4b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Mar  5 18:05:51 2024 GMT
            Not After : Mar  4 18:10:51 2025 GMT
        Subject: CN=412DF038B771953D46919CD46B550B0698CA883D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:77:ae:84:9c:51:00:ce:7a:f2:60:41:8d:
                    a6:09:8e:cb:56:05:de:a7:22:5e:7f:00:c6:0c:47:
                    9e:90:cc:16:42:f0:3e:fd:f8:ea:9e:00:3d:64:49:
                    b3:11:38:fc:61:cd:6d:1c:83:4c:4b:d2:ad:8f:34:
                    96:5a:8e:a8:43:9c:64:85:18:9d:35:ee:c9:75:4b:
                    e2:b7:67:15:8f:2f:b9:39:76:00:c9:6c:18:77:54:
                    cc:cd:08:15:10:40:b5:da:02:f7:4d:e8:f6:93:b5:
                    7d:83:e3:93:06:33:f6:52:9d:4d:0b:f5:17:71:e1:
                    f0:c9:66:fe:fa:00:05:4f:6d:9f:9a:91:0b:67:80:
                    ee:c7:d4:21:33:83:8f:65:b9:78:ff:61:4b:9a:1d:
                    c8:bf:d2:f3:ca:d7:80:42:86:e8:ee:d5:73:01:eb:
                    1f:de:ae:3f:38:0a:b8:bd:12:fb:48:4e:ae:45:8b:
                    02:dc:fd:02:98:d9:f8:a3:e4:c6:f3:9b:18:f1:00:
                    59:73:fd:7d:55:4a:df:7a:dd:58:78:93:30:0c:14:
                    ba:f5:55:c8:9b:f0:ab:99:28:88:55:67:cf:cf:3c:
                    6c:18:cb:4a:f2:b4:ae:af:85:1a:d8:0a:09:d5:ce:
                    f2:2b:bd:03:c0:31:d2:3b:eb:4e:0a:ae:7b:24:e1:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:F0:38:B7:71:95:3D:46:91:9C:D4:6B:55:0B:06:98:CA:88:3D
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:83:ae:7f:ef:3b:5e:3b:9d:5b:a4:76:62:e2:3c:51:39:
         c7:0b:07:c9:c5:01:90:07:8d:10:de:ba:75:56:0a:cf:e8:2e:
         69:02:eb:a8:9b:dc:14:15:fa:40:fb:7f:cd:b5:34:95:4e:98:
         c0:db:b4:3f:0b:d0:8c:13:1a:38:d1:50:b7:71:d7:7c:ec:83:
         a8:f8:97:90:0a:c4:ab:f3:de:33:8e:25:da:cb:6f:10:b3:e7:
         a6:42:e8:84:44:20:87:23:6f:1a:a1:92:89:00:34:47:27:58:
         16:9f:76:cc:75:3d:cf:62:97:c7:a0:f2:2a:10:1b:5b:9e:43:
         45:9e:8e:d6:ca:db:28:aa:70:7c:7d:6d:9d:32:11:a0:4f:05:
         06:ac:29:52:bb:33:be:50:dd:08:cc:7c:2e:a2:fa:46:8b:e3:
         53:fd:bc:b1:bc:99:bf:49:6a:26:78:1d:2c:f7:51:48:1f:ab:
         73:ee:d5:b6:07:56:de:8a:6c:16:8f:e3:c3:b4:90:e7:cd:62:
         34:4e:55:6a:05:1c:4d:e7:49:0f:be:37:b2:33:5b:35:cd:bb:
         90:ca:5e:66:33:f1:ab:c7:6a:b2:e7:82:23:b0:94:cf:8a:ca:
         c4:85:73:52:0a:ab:aa:d0:bb:2f:f6:8f:99:05:0a:95:e5:a1:
         d8:1f:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:56 2024 by rpki-client on console-fra.rpki-client.org