Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          OBWia7y+SjYt4dCFMprMoz8p818A91L5ItEKQ7BhJCY=
Subject key identifier:   45:4E:2B:89:B2:AA:3A:A4:8D:28:1C:1B:5C:A2:20:3A:C9:07:6B:43
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       33F338C39A515131144DA19A64F7C70195C3EB8E
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:50 +0000
ROA not before:           Tue 05 Mar 2024 18:05:50 +0000
ROA not after:            Tue 04 Mar 2025 18:10:50 +0000
asID:                     27947
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f3:38:c3:9a:51:51:31:14:4d:a1:9a:64:f7:c7:01:95:c3:eb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Mar  5 18:05:50 2024 GMT
            Not After : Mar  4 18:10:50 2025 GMT
        Subject: CN=454E2B89B2AA3AA48D281C1B5CA2203AC9076B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:55:d9:15:11:86:40:18:14:c2:4b:06:06:
                    03:ee:65:ee:80:3f:7e:ec:9e:39:5f:7c:c5:2c:87:
                    c0:2d:66:0d:7e:ed:79:3d:71:57:8f:83:9b:98:70:
                    d8:30:42:61:60:94:83:82:02:ce:b3:5c:a7:a7:32:
                    d7:ba:32:5f:7f:f5:31:68:97:df:ce:e4:6b:70:6f:
                    2a:ed:ff:3c:a4:4a:66:db:25:b1:6b:ac:34:a3:af:
                    3b:50:03:05:3d:70:2c:19:22:46:90:89:c4:7d:20:
                    25:a9:be:8a:63:af:13:c0:84:0a:12:82:02:39:21:
                    f8:6e:a0:d6:11:d3:7d:b9:17:f4:6a:cd:53:79:88:
                    54:9e:d1:4d:6a:ad:1a:6b:10:2b:99:12:4b:3c:6e:
                    4b:33:3d:91:a8:4f:49:1e:7c:a5:dc:95:e4:44:f2:
                    44:ee:de:bb:e1:5c:6f:3a:66:8f:f3:34:96:1f:54:
                    8b:9a:87:95:97:83:f9:c7:6a:89:79:05:80:5e:fa:
                    21:77:34:45:b5:47:be:1c:be:43:8c:79:08:c3:57:
                    8c:ca:b9:04:03:9e:88:61:9a:79:9e:2c:b9:8d:f1:
                    51:f0:f5:e9:39:6e:8d:49:92:d3:b9:f4:90:ff:85:
                    51:4f:ac:36:2c:00:e1:8b:53:05:48:57:5f:0e:bd:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4E:2B:89:B2:AA:3A:A4:8D:28:1C:1B:5C:A2:20:3A:C9:07:6B:43
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:1a:99:cf:90:7f:b9:61:32:72:06:6a:27:5d:e0:63:46:
         d0:96:70:41:d0:20:cb:85:f3:f7:36:2c:96:b7:ea:6d:a2:10:
         7f:f3:cc:17:2d:7a:ab:3c:60:db:91:d8:1c:18:8a:cc:f2:03:
         92:46:d8:1b:51:89:54:d6:f7:74:ab:ef:57:3a:a6:08:49:8e:
         f2:fa:9b:f0:bf:51:22:9b:6b:1d:27:88:ae:2f:0c:94:b9:ac:
         c6:52:5a:43:5f:69:04:41:cf:11:1f:15:73:8b:ac:0f:15:09:
         ed:bf:8a:3b:1b:e1:98:2b:db:02:8e:9b:89:22:ce:f0:37:52:
         6b:ac:65:30:04:2c:b1:ab:c0:17:2c:0d:24:12:a1:4c:da:cc:
         93:d0:20:bd:1e:09:ba:f1:42:52:6f:25:13:26:ba:68:ef:0f:
         5d:e0:94:85:0f:ef:da:dd:cc:2d:28:e9:e3:2e:e5:af:d3:fd:
         0d:e1:d6:9d:38:86:c6:f2:9e:60:e4:84:0d:2a:9a:1c:82:a1:
         8d:9c:ba:ce:1c:1e:ab:7c:8b:b8:20:db:4f:76:db:28:9c:fd:
         cf:e8:30:20:69:fe:b4:77:18:59:c0:a2:4a:3e:4c:53:50:bf:
         50:7a:d6:28:78:e5:b7:48:1a:45:dc:4f:17:39:1e:4a:3c:e4:
         47:de:f9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:56 2024 by rpki-client on console-fra.rpki-client.org