Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa
File:                     323830333a626331303a3a2f33322d3332203d3e20323731383833.roa (raw, json)
Hash identifier:          bKtyRWRaQEc4bqilQZaC9PW7JewNMA5dw+EvNUEjOQY=
Subject key identifier:   E2:95:29:0E:2B:29:78:14:6F:67:09:FE:9A:59:FD:62:66:14:53:8F
Certificate issuer:       /CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
Certificate serial:       03D1C3A71FA5AACB75E19B44D0EF377A21EE3F17
Authority key identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa
Signing time:             Tue 05 Mar 2024 18:14:49 +0000
ROA not before:           Tue 05 Mar 2024 18:09:49 +0000
ROA not after:            Tue 04 Mar 2025 18:14:49 +0000
asID:                     271883
IP address blocks:        2803:bc10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d1:c3:a7:1f:a5:aa:cb:75:e1:9b:44:d0:ef:37:7a:21:ee:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
        Validity
            Not Before: Mar  5 18:09:49 2024 GMT
            Not After : Mar  4 18:14:49 2025 GMT
        Subject: CN=E295290E2B2978146F6709FE9A59FD626614538F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:f3:d9:95:33:95:46:e8:af:a5:9a:9d:f6:
                    86:47:b6:57:f1:de:a2:1f:be:4b:af:c2:e2:32:a0:
                    d6:82:17:89:99:4e:1c:17:7d:60:99:00:50:ed:f9:
                    2e:33:0f:fe:d4:21:10:1c:43:35:eb:51:fb:d1:3e:
                    c8:e4:7e:99:f6:99:bc:f9:7f:e5:a7:55:d1:ca:8f:
                    70:be:85:23:55:20:bb:c6:21:bb:43:f8:be:a2:33:
                    04:26:87:d3:57:3c:79:2e:12:6f:7e:9e:a5:3c:a6:
                    6b:dc:37:a9:b9:9f:cd:c2:81:87:55:8e:5a:c2:ee:
                    d5:df:b0:ca:91:dd:29:fe:ee:7b:67:24:ca:c2:ed:
                    3b:42:fc:13:63:cc:0b:0d:dd:c9:2d:e9:0f:fa:bc:
                    13:4f:35:04:8d:8b:0b:6e:29:3e:b3:88:3c:3b:c4:
                    67:7f:2b:d3:10:da:06:46:a9:cb:5f:22:bd:32:9c:
                    a5:d3:6f:30:a2:15:6c:c4:55:13:fe:33:95:51:46:
                    d9:16:ca:39:90:19:bc:42:bd:1d:7e:64:f0:f4:51:
                    49:3b:92:5e:f8:b8:4c:85:d6:91:46:20:7d:0c:f5:
                    28:1e:21:d7:12:39:46:45:a1:9f:49:eb:aa:b3:dd:
                    86:ff:06:3a:ef:2a:ab:e9:06:53:61:f7:7e:41:5e:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:29:0E:2B:29:78:14:6F:67:09:FE:9A:59:FD:62:66:14:53:8F
            X509v3 Authority Key Identifier:
                keyid:18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/323830333a626331303a3a2f33322d3332203d3e20323731383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:c8:11:ab:58:73:2a:a6:ae:27:13:6a:a3:34:8b:66:56:3e:
         cf:a5:f0:53:43:da:a5:6a:29:75:83:aa:7a:02:49:87:62:9f:
         d9:9c:da:49:58:53:24:e5:e8:83:7d:08:94:ea:63:2e:7f:bf:
         3f:d1:c9:d8:2f:91:4e:7d:56:e0:8d:bd:47:5a:6e:79:94:0f:
         b8:57:0a:90:dd:8d:f1:93:ee:13:ff:3e:e9:9a:08:ea:24:5a:
         35:20:40:f4:a4:d2:32:d8:48:dc:0a:13:62:71:a8:a0:fe:d1:
         de:11:26:e9:31:6c:fc:b2:98:b8:0c:43:13:96:e6:7c:0d:2e:
         53:8e:2d:e1:17:c3:c3:ef:85:6b:dc:28:4e:3d:2a:d9:be:96:
         84:cc:5c:51:50:83:d6:87:67:f1:4c:27:90:25:54:ee:d1:ef:
         fe:0d:74:38:2a:11:74:e6:35:05:63:05:b0:7b:c7:72:49:f7:
         a1:b7:3c:33:12:df:04:0f:e7:9c:d0:32:7b:9f:ef:fc:8e:34:
         1a:e6:1f:37:67:f5:34:54:e6:ed:13:f4:d1:6f:38:7e:ae:56:
         47:52:46:d7:89:d1:12:59:76:f6:36:ff:52:52:34:a0:cc:c3:
         82:af:28:11:95:f2:72:c4:a9:52:a5:d8:e1:64:78:68:e4:7d:
         2c:38:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:54:49 2024 by rpki-client on console-fra.rpki-client.org