Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa
File:                     323830333a323735303a3a2f33322d3438203d3e20323733393236.roa (raw, json)
Hash identifier:          2tJ79QLtZ/5OGsu5ViRxljVMZUABDI55XKxHpVmM/Ac=
Subject key identifier:   16:13:C3:B4:A4:CC:3F:E8:0F:C1:0B:FC:55:F5:A4:B8:93:0B:CA:9A
Certificate issuer:       /CN=03018AF635561448E473E5A53283475675551075
Certificate serial:       49E78F304A57E400727D1432D89C30D7C3702B6F
Authority key identifier: 03:01:8A:F6:35:56:14:48:E4:73:E5:A5:32:83:47:56:75:55:10:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa
Signing time:             Thu 31 Oct 2024 18:15:00 +0000
ROA not before:           Thu 31 Oct 2024 18:10:00 +0000
ROA not after:            Thu 30 Oct 2025 18:15:00 +0000
asID:                     273926
IP address blocks:        2803:2750::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.crl
                          rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e7:8f:30:4a:57:e4:00:72:7d:14:32:d8:9c:30:d7:c3:70:2b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03018AF635561448E473E5A53283475675551075
        Validity
            Not Before: Oct 31 18:10:00 2024 GMT
            Not After : Oct 30 18:15:00 2025 GMT
        Subject: CN=1613C3B4A4CC3FE80FC10BFC55F5A4B8930BCA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:8c:69:60:e3:02:13:73:26:b9:39:59:c4:
                    0b:36:89:6a:4f:0d:a6:ca:7f:56:0e:41:9b:7f:3c:
                    7d:68:1d:62:d4:5e:d0:95:d6:3d:c8:51:3d:11:01:
                    9d:14:d8:0e:d1:36:6b:d9:e1:9f:bb:9e:48:c8:04:
                    3e:bf:08:32:01:8f:93:33:a1:f2:5b:20:5c:4c:e5:
                    a0:be:86:c5:09:e7:76:f4:30:97:b5:19:19:1e:d3:
                    e1:97:02:f6:40:e0:9a:39:17:e8:e6:00:30:13:74:
                    d5:0a:60:da:3e:7b:cc:cf:ca:74:76:ad:cb:55:39:
                    fd:e2:1c:a8:25:5e:b8:da:ad:0a:c2:95:89:5e:8a:
                    ce:0b:3f:32:0a:2e:c9:b0:bf:e2:3d:53:54:d2:14:
                    00:8f:15:ec:bc:82:0e:ef:a9:5e:71:bf:54:41:e2:
                    87:30:f7:43:61:19:28:53:c8:7d:5f:71:b7:d0:fb:
                    3a:5f:b9:69:6e:19:fc:c3:01:36:13:dc:6a:00:e6:
                    a3:83:3f:83:24:dc:d2:d0:33:7a:07:d9:76:ee:45:
                    95:c6:98:fe:93:2d:2a:fc:e9:7b:10:71:d3:63:76:
                    e8:90:55:9a:83:00:47:08:98:c5:08:6f:b2:80:c6:
                    84:36:17:96:6b:fd:bd:3a:53:1d:c2:69:4a:1e:23:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:C3:B4:A4:CC:3F:E8:0F:C1:0B:FC:55:F5:A4:B8:93:0B:CA:9A
            X509v3 Authority Key Identifier:
                keyid:03:01:8A:F6:35:56:14:48:E4:73:E5:A5:32:83:47:56:75:55:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/03018AF635561448E473E5A53283475675551075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03018AF635561448E473E5A53283475675551075.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/198D85C00653D4283836EBC0B4471DABCEFF7308C625D027D6429A2AF5E17A9A/0/323830333a323735303a3a2f33322d3438203d3e20323733393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2750::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:fb:e2:45:f1:37:e8:65:36:10:97:ec:81:43:d2:5f:e3:b4:
         96:82:87:fa:8a:af:72:b8:64:a9:e2:5c:92:84:9b:f0:95:46:
         3b:fe:ce:d3:b8:0c:6d:60:d9:70:43:ce:de:72:a9:3c:f1:7a:
         a9:48:f8:46:c7:d5:41:0b:2f:c5:08:78:ee:ec:b2:7e:40:93:
         02:2e:19:44:88:37:2a:92:70:9e:03:76:07:e8:63:37:79:f7:
         cd:39:de:2e:52:bc:0e:8d:a7:37:d4:3a:9d:40:9e:40:1f:0a:
         f9:58:d9:2a:99:3d:e9:53:6f:87:e4:a5:63:40:44:b4:13:65:
         53:71:8e:86:49:f0:ee:2f:8b:81:52:e9:1b:b5:a8:89:67:79:
         91:94:3b:30:88:70:f1:4a:c8:b5:28:e2:53:90:1b:c1:5e:b2:
         85:91:3a:5c:5d:89:3d:bd:e4:96:c3:9c:66:25:14:f8:26:13:
         0e:74:35:78:1c:c6:d0:cd:a3:43:91:24:ca:06:3d:9a:ab:5c:
         d1:e3:d8:09:69:71:4b:e9:09:cc:ea:bf:cc:09:91:4e:28:de:
         19:cc:0b:ad:29:fd:e6:41:ad:a3:5a:22:18:af:6d:2d:0f:d8:
         c2:48:16:95:48:71:63:97:e1:65:61:93:18:08:ca:7c:1b:03:
         0d:54:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org