Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa
File:                     323830333a366431303a3a2f33322d3438203d3e20323732303433.roa (raw, json)
Hash identifier:          k8dLFk8FVYpdQH929utZ2M/WQelFVYtlPjTf8u7tUoI=
Subject key identifier:   6B:62:6D:B3:A8:5E:66:33:43:AD:28:02:62:54:17:B8:2D:36:65:A8
Certificate issuer:       /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
Certificate serial:       7ED5879A78C3A127AD974302639E585D3FE89980
Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa
Signing time:             Tue 05 Mar 2024 18:17:54 +0000
ROA not before:           Tue 05 Mar 2024 18:12:54 +0000
ROA not after:            Tue 04 Mar 2025 18:17:54 +0000
asID:                     272043
IP address blocks:        2803:6d10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:87:9a:78:c3:a1:27:ad:97:43:02:63:9e:58:5d:3f:e8:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
        Validity
            Not Before: Mar  5 18:12:54 2024 GMT
            Not After : Mar  4 18:17:54 2025 GMT
        Subject: CN=6B626DB3A85E663343AD2802625417B82D3665A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:9d:5b:1c:37:ac:95:3c:f7:5c:fb:df:ba:
                    38:3b:c4:88:f4:3c:92:cb:46:71:a1:6f:4c:5b:73:
                    47:e7:d9:05:d4:32:b3:c4:63:3f:e2:fd:d1:25:ca:
                    e9:59:42:bf:d2:d1:40:00:cc:79:94:13:f1:de:bc:
                    6a:df:49:f6:2b:0f:41:22:1e:a0:a9:e3:06:63:11:
                    da:5f:a0:9c:2b:4b:81:28:c7:f4:04:e2:85:5f:b4:
                    c5:94:1d:75:95:af:00:e0:11:1a:9d:f2:ce:5d:50:
                    07:dc:58:8f:4d:a6:0f:63:f4:fc:dc:b4:67:25:dc:
                    05:ca:17:e4:f6:7f:b5:70:3d:d9:48:63:73:20:4a:
                    9d:f8:0e:9b:a7:fa:1e:56:8a:6d:d0:5c:3a:0f:57:
                    69:ea:5f:39:60:79:fc:75:4f:67:ce:a7:6a:ae:ce:
                    d8:80:64:e4:30:f2:40:d8:e6:e5:90:94:c4:12:a8:
                    6e:2f:e8:a8:20:ca:ad:82:80:34:1d:c8:ad:ea:74:
                    15:8e:a3:bc:91:fc:f4:77:38:5b:c3:b2:e1:d9:9d:
                    bc:99:d1:3e:bd:36:e6:1a:ee:5c:27:ca:f7:18:98:
                    37:33:d5:8d:de:ae:42:76:16:15:f0:ee:55:2c:2d:
                    41:b4:04:ec:ba:86:aa:01:87:b2:10:5e:e5:e6:21:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:6D:B3:A8:5E:66:33:43:AD:28:02:62:54:17:B8:2D:36:65:A8
            X509v3 Authority Key Identifier:
                keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/323830333a366431303a3a2f33322d3438203d3e20323732303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:df:99:b6:66:54:cc:88:a3:e6:48:56:47:29:61:65:3c:
         6a:24:11:ed:e2:fb:45:29:b1:23:d9:47:3c:53:de:d6:e4:71:
         e2:2a:63:10:ad:07:64:22:1d:6d:4f:7c:8c:d1:fe:f0:cb:aa:
         30:57:a7:01:09:3d:a4:e6:16:cf:a3:ac:11:66:56:20:ed:5b:
         ca:4c:c1:76:b4:4d:96:c2:5c:de:fd:28:59:ac:23:55:c3:c5:
         0f:52:cd:c4:3c:36:91:ac:94:0a:c8:17:69:20:b1:4c:48:a7:
         a3:e1:be:a6:3a:99:e9:0e:03:10:6c:21:28:98:38:4d:9a:2d:
         83:5f:e4:07:31:92:39:1c:c9:2b:47:8b:a4:c5:85:be:af:7d:
         f0:b8:ae:14:5d:50:c8:b4:af:67:91:9b:c2:2f:73:e0:21:9a:
         ab:da:17:51:35:b6:56:82:15:53:cc:50:72:30:4c:4c:aa:0b:
         17:c7:79:56:88:f5:02:3d:52:93:7b:99:bb:71:e2:97:2f:96:
         5f:a6:b0:5d:fb:b9:0e:e8:67:c8:b3:6e:e7:1c:34:11:e3:f4:
         f2:3a:94:28:2d:8b:73:3e:c3:a3:21:1b:da:72:b8:1c:83:41:
         f3:57:28:56:02:ce:1b:8c:82:af:e4:50:4d:51:5b:fb:a1:e3:
         41:c8:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org