Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa
File:                     323830333a353135303a3a2f33322d3332203d3e20323733383235.roa (raw, json)
Hash identifier:          kkoixweqeaoqcvgOZt5JrQRaCqIKNv/Q5EF6MEmoYNI=
Subject key identifier:   4F:1C:54:E1:12:2C:EE:C9:67:5D:2D:47:FD:D8:F1:A5:5B:17:38:2C
Certificate issuer:       /CN=45C93445C2DABCED4ADB703CA46669354722F471
Certificate serial:       7970D1847F50DC3BFDC56B3BAA437031181BF537
Authority key identifier: 45:C9:34:45:C2:DA:BC:ED:4A:DB:70:3C:A4:66:69:35:47:22:F4:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45C93445C2DABCED4ADB703CA46669354722F471.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa
Signing time:             Thu 09 May 2024 23:10:00 +0000
ROA not before:           Thu 09 May 2024 23:05:00 +0000
ROA not after:            Thu 08 May 2025 23:10:00 +0000
asID:                     273825
IP address blocks:        2803:5150::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/45C93445C2DABCED4ADB703CA46669354722F471.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/45C93445C2DABCED4ADB703CA46669354722F471.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45C93445C2DABCED4ADB703CA46669354722F471.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:d1:84:7f:50:dc:3b:fd:c5:6b:3b:aa:43:70:31:18:1b:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C93445C2DABCED4ADB703CA46669354722F471
        Validity
            Not Before: May  9 23:05:00 2024 GMT
            Not After : May  8 23:10:00 2025 GMT
        Subject: CN=4F1C54E1122CEEC9675D2D47FDD8F1A55B17382C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:c7:b8:3a:a8:4f:f4:09:8e:58:ad:96:b7:
                    01:9f:c6:48:d7:50:9a:14:7b:63:18:8e:bb:d9:9e:
                    1c:fa:f0:de:44:e8:6b:38:e0:97:95:a2:22:14:63:
                    2f:d3:13:e7:99:32:b7:31:4d:8a:28:5d:f1:cc:a8:
                    d1:bd:11:cb:b8:08:53:b4:91:69:21:f9:41:53:03:
                    6c:48:ac:ee:c6:6a:3f:64:60:68:ca:13:30:f4:53:
                    ab:92:b8:e2:79:36:7d:05:16:c9:8d:3d:45:f1:d1:
                    31:a4:51:bb:0e:f2:3b:5f:f6:10:1c:0e:d6:fb:8f:
                    2a:4a:2b:0c:93:84:82:4f:72:ff:9e:1d:03:fe:d3:
                    a1:67:29:89:9b:8f:12:6b:1a:63:da:75:92:54:5c:
                    e1:0b:b5:a3:5b:a5:f1:cb:25:16:cf:9f:ce:a0:c1:
                    f4:96:58:87:6e:6a:cf:00:c2:c9:a7:6c:26:4e:d4:
                    f8:e1:74:64:63:10:d6:32:5b:69:88:77:85:61:aa:
                    68:66:48:0d:08:58:be:59:8b:23:1f:61:99:93:57:
                    0d:76:65:50:ea:9c:c4:40:0b:af:e4:1b:76:c5:57:
                    cc:d0:0e:44:05:56:dc:00:c5:51:9c:b1:9a:ed:25:
                    35:5d:76:c2:09:14:4f:fd:32:30:7d:a9:c7:ca:e8:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1C:54:E1:12:2C:EE:C9:67:5D:2D:47:FD:D8:F1:A5:5B:17:38:2C
            X509v3 Authority Key Identifier:
                keyid:45:C9:34:45:C2:DA:BC:ED:4A:DB:70:3C:A4:66:69:35:47:22:F4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/45C93445C2DABCED4ADB703CA46669354722F471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45C93445C2DABCED4ADB703CA46669354722F471.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5150::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:62:d0:e2:3d:da:6d:4c:48:e3:27:26:fe:ff:cf:d8:42:e6:
         12:15:9a:65:75:df:d6:e4:e1:07:a1:92:8e:a6:d1:f6:79:0a:
         d8:db:61:c0:16:2e:aa:94:32:0f:13:8f:6e:2a:6d:60:5b:91:
         2f:24:9a:0f:64:68:59:06:36:0d:1d:33:64:c1:31:56:90:a6:
         59:bc:d1:d5:82:69:f4:2e:0e:12:c6:0a:c5:0f:5f:1d:50:03:
         ee:43:8f:73:6f:e6:72:d0:e6:ec:1a:b9:a8:8a:2a:3d:e1:90:
         e8:98:54:0e:95:5e:18:cb:cf:bf:7b:c2:c5:e2:49:df:93:dd:
         09:3c:23:f4:9d:b6:96:af:cd:97:d4:d4:27:3a:c3:02:1e:09:
         85:07:e2:4b:9c:95:00:0f:95:d7:7d:14:9f:c4:4a:70:0a:ea:
         84:b1:87:4b:0c:1f:a4:90:f5:66:78:d5:9e:4f:4a:09:ed:1c:
         f8:3c:e5:6f:7a:0c:90:c5:b9:9a:e2:33:8b:41:86:0a:ff:b6:
         3e:44:ae:65:cd:1c:d6:b1:e3:78:63:30:86:a5:7d:36:c6:38:
         8b:d4:84:1e:03:6e:59:0c:04:ec:81:47:69:76:cc:8d:6d:16:
         a1:1d:db:46:e9:13:31:5a:70:17:9d:c9:45:3b:b7:a5:7e:06:
         a1:74:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org