Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa
File:                     323830333a646631303a3a2f33322d3332203d3e20323731393232.roa (raw, json)
Hash identifier:          SMNYNgt1UkG+ODtcMxIdkP4Nij0yq4BxhaOsvbj5bZs=
Subject key identifier:   48:81:EC:B4:BB:29:1A:5A:E5:DF:32:45:BB:5D:A9:F0:C3:B8:E8:6A
Certificate issuer:       /CN=5E4C24352C2092D84F24710267624723A082F5C7
Certificate serial:       024C945187B9E86F674F69B1E608CFBFF4A7A949
Authority key identifier: 5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa
Signing time:             Tue 05 Mar 2024 17:43:11 +0000
ROA not before:           Tue 05 Mar 2024 17:38:11 +0000
ROA not after:            Tue 04 Mar 2025 17:43:11 +0000
asID:                     271922
IP address blocks:        2803:df10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4c:94:51:87:b9:e8:6f:67:4f:69:b1:e6:08:cf:bf:f4:a7:a9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E4C24352C2092D84F24710267624723A082F5C7
        Validity
            Not Before: Mar  5 17:38:11 2024 GMT
            Not After : Mar  4 17:43:11 2025 GMT
        Subject: CN=4881ECB4BB291A5AE5DF3245BB5DA9F0C3B8E86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:35:77:e0:88:60:58:93:8b:cd:88:42:69:
                    43:18:49:b0:80:58:07:a8:9b:a7:78:c1:85:5f:f0:
                    d8:fc:71:ed:b6:e3:5a:73:49:ec:ec:11:28:a4:cc:
                    2b:f4:80:80:2a:e1:9b:5d:2e:19:46:9e:a8:d6:c0:
                    9d:29:78:62:e9:10:e6:d3:c4:49:00:83:a0:17:53:
                    14:a4:55:52:3a:51:e3:c2:61:5c:34:30:9a:57:de:
                    ef:e0:c0:c1:58:6f:c6:52:ff:01:7f:f8:f2:6f:45:
                    46:d9:17:73:50:d0:ee:3f:64:24:cf:73:e1:f8:eb:
                    0a:ba:ac:52:a9:b4:ce:b7:9c:3e:fb:0e:e2:56:18:
                    84:b1:f6:11:35:e5:ed:b0:6d:81:48:95:75:01:69:
                    3b:f2:f1:ee:71:9a:ed:fd:73:40:1c:1e:e5:7f:6d:
                    09:0b:11:5f:c1:75:8e:d5:ec:69:ef:46:af:68:78:
                    f4:f1:3d:59:fb:00:f5:1a:ca:c3:6d:f0:9a:5f:db:
                    3c:95:5a:10:1f:4a:e5:d4:3b:83:bc:80:dc:df:39:
                    7e:4c:de:fa:83:8a:2f:17:ab:22:e2:a6:68:4a:e9:
                    63:31:d7:43:ad:c5:88:0d:ed:88:88:86:5b:bd:fb:
                    74:33:ba:06:5e:81:2a:a4:77:44:77:f2:31:8e:33:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:EC:B4:BB:29:1A:5A:E5:DF:32:45:BB:5D:A9:F0:C3:B8:E8:6A
            X509v3 Authority Key Identifier:
                keyid:5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/323830333a646631303a3a2f33322d3332203d3e20323731393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df10::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:ad:df:55:a9:fe:91:16:dd:29:b1:39:10:b9:cf:4e:11:
         ac:7e:f4:4e:69:3b:ce:d7:f8:67:48:dd:0e:1c:68:d5:0d:22:
         89:57:49:8e:3c:5a:28:ba:3e:ad:66:7e:dc:4b:1d:35:ae:5b:
         d9:cf:5a:d7:3e:e0:4a:e5:64:bf:03:0b:79:3b:0c:35:95:70:
         22:34:1d:cf:7d:11:0d:7f:17:43:c7:53:d6:b2:71:ad:7d:b8:
         5b:37:f2:7e:5b:f0:10:15:0e:21:a5:1e:ad:27:55:90:08:10:
         bd:16:96:05:b5:13:25:eb:38:38:21:65:54:23:6e:55:f4:3c:
         25:15:7c:6e:a7:37:25:4e:d6:07:f2:2b:45:be:ac:88:57:9c:
         66:32:ab:ed:80:f8:65:17:36:8f:7e:06:c6:15:b4:a9:f8:72:
         1d:bb:aa:fb:e2:98:fd:c6:e0:6c:d7:c0:47:f0:8e:df:f6:88:
         22:fd:24:4f:f6:04:a3:bc:0f:41:7e:81:c7:c8:30:42:f1:24:
         a7:96:8b:77:f1:10:8c:e6:6b:04:74:cd:6b:1d:b7:b0:e3:56:
         10:f9:a1:84:3f:7e:d1:d7:c2:09:7f:49:f4:63:64:67:1c:c0:
         c6:8b:2c:61:f2:30:18:29:73:13:d8:1f:15:67:a5:56:92:74:
         ac:09:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org