Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa
File:                     323830333a316638303a3a2f33322d3332203d3e20323639373838.roa (raw, json)
Hash identifier:          YYjkPQU52zW+edmfY9if/LDTb5ZcF8ONUA33YAFcalI=
Subject key identifier:   27:45:6E:C9:DE:3F:20:66:BA:2B:12:D9:85:CC:19:47:60:E8:F4:BC
Certificate issuer:       /CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
Certificate serial:       50FBF2BA0F3B5CAE17C62ED4C7B0092F39FC8D55
Authority key identifier: 5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa
Signing time:             Tue 05 Mar 2024 18:22:50 +0000
ROA not before:           Tue 05 Mar 2024 18:17:50 +0000
ROA not after:            Tue 04 Mar 2025 18:22:50 +0000
asID:                     269788
IP address blocks:        2803:1f80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:f2:ba:0f:3b:5c:ae:17:c6:2e:d4:c7:b0:09:2f:39:fc:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
        Validity
            Not Before: Mar  5 18:17:50 2024 GMT
            Not After : Mar  4 18:22:50 2025 GMT
        Subject: CN=27456EC9DE3F2066BA2B12D985CC194760E8F4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:d2:e0:a5:10:51:9a:d0:15:53:1f:6e:43:
                    41:fe:8b:c5:f3:b8:e7:10:14:3c:19:ed:16:9f:e1:
                    a0:2b:a6:9c:a3:b0:f4:1d:cf:82:54:db:63:f0:49:
                    44:91:6e:5c:54:36:17:96:d2:c7:68:2a:ac:6a:b4:
                    97:75:e5:03:8f:c9:d4:be:ac:60:4c:2f:27:bc:b2:
                    12:c9:cd:0c:c1:97:88:f0:f7:b5:64:7c:5d:79:88:
                    7c:16:81:98:ad:0e:ed:4f:03:e5:09:1a:17:41:78:
                    9e:52:24:e7:f7:40:3e:6d:8d:fd:dd:f7:19:99:55:
                    91:84:0a:7d:90:68:8a:f6:ab:4d:9b:43:dd:45:8e:
                    02:f7:ca:17:d1:0c:e2:d7:c5:88:48:a2:6a:8f:d5:
                    7f:ef:93:39:95:06:ad:1a:25:1e:63:bd:5e:aa:d9:
                    51:6e:8e:37:b5:d2:9a:a7:b1:c2:b3:0a:8a:50:a0:
                    62:26:65:d6:60:5c:e2:7e:2f:2e:59:02:f9:33:cf:
                    01:eb:68:af:08:e3:4f:a1:9c:1b:07:2c:52:62:f0:
                    3f:d3:ab:1c:3e:d6:92:60:4f:a4:bc:b8:0e:53:7c:
                    d6:c8:47:39:5f:ff:e3:c7:5e:c4:60:52:e1:9c:97:
                    46:22:fd:75:6b:31:5f:7c:86:f3:27:66:b1:a1:c6:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:45:6E:C9:DE:3F:20:66:BA:2B:12:D9:85:CC:19:47:60:E8:F4:BC
            X509v3 Authority Key Identifier:
                keyid:5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:2f:c4:d5:a8:68:be:a1:b2:6d:2b:2b:64:8b:55:3a:39:
         3e:de:8d:5d:72:5e:2b:e7:4a:0e:1c:19:9f:3b:25:37:af:c8:
         29:ed:81:e2:50:05:e1:2d:91:06:24:c9:a9:8b:92:53:58:7b:
         ea:e6:73:48:ce:63:07:17:be:2f:8c:97:ff:1c:c1:a1:7c:72:
         e4:b0:1e:2f:fa:7a:42:8c:bc:86:07:3f:ec:a8:be:7e:9a:d7:
         de:b8:32:1e:da:cb:72:99:d0:7e:a3:04:0e:05:3f:30:b7:38:
         55:19:70:6b:b9:f8:6e:57:58:85:a8:51:96:87:1e:19:3f:ca:
         da:48:e8:23:85:c0:77:34:14:6e:d8:99:e5:83:6c:c1:db:fc:
         97:70:7d:ea:df:51:d0:c8:88:98:bc:58:4b:ed:98:64:90:e2:
         f2:c5:5e:b9:a4:09:aa:3f:5a:6c:46:8f:ab:30:66:05:18:09:
         d2:0e:5a:3a:99:08:59:32:5d:18:5f:3d:52:2c:35:b7:f0:f7:
         52:62:98:f0:e4:c2:f3:b3:d2:18:ef:40:3b:a4:49:07:b2:2c:
         d9:86:5b:ed:0e:03:08:ad:9f:5f:ad:aa:09:fc:c5:a5:7b:18:
         56:94:b8:02:d0:cb:72:dc:c0:ac:b7:5f:14:02:aa:70:f7:03:
         7d:41:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 20:27:13 2024 by rpki-client on console-fra.rpki-client.org