Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203232383232.roa
File:                     323830333a393331303a3a2f33322d3438203d3e203232383232.roa (raw, json)
Hash identifier:          W4UvBzUnlk8FkU0JG00wTz97VkjZIvVuMmA1D3eO00c=
Subject key identifier:   A0:9E:EC:AB:B7:06:FD:4C:23:F4:D1:4C:6D:45:06:70:BD:E1:BF:24
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       5C3352496716845F75A95A4D67C2C3B91C3412FE
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203232383232.roa
Signing time:             Tue 05 Mar 2024 18:03:10 +0000
ROA not before:           Tue 05 Mar 2024 17:58:10 +0000
ROA not after:            Tue 04 Mar 2025 18:03:10 +0000
asID:                     22822
IP address blocks:        2803:9310::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:33:52:49:67:16:84:5f:75:a9:5a:4d:67:c2:c3:b9:1c:34:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:10 2024 GMT
            Not After : Mar  4 18:03:10 2025 GMT
        Subject: CN=A09EECABB706FD4C23F4D14C6D450670BDE1BF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:4d:1b:b9:62:46:5a:60:05:9a:9f:e6:75:
                    dd:32:27:26:94:6e:58:8b:0f:0b:e0:a0:c6:d1:f1:
                    a5:9a:ed:54:40:67:cf:22:cc:7a:f2:ef:9e:1b:4d:
                    b7:1e:5e:38:be:20:b6:29:c5:6d:53:81:07:73:f8:
                    84:60:3d:38:cf:e5:ec:af:8e:4f:a9:6c:24:ae:6a:
                    8a:8d:ba:da:ac:5c:e4:27:87:ab:24:4c:84:1f:81:
                    35:11:c0:2a:74:c0:68:fa:60:4d:7b:91:f6:22:85:
                    a8:22:d9:e5:85:6b:88:a9:f0:db:ca:88:e1:ef:6b:
                    d6:6b:44:80:c1:bd:79:da:d5:df:6e:a6:1c:77:e4:
                    c2:c5:20:6a:c4:37:a7:8a:9a:1d:2f:12:93:7a:36:
                    a9:92:ed:3a:1c:de:7f:72:8e:b6:df:cc:fe:ba:0f:
                    1d:fe:2a:a5:2c:30:e8:62:90:51:4b:b1:c0:28:0a:
                    9a:de:24:4c:99:73:40:e4:b5:34:3c:cb:f6:a8:17:
                    10:c9:86:76:a3:8d:a0:9f:49:2e:73:04:0a:0c:63:
                    74:5b:c4:10:31:ab:50:79:f7:db:0b:c5:00:0e:61:
                    59:bb:35:e2:09:d1:03:1b:27:39:9c:ba:79:cd:9d:
                    06:a5:c5:ee:52:5c:ab:96:d2:13:98:18:fb:88:9a:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:EC:AB:B7:06:FD:4C:23:F4:D1:4C:6D:45:06:70:BD:E1:BF:24
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:18:7d:3c:bb:d9:10:ab:84:ef:fc:4d:06:2d:42:75:8a:
         5b:01:f3:24:52:c2:aa:3c:03:a3:76:f4:17:e9:87:a0:c1:e0:
         5b:3a:a3:43:07:da:c7:c2:23:1b:dd:8c:56:96:0e:05:1a:c3:
         14:c4:7e:12:80:b2:c8:0c:6d:9f:eb:dc:e0:02:ce:5c:76:5c:
         be:77:d2:12:b1:b6:05:3b:eb:0d:6f:f3:c4:a6:0b:b6:3a:84:
         77:99:2c:f4:ec:05:d4:72:ae:b3:e4:08:d5:bd:59:71:bb:bd:
         3a:9b:20:7c:5c:be:53:26:ff:26:16:aa:19:aa:23:d0:45:7f:
         e2:dc:66:f9:c9:64:0c:84:1b:1e:84:20:29:4d:33:8f:ed:2d:
         fa:d3:ab:16:84:4e:8a:99:98:fd:a9:74:3d:c7:59:b5:72:9b:
         6f:0d:07:12:5c:bd:94:a5:c3:69:95:ab:52:8d:71:34:45:e1:
         36:23:11:99:85:6c:a3:61:e7:ae:2d:c0:3a:45:11:2e:c9:f2:
         91:9b:b2:09:7c:14:8b:82:eb:e7:f1:e4:be:01:a2:62:fb:cc:
         cd:e9:51:b3:73:62:df:dc:b8:c6:e1:3c:14:44:7f:38:8b:69:
         36:59:c8:90:bb:d5:3f:06:ca:45:bb:c5:05:00:5a:5b:da:57:
         6b:50:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org