Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa
File:                     323830333a646535303a3a2f33322d3332203d3e20323733323331.roa (raw, json)
Hash identifier:          /KpU/bEqeemhwUYMoNlII9w8iIQNqOmknO64F8SKpJ4=
Subject key identifier:   F7:64:AD:01:CF:6E:60:23:09:52:FB:72:AF:25:72:75:26:E9:82:11
Certificate issuer:       /CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A
Certificate serial:       1270E52CE6A391EEA8AF5269F97633E5129E44FE
Authority key identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa
Signing time:             Mon 22 Apr 2024 14:50:00 +0000
ROA not before:           Mon 22 Apr 2024 14:45:00 +0000
ROA not after:            Mon 21 Apr 2025 14:50:00 +0000
asID:                     273231
IP address blocks:        2803:de50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:70:e5:2c:e6:a3:91:ee:a8:af:52:69:f9:76:33:e5:12:9e:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A
        Validity
            Not Before: Apr 22 14:45:00 2024 GMT
            Not After : Apr 21 14:50:00 2025 GMT
        Subject: CN=F764AD01CF6E60230952FB72AF25727526E98211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:ec:52:30:ff:b4:d2:b6:e3:23:a0:27:b4:
                    90:41:75:57:00:dc:01:6b:01:49:77:d9:93:ea:ab:
                    36:3d:a0:e1:55:5a:45:57:8c:36:2e:13:95:0f:63:
                    2c:e0:51:b8:b9:f2:6c:ca:42:63:02:82:03:f1:2b:
                    8b:88:91:89:64:cb:45:c6:3f:17:64:41:e7:5d:ad:
                    79:39:be:5e:fd:68:da:ab:ca:14:11:84:cd:c7:f8:
                    89:e7:b1:f6:09:01:af:54:4e:1e:47:82:c6:3d:3e:
                    41:b1:3c:2f:2a:31:7d:b0:7a:dd:f0:13:2a:bc:00:
                    1f:93:67:a0:65:23:12:84:19:04:fd:50:30:04:38:
                    c7:a6:eb:63:92:b0:69:59:67:03:2a:53:1f:0c:11:
                    90:4a:82:d0:c3:a2:88:47:2c:b3:15:cb:c5:12:6b:
                    86:d2:1a:29:ae:8d:9b:bf:db:5a:aa:8a:ef:fa:80:
                    a9:ed:ad:b5:22:94:65:ef:64:3f:6e:53:ff:ea:36:
                    16:4e:49:b7:8a:25:34:7e:e0:cf:86:9e:0a:9f:07:
                    71:2b:5c:e8:b6:92:c6:a2:72:7a:38:7f:c5:c4:7b:
                    c6:8e:5b:2c:ce:04:25:3a:42:36:33:74:71:c6:94:
                    49:af:a7:66:85:73:28:70:1c:bc:29:57:34:ff:11:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:AD:01:CF:6E:60:23:09:52:FB:72:AF:25:72:75:26:E9:82:11
            X509v3 Authority Key Identifier:
                keyid:BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de50::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:64:d3:ff:87:17:ac:4c:e7:0d:b3:86:96:d0:80:9d:68:f5:
         aa:6b:de:53:c1:d1:60:f7:16:59:54:c2:31:0d:ba:a2:1c:1e:
         72:a1:0e:6b:a2:52:db:fd:11:90:37:f1:c0:37:60:ee:c4:8d:
         d7:7c:b2:27:2d:fb:43:8e:c2:23:c3:eb:e5:0e:73:0e:51:9d:
         71:2b:e0:4f:e8:1e:f1:96:ea:dc:93:d1:20:f9:18:d0:4c:e9:
         4e:ec:78:c4:73:af:2b:51:be:f8:b8:20:93:00:46:23:81:68:
         85:db:0d:8f:02:45:0a:8f:e1:ad:b0:f4:af:b1:42:6d:1b:56:
         a8:2b:5c:72:85:7a:a0:7d:fb:76:c6:96:df:71:0c:22:06:a5:
         6a:8f:d9:78:ff:01:ab:9f:54:cd:36:9a:e3:90:b6:c7:b9:c5:
         7f:21:30:10:26:10:bc:5e:42:e4:92:02:0a:2f:5b:9a:95:f3:
         5b:97:79:db:28:f0:5e:ad:b0:eb:b2:15:56:2c:e4:7a:31:5c:
         f7:33:5f:e5:20:4e:52:02:4c:0f:24:34:b4:a4:e6:73:64:90:
         96:da:5b:f8:38:69:29:7b:a8:2c:27:d9:db:8f:e0:e4:b8:bf:
         c5:a1:80:b3:45:f6:8c:64:a9:87:d6:86:d0:c9:ed:87:ca:0a:
         c4:8a:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:43 2024 by rpki-client on console-fra.rpki-client.org