Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa
File:                     323830333a623630303a3a2f33322d313234203d3e203237373531.roa (raw, json)
Hash identifier:          FZLudizS3/cZJHQYYspGw9xQ7wW5hlC6fCOgjJDxlCk=
Subject key identifier:   F0:71:E4:38:0F:07:D9:50:49:69:60:DB:61:94:61:C1:66:A0:76:5C
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       4A09EB697E1E844760BCC2EA8E3BCD074E8CB7EC
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa
Signing time:             Mon 28 Oct 2024 16:05:01 +0000
ROA not before:           Mon 28 Oct 2024 16:00:01 +0000
ROA not after:            Mon 27 Oct 2025 16:05:01 +0000
asID:                     27751
IP address blocks:        2803:b600::/32 maxlen: 124

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:09:eb:69:7e:1e:84:47:60:bc:c2:ea:8e:3b:cd:07:4e:8c:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Oct 28 16:00:01 2024 GMT
            Not After : Oct 27 16:05:01 2025 GMT
        Subject: CN=F071E4380F07D950496960DB619461C166A0765C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:75:77:4c:f9:43:05:2a:f6:ff:25:e8:98:
                    8a:73:ac:bb:d5:4a:40:e4:a1:da:91:0c:ab:98:c6:
                    0f:5d:ac:a7:87:ee:b8:8b:6b:20:15:8f:3b:53:6f:
                    cb:b6:46:f7:08:03:54:60:3c:c8:8b:92:c1:41:23:
                    d1:38:1a:ce:6a:fb:cc:cf:0e:59:a4:e3:de:0e:8b:
                    1d:fd:28:3e:7f:b6:89:dc:03:ea:6a:7a:d3:7b:61:
                    1d:a4:ba:b1:57:21:76:8c:f0:cb:fc:64:98:5c:7c:
                    ca:0f:ad:47:b0:77:a8:76:b9:00:b7:a7:7c:1a:4e:
                    a2:84:e5:80:54:b9:c1:01:6b:96:2a:9f:38:17:92:
                    10:8e:bb:fb:c0:7e:fe:24:5a:b8:47:31:34:ff:2f:
                    9f:39:56:53:f4:9f:ed:8e:bc:d7:50:82:1b:79:3e:
                    da:e3:87:64:d2:22:b3:2c:fd:a0:4e:47:d7:86:aa:
                    22:21:61:2a:06:91:41:30:61:57:94:5b:0a:98:10:
                    ce:37:a6:cc:e4:5f:f3:c0:16:c3:65:2e:0e:c8:cd:
                    bc:51:6c:ac:1f:a9:e1:c8:f2:53:a1:17:84:72:b0:
                    df:1a:d4:63:4c:7b:6c:dd:f7:fd:f2:f9:c9:d4:e2:
                    63:7a:d2:a3:3d:d0:8b:92:b2:55:32:90:0a:be:b8:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:71:E4:38:0F:07:D9:50:49:69:60:DB:61:94:61:C1:66:A0:76:5C
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/323830333a623630303a3a2f33322d313234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b600::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:d8:8e:47:c8:b7:8a:e8:6c:8b:e0:0e:c3:40:28:f3:99:
         e4:11:50:7a:23:4f:6d:9d:3a:16:3a:ed:7b:f1:af:95:9f:07:
         aa:63:07:1b:b0:b3:3f:56:7b:eb:dd:27:61:45:38:8e:74:cb:
         fd:07:74:e3:66:94:20:ef:00:5e:8e:df:86:b4:31:db:b2:f5:
         19:b0:a9:df:42:83:db:c2:2c:98:ae:67:f7:46:72:90:12:9c:
         1f:cf:b6:50:18:ff:5b:e7:d8:11:47:94:bf:40:25:9e:fa:25:
         5c:96:c8:64:bc:be:db:8e:16:61:32:b2:4f:7f:e5:d3:37:04:
         a4:78:d4:27:47:a8:82:d7:eb:ad:1c:9f:26:a7:6a:e2:32:f0:
         09:c8:bf:12:d7:23:2c:97:45:dc:b2:1e:78:e0:4c:5a:b7:92:
         1a:ab:3f:4e:7b:60:8b:c2:8c:6d:76:ef:81:7d:d7:5a:50:a9:
         25:4e:29:0f:20:cb:4e:ec:2f:15:e2:7c:46:26:12:df:99:b5:
         9f:d9:aa:06:a1:9a:3d:36:1b:f2:e4:a8:fa:8e:00:92:8e:0b:
         04:42:99:3d:5c:d1:ff:79:45:27:b7:88:7a:38:66:04:aa:a5:
         64:d4:d1:03:fe:8f:45:50:c7:d9:33:31:de:e4:35:dd:7c:9a:
         11:66:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org