Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa
File:                     323830333a613034303a3a2f33332d3333203d3e20323633373530.roa (raw, json)
Hash identifier:          Hs2bv1lTJT34aaEE9gz1Q+QAI4JWH+gOZvhu8H/B9Io=
Subject key identifier:   53:9D:B7:26:D2:C8:80:EF:F6:05:1A:0B:8E:41:F1:06:1C:7A:5A:2C
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       11A176B303FAE50198EFF8F43EE9B2A4B52C953C
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa
Signing time:             Tue 08 Oct 2024 13:30:00 +0000
ROA not before:           Tue 08 Oct 2024 13:25:00 +0000
ROA not after:            Tue 07 Oct 2025 13:30:00 +0000
asID:                     263750
IP address blocks:        2803:a040::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:76:b3:03:fa:e5:01:98:ef:f8:f4:3e:e9:b2:a4:b5:2c:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct  8 13:25:00 2024 GMT
            Not After : Oct  7 13:30:00 2025 GMT
        Subject: CN=539DB726D2C880EFF6051A0B8E41F1061C7A5A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:d0:b9:f6:f8:f6:e1:16:f9:e5:0e:79:b3:
                    dc:96:82:4b:d4:ef:da:a3:9d:66:75:89:cf:2f:06:
                    4c:75:78:ab:ec:c8:7c:46:5e:ac:d1:b9:f8:4f:85:
                    6f:30:a6:b4:f0:e4:d9:db:1e:05:3e:b6:11:ec:54:
                    37:84:2d:ad:0a:19:d9:c0:27:1a:81:39:05:8b:e4:
                    cf:c5:e2:ab:2b:ad:3f:16:22:2e:8c:04:a6:de:8f:
                    b7:77:d6:f4:55:74:1b:e4:54:09:29:25:4f:9c:26:
                    d6:14:f6:bc:1e:57:0f:20:7a:9b:c8:45:77:9d:ab:
                    85:93:54:48:91:f8:4a:d1:ee:c7:c7:c7:1a:da:07:
                    74:ec:9a:43:8a:90:72:d1:93:19:8e:c3:89:34:86:
                    3d:bd:4a:75:ec:4b:5b:ae:f1:8d:3f:ab:46:5e:5b:
                    d3:ef:2e:2b:42:d4:eb:2b:86:a3:2e:cb:6c:01:0e:
                    1d:64:ef:de:79:30:a3:2d:ac:d0:74:cf:a6:dd:92:
                    98:5d:8c:b9:f9:ac:c2:e7:41:6f:52:1c:65:07:91:
                    37:71:1a:03:22:ef:b9:e2:49:bf:e3:af:5d:ba:2f:
                    b5:82:58:c2:61:d6:84:61:e8:3a:bf:ec:9a:c9:b5:
                    48:31:d8:31:f6:0b:08:8e:a8:bd:aa:b5:1f:4c:f1:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:B7:26:D2:C8:80:EF:F6:05:1A:0B:8E:41:F1:06:1C:7A:5A:2C
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a3a2f33332d3333203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:50:78:0e:f1:0b:07:8c:c3:d4:1a:1a:91:1a:c7:96:e0:ff:
         32:1c:7c:09:bc:45:58:0f:bf:29:80:f5:16:1e:e8:55:a8:99:
         f9:83:dd:09:f2:66:4b:d1:20:08:da:d9:7b:86:21:6a:8c:7a:
         18:7e:2a:99:bd:11:4f:7b:28:1a:e8:b9:1e:63:0c:c7:78:9c:
         ca:5d:90:39:49:41:7e:bf:e6:94:18:53:71:84:77:22:67:6a:
         26:ac:f0:e4:37:fb:1a:92:b1:cc:9b:9d:98:19:c3:ca:b9:9d:
         71:67:4d:46:dd:1f:ee:6b:1b:03:3c:a3:6a:ba:01:41:ff:05:
         3a:6a:27:90:25:df:74:ff:0d:74:f6:b5:8e:7a:59:69:cb:f2:
         9f:07:0c:e7:ce:67:29:30:e6:e6:e3:7e:9c:0d:48:3e:96:4c:
         44:68:c7:86:ed:a6:de:c9:f0:c0:50:01:e5:7a:2a:d9:59:8f:
         29:17:43:b8:ee:14:65:02:69:e9:c3:a2:d7:c9:41:08:18:29:
         32:b1:6c:a4:81:b8:f4:eb:2c:25:15:3a:68:ad:33:bd:c9:61:
         d1:5c:eb:3e:85:8b:54:7e:0a:e5:44:d6:2c:2b:4e:b3:00:e3:
         68:c8:3d:4e:dd:f4:74:97:18:b2:f2:20:5c:71:e6:27:c8:d1:
         85:97:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:43:51 2024 by rpki-client on console-fra.rpki-client.org