Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa
File:                     323830333a636631303a3a2f33322d3438203d3e20323732313139.roa (raw, json)
Hash identifier:          cP+K+fW91HnJr4xfM/Ncl7c2n6Zs8kyDl7QCvTcWWB8=
Subject key identifier:   1C:FE:E4:E0:60:32:7E:25:71:57:C0:3F:F6:54:CF:8F:84:B6:57:C7
Certificate issuer:       /CN=24E49374E540033D3850F3DEB6307B9396818D78
Certificate serial:       1D7FFE4EAA1C46A4FA811705E393CF2F6E5AF57B
Authority key identifier: 24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa
Signing time:             Wed 03 Apr 2024 13:35:00 +0000
ROA not before:           Wed 03 Apr 2024 13:30:00 +0000
ROA not after:            Wed 02 Apr 2025 13:35:00 +0000
asID:                     272119
IP address blocks:        2803:cf10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:fe:4e:aa:1c:46:a4:fa:81:17:05:e3:93:cf:2f:6e:5a:f5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E49374E540033D3850F3DEB6307B9396818D78
        Validity
            Not Before: Apr  3 13:30:00 2024 GMT
            Not After : Apr  2 13:35:00 2025 GMT
        Subject: CN=1CFEE4E060327E257157C03FF654CF8F84B657C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:06:b2:50:1e:1a:ba:02:06:92:f3:7b:ae:
                    5e:f9:e1:b6:f5:9c:fd:8c:7a:98:14:79:ec:a0:e4:
                    78:23:2f:fc:df:43:53:79:ad:0d:e2:67:7e:bc:74:
                    5c:da:06:e2:97:0c:ba:a7:f5:8f:ea:e4:c6:1c:95:
                    6b:b2:ce:bc:f6:8e:ff:da:54:00:b5:6e:7d:12:66:
                    04:ff:33:2b:f4:88:9d:9c:ff:99:1d:f9:03:81:42:
                    d2:3b:2a:ff:50:fa:b4:48:30:82:d1:e6:ca:41:dc:
                    48:81:97:4b:ee:67:67:2b:2f:39:f8:ad:df:7d:ee:
                    50:2d:8d:7c:60:c9:2e:36:66:38:0f:ef:cd:33:22:
                    68:41:21:1f:ed:b5:b8:43:c2:a9:44:08:aa:58:a6:
                    ef:27:03:b9:37:96:0b:65:a4:fd:38:83:d5:de:23:
                    b0:d0:dc:f3:81:77:0f:62:1b:7b:d9:f2:53:3a:e4:
                    4f:0f:8d:27:08:c0:b3:d5:74:6d:db:6e:a0:93:e6:
                    9e:52:8e:8f:09:8a:a9:75:55:e0:22:0a:8b:69:80:
                    b5:9c:4f:19:70:31:2c:de:e1:ea:c4:52:15:5f:15:
                    09:da:c8:05:4e:4c:d0:38:32:02:4f:37:8e:25:8e:
                    79:4d:f9:f0:11:32:d4:bb:c7:74:74:77:1d:90:d3:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FE:E4:E0:60:32:7E:25:71:57:C0:3F:F6:54:CF:8F:84:B6:57:C7
            X509v3 Authority Key Identifier:
                keyid:24:E4:93:74:E5:40:03:3D:38:50:F3:DE:B6:30:7B:93:96:81:8D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/24E49374E540033D3850F3DEB6307B9396818D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E49374E540033D3850F3DEB6307B9396818D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E22BB65B9A19ECE421C5C61C066DAC09116DA181FA1682C9B57C185F0DA7BC2/0/323830333a636631303a3a2f33322d3438203d3e20323732313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf10::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:c5:1f:09:0b:e2:ed:6e:16:13:8c:e6:a3:a4:2d:90:4d:
         6c:a8:ff:c7:4f:69:9f:15:80:c4:66:a2:ac:07:58:b1:ae:ec:
         28:45:cb:86:7a:ec:08:ef:b2:1b:3b:27:ee:59:5c:aa:6a:21:
         4b:a4:cc:4f:af:3b:d4:a3:1a:85:8b:9c:30:ca:12:41:99:78:
         78:32:d5:ef:0c:00:45:a9:93:e2:13:3f:b7:4b:4c:0d:80:ee:
         53:5c:9d:79:32:6a:f8:8c:76:a5:15:a0:bb:1c:5d:3a:46:cb:
         09:7f:a0:f8:f1:a0:5f:a0:7b:eb:05:a2:8f:1f:ac:a0:7e:3a:
         bd:1a:cc:d3:41:ad:5c:45:1d:cb:64:cf:d2:63:cd:85:08:6d:
         3c:82:71:97:bb:a1:cc:14:2d:96:69:33:16:d6:cd:13:ff:a0:
         62:60:6d:1a:78:04:ac:cc:47:6c:c1:36:ac:1a:31:c0:52:96:
         8e:f6:d0:cf:7f:b1:c9:1d:3a:06:dc:cd:d7:5d:37:f6:c2:60:
         22:bb:dc:0a:a2:4d:9a:00:4b:c9:02:a2:40:ca:07:17:57:ba:
         ce:91:c7:55:73:61:8b:27:0b:fb:b7:f1:5b:e2:d2:6a:2c:58:
         ed:fe:8c:f7:06:db:b3:7b:2c:5e:9a:74:62:0c:b1:65:24:aa:
         ac:8c:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org