Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
File:                     323830333a326265303a3a2f33322d3438203d3e20323730303833.roa (raw, json)
Hash identifier:          0sXLVfvmDAZKL5+DKoxX92253MPN6JcTgTuAcbInE1g=
Subject key identifier:   75:B7:12:3F:EB:E7:F2:62:3F:D3:B0:C1:63:25:98:D6:01:7B:55:7D
Certificate issuer:       /CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
Certificate serial:       29D3490584C273357F96D06C0ED38DC34F4675CC
Authority key identifier: 80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
Signing time:             Tue 05 Mar 2024 17:47:34 +0000
ROA not before:           Tue 05 Mar 2024 17:42:34 +0000
ROA not after:            Tue 04 Mar 2025 17:47:34 +0000
asID:                     270083
IP address blocks:        2803:2be0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d3:49:05:84:c2:73:35:7f:96:d0:6c:0e:d3:8d:c3:4f:46:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
        Validity
            Not Before: Mar  5 17:42:34 2024 GMT
            Not After : Mar  4 17:47:34 2025 GMT
        Subject: CN=75B7123FEBE7F2623FD3B0C1632598D6017B557D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:4f:3f:fe:5e:14:22:7a:b8:ff:91:cc:9e:
                    3a:f2:08:c5:7e:a4:48:0f:7e:d9:36:17:14:da:e5:
                    ef:65:e3:48:ea:d7:8b:cf:5c:4c:b3:19:0e:86:a1:
                    d1:41:ca:1c:b6:74:e6:00:55:4d:7d:a7:94:7e:6a:
                    ff:e8:fa:8a:7a:c5:0e:a2:7e:35:40:d1:54:fa:4e:
                    a8:b7:6d:05:84:d1:c2:2a:67:74:7e:ab:a3:a1:5e:
                    93:66:01:fc:35:b5:bd:0f:5f:0e:6e:36:68:b4:1e:
                    6d:88:d4:f1:af:35:6f:38:a4:3c:f5:01:b7:78:26:
                    63:04:db:26:75:85:75:83:84:5a:61:94:64:81:f4:
                    16:07:24:ac:0a:84:f6:ee:92:b3:6e:10:26:a5:20:
                    23:eb:a2:b1:82:89:78:30:e6:6b:64:16:62:68:8d:
                    6c:14:dd:1e:ca:2c:46:03:4d:97:d7:1e:4b:bf:f5:
                    ad:5a:19:73:18:41:6b:01:c0:6b:d8:18:e9:73:ac:
                    d3:6c:e4:a1:7d:6c:c6:d8:cb:f1:0e:cc:5f:68:37:
                    72:f3:23:2c:c3:56:04:73:a3:a6:1e:2f:b8:bb:eb:
                    99:97:6f:df:ab:f7:1f:74:32:6e:9d:b9:d9:db:1c:
                    47:41:b7:67:92:b3:61:9f:72:32:2d:b9:9f:0e:30:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:12:3F:EB:E7:F2:62:3F:D3:B0:C1:63:25:98:D6:01:7B:55:7D
            X509v3 Authority Key Identifier:
                keyid:80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:90:1e:cc:70:60:9d:ad:e7:65:36:a7:62:d2:3e:1b:2f:17:
         19:38:0e:79:51:7a:1e:40:d3:45:9b:32:df:e0:1b:a7:06:b8:
         a1:17:04:9a:34:46:8d:a6:5a:fc:50:fa:d5:1f:d3:e8:e6:5b:
         fb:01:27:ad:39:4a:b6:b3:ca:c3:be:fc:84:a2:99:11:0e:b8:
         35:40:02:55:40:09:1b:49:d6:ff:f1:b7:23:9d:d1:3e:3d:7b:
         35:2b:1a:0d:d1:5b:ae:f9:4b:af:f4:1a:a7:44:66:5f:df:22:
         3d:3b:7b:fb:a7:22:f6:9b:55:65:83:22:85:40:3a:c6:97:30:
         48:7e:58:06:97:ea:19:74:bc:8c:c9:11:1e:90:8c:0f:07:08:
         21:48:4e:61:93:d9:a2:1c:ce:a3:94:ec:64:34:5a:31:55:90:
         e2:a5:5a:82:a0:b0:42:8b:85:19:b6:05:5c:3d:d3:0a:f6:90:
         15:c8:95:70:2e:e7:66:58:fd:10:e8:67:89:86:e3:5c:0a:af:
         9d:89:27:77:a5:a9:0a:12:79:17:4d:70:8b:1a:ec:de:57:10:
         bd:ed:fa:61:5f:60:27:24:c9:7d:40:90:9c:4d:10:4a:7f:2a:
         36:a5:f1:55:b7:14:9a:0d:e1:ec:e1:f9:2f:1a:6e:87:22:9c:
         9f:af:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org