Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa
File:                     323830333a633238303a3a2f33322d3438203d3e20323635373735.roa (raw, json)
Hash identifier:          bd9qLB8pm6jAlwknpYb2vrOvXKphDtb/huz2daFCFK4=
Subject key identifier:   50:A1:F3:E7:76:AB:27:65:A8:BB:99:52:73:7D:AD:F5:62:E1:DE:08
Certificate issuer:       /CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
Certificate serial:       35EBF9FAC6A7990EA1AC07FD8D2315B82B3B7259
Authority key identifier: 9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa
Signing time:             Tue 05 Mar 2024 18:07:34 +0000
ROA not before:           Tue 05 Mar 2024 18:02:34 +0000
ROA not after:            Tue 04 Mar 2025 18:07:34 +0000
asID:                     265775
IP address blocks:        2803:c280::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:eb:f9:fa:c6:a7:99:0e:a1:ac:07:fd:8d:23:15:b8:2b:3b:72:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B6584697C39ACE5E3524940EEAF5ED7030C015F
        Validity
            Not Before: Mar  5 18:02:34 2024 GMT
            Not After : Mar  4 18:07:34 2025 GMT
        Subject: CN=50A1F3E776AB2765A8BB9952737DADF562E1DE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:95:ef:7c:64:15:a6:78:0b:b7:8a:74:b0:
                    00:43:08:07:4d:96:90:7c:58:b1:c1:9d:91:8f:a2:
                    c2:2a:91:05:a7:a8:0c:56:92:bc:7c:82:93:6d:9a:
                    a5:3d:a6:08:19:81:8f:75:77:a9:11:db:6f:3b:14:
                    eb:58:d3:7c:24:de:9a:cc:79:a9:b4:53:c4:1a:4a:
                    dc:e3:62:f7:17:e1:53:df:33:74:88:94:17:cc:fb:
                    e9:16:38:12:a4:c2:59:a6:3e:26:22:a9:f4:0b:4e:
                    ee:56:df:08:9e:75:50:04:a0:3f:0e:0d:4a:04:96:
                    ee:c2:70:0e:2a:bb:e8:4a:be:3b:f1:fc:cf:87:b2:
                    cb:e3:06:6f:87:27:9e:41:f6:0f:63:ff:30:58:46:
                    50:99:fc:f8:4d:f7:61:12:42:fc:da:92:c6:a3:f6:
                    31:c0:bc:72:87:79:de:1c:ba:6d:ca:18:ca:63:ce:
                    da:24:75:3b:ae:17:be:69:68:7e:e6:d1:58:9f:18:
                    ed:4c:d6:b5:06:4a:cc:1d:02:e5:48:3c:d8:7d:d1:
                    ee:7f:32:c6:20:bf:e5:30:44:01:6b:7f:c5:8c:aa:
                    e4:54:ce:c5:60:52:f6:c6:f0:e7:38:6a:8d:7c:a5:
                    ee:32:88:4d:a0:a6:58:5b:aa:ca:f8:92:2a:82:bd:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:F3:E7:76:AB:27:65:A8:BB:99:52:73:7D:AD:F5:62:E1:DE:08
            X509v3 Authority Key Identifier:
                keyid:9B:65:84:69:7C:39:AC:E5:E3:52:49:40:EE:AF:5E:D7:03:0C:01:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B6584697C39ACE5E3524940EEAF5ED7030C015F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F35F152E50FF737ECFC9BFD27199D3B0527A5DF4274CA648D2269B1BCF4EC8C/0/323830333a633238303a3a2f33322d3438203d3e20323635373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c280::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:01:69:fc:50:ea:ff:19:cc:15:a4:b2:27:2d:43:c7:04:11:
         8b:96:df:9c:da:5c:88:3c:f6:97:48:93:88:bf:c1:ea:8e:44:
         1b:ab:8a:7d:43:41:5d:0a:5e:24:9a:8a:30:ba:33:a0:52:fb:
         bd:0e:d6:1f:66:7b:cd:91:de:f0:10:38:76:46:43:e1:34:90:
         81:00:15:de:db:74:93:a9:5f:10:0e:89:fa:3e:70:64:29:e7:
         ba:7f:98:15:af:54:66:fc:77:52:a0:fd:5c:d1:f3:d7:11:22:
         3a:0f:1f:f5:28:de:a7:fb:c3:6c:7d:ea:d6:fc:ac:91:db:28:
         c2:53:05:d9:9c:43:20:e5:41:de:3d:fb:a5:98:3f:32:9f:5f:
         7a:aa:6a:cc:c2:05:9d:1a:b8:04:aa:29:a4:f7:1d:33:55:45:
         06:87:b2:31:0a:19:54:5f:18:00:d1:9a:cd:c3:37:a7:c6:d9:
         8e:eb:ed:96:fe:c2:d1:b3:58:2c:55:cb:22:4d:4e:a0:89:06:
         d4:6a:98:30:8c:dd:09:c3:e8:0c:2d:8e:d8:a3:05:6e:0d:49:
         ae:10:15:5c:95:ac:59:04:46:93:79:d7:fc:28:7a:b7:e4:87:
         32:8b:dd:06:2c:29:43:db:b3:de:f1:4e:7f:88:0d:b7:af:14:
         18:8d:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:02:39 2024 by rpki-client on console-ams.rpki-client.org