Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/323830333a643336303a3a2f33322d3438203d3e203634313137.roa
File:                     323830333a643336303a3a2f33322d3438203d3e203634313137.roa (raw, json)
Hash identifier:          p17EtHbMFeJxYyv5N2U2kb4taK4SZD2kUvZTkLjPKHE=
Subject key identifier:   C8:AD:E9:57:E0:92:3C:6A:2E:D1:34:7B:C1:72:FC:AF:39:67:B4:13
Certificate issuer:       /CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
Certificate serial:       250E3916B626FCFBF3C0DAB266BBC8E4E303D39F
Authority key identifier: B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/323830333a643336303a3a2f33322d3438203d3e203634313137.roa
Signing time:             Tue 05 Mar 2024 17:49:11 +0000
ROA not before:           Tue 05 Mar 2024 17:44:11 +0000
ROA not after:            Tue 04 Mar 2025 17:49:11 +0000
asID:                     64117
IP address blocks:        2803:d360::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:39:16:b6:26:fc:fb:f3:c0:da:b2:66:bb:c8:e4:e3:03:d3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
        Validity
            Not Before: Mar  5 17:44:11 2024 GMT
            Not After : Mar  4 17:49:11 2025 GMT
        Subject: CN=C8ADE957E0923C6A2ED1347BC172FCAF3967B413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:5e:fb:c9:e4:f0:41:fa:02:17:e0:4a:4a:
                    d2:be:1e:8c:f9:72:4d:58:d4:38:53:0d:d7:c2:94:
                    1a:a7:6f:a0:21:61:b1:89:a3:12:dc:fd:21:f2:25:
                    5e:ae:ed:cb:92:de:25:cd:bd:84:80:d2:e8:e9:ba:
                    a0:2f:d2:de:44:ed:ef:e7:61:83:67:46:04:11:49:
                    f7:7b:63:5b:78:27:4e:32:4a:3a:59:d6:fa:c6:3d:
                    a8:17:3d:e8:16:e5:6f:27:f1:20:d5:1c:b1:8d:92:
                    d3:a6:6b:b4:d4:d5:5d:86:33:11:b6:76:d6:7d:7f:
                    63:8e:f9:d8:4d:0b:92:76:49:c7:5b:f6:53:08:63:
                    76:8b:72:fb:ff:3e:09:9e:5c:5b:84:d0:98:58:43:
                    dd:4a:7c:cc:09:36:1d:b1:b6:e5:91:3e:ad:fa:08:
                    8c:18:50:e4:d7:ac:b9:03:5b:67:3c:54:12:d6:cc:
                    78:6c:ed:cc:a3:43:a9:88:76:17:dd:33:59:88:2e:
                    5c:44:e8:c2:2b:64:7c:d9:a2:9b:74:fa:98:6a:04:
                    79:58:61:ed:78:57:a8:d9:d3:64:09:7c:41:b1:23:
                    f5:61:75:40:41:f2:d3:9b:f2:98:22:c2:ca:aa:f6:
                    8c:90:4f:c9:3b:4c:78:19:32:e4:0a:54:8e:bc:22:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:E9:57:E0:92:3C:6A:2E:D1:34:7B:C1:72:FC:AF:39:67:B4:13
            X509v3 Authority Key Identifier:
                keyid:B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/323830333a643336303a3a2f33322d3438203d3e203634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d360::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:53:f9:5a:34:22:c6:ed:ae:14:51:81:ba:dd:21:ec:bb:54:
         f0:22:14:c3:05:9f:58:7d:c9:9e:3b:33:90:ca:8a:35:4d:fd:
         15:8e:4f:82:63:42:e8:eb:57:1c:8e:e6:13:b0:b9:e6:e3:95:
         9b:35:d4:63:24:91:88:a9:26:26:9e:c0:86:c3:03:87:80:06:
         d2:6f:29:de:79:fb:6a:27:ff:60:4a:77:1a:44:f9:f9:a5:c6:
         6d:b6:66:65:81:d7:77:13:05:4d:40:6a:69:8f:7e:0f:16:7b:
         0f:a8:62:b0:76:b8:ef:f9:4e:87:c3:f7:9b:da:29:47:02:6a:
         04:d4:b9:c7:03:3e:53:2d:cb:43:2e:bb:86:53:29:c8:31:ea:
         79:37:8c:88:1e:77:62:2a:8a:21:0c:24:e6:5e:06:dc:89:da:
         8f:9b:5c:f1:94:1b:ad:10:8b:20:ed:a4:a0:83:23:12:27:84:
         27:12:ef:db:53:04:67:36:8d:09:2e:15:da:e1:2b:96:7e:e2:
         dd:d4:42:b1:af:e8:c2:8a:d7:31:f5:2c:1a:f1:6e:32:21:8f:
         79:ab:e6:7f:d8:45:be:62:62:c1:77:bc:40:61:9d:3f:c1:94:
         b8:7a:d7:6f:fa:89:8f:4f:ea:7f:43:29:dd:f2:21:e1:96:03:
         59:46:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org