Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa
File:                     323830333a616231303a3a2f33322d3438203d3e20323632323233.roa (raw, json)
Hash identifier:          UmNWpM3yCiqwgkoCu+iqG6m09LJiIDBPEFvHy6y3b2o=
Subject key identifier:   5E:54:68:E9:CD:14:E6:E4:03:D2:9B:97:4F:26:2F:FB:48:4F:6F:0E
Certificate issuer:       /CN=B7871230EF82230BE042A8923EAD143183314225
Certificate serial:       6506DEC9912FCA011EA0335EF19F778E91A78365
Authority key identifier: B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa
Signing time:             Tue 05 Mar 2024 17:49:53 +0000
ROA not before:           Tue 05 Mar 2024 17:44:53 +0000
ROA not after:            Tue 04 Mar 2025 17:49:53 +0000
asID:                     262223
IP address blocks:        2803:ab10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.crl
                          rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:06:de:c9:91:2f:ca:01:1e:a0:33:5e:f1:9f:77:8e:91:a7:83:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7871230EF82230BE042A8923EAD143183314225
        Validity
            Not Before: Mar  5 17:44:53 2024 GMT
            Not After : Mar  4 17:49:53 2025 GMT
        Subject: CN=5E5468E9CD14E6E403D29B974F262FFB484F6F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:94:0a:25:9f:30:b3:99:af:d0:19:20:44:
                    c4:88:9a:a2:26:03:48:15:af:51:55:99:11:c9:ad:
                    aa:eb:45:09:20:b1:fc:00:0c:7d:3a:31:da:6d:f6:
                    3a:74:06:77:77:cd:fd:47:4d:25:bf:3c:d9:08:dd:
                    6a:15:7a:ba:0a:c2:3a:51:ae:28:b3:91:09:ad:51:
                    06:18:60:c6:4c:e0:e9:0c:6b:fa:4a:33:c6:29:68:
                    d9:e0:0f:4e:49:05:ae:21:85:c6:81:9a:ab:24:f4:
                    9e:bc:d8:ba:5a:28:0a:d1:cc:29:65:53:29:ef:06:
                    01:c5:bf:7a:5e:0c:31:ff:34:53:f8:05:1f:e2:27:
                    47:74:e5:07:2f:8f:32:84:61:91:41:9b:60:e6:01:
                    69:54:78:1d:41:16:9c:1f:51:14:2a:75:29:6b:90:
                    ea:f4:e4:e6:63:7d:67:aa:2b:5d:9f:ba:87:48:f8:
                    ee:94:1d:ea:8e:6f:46:50:ed:ac:d4:e4:33:05:a8:
                    1c:d2:77:c3:20:b0:c9:cd:ba:7f:19:39:f1:6f:de:
                    80:13:e6:00:52:d2:89:93:bf:df:9a:a1:ee:b8:c9:
                    0c:a8:9b:80:7e:dc:ce:e9:89:ee:b8:7b:be:9c:85:
                    84:82:ed:0a:0c:89:9e:bb:bb:78:68:22:8f:ed:b5:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:54:68:E9:CD:14:E6:E4:03:D2:9B:97:4F:26:2F:FB:48:4F:6F:0E
            X509v3 Authority Key Identifier:
                keyid:B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/323830333a616231303a3a2f33322d3438203d3e20323632323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:6e:e2:24:74:2c:6a:59:cf:79:e1:31:cb:ce:96:e7:26:
         00:bb:ec:31:67:98:11:a0:a0:4f:4e:6b:a3:0b:e7:82:d5:77:
         3a:1a:59:e6:5e:f6:70:25:5c:7c:92:8b:83:73:3e:e2:a1:7e:
         b8:17:47:85:74:75:86:a5:55:1d:b3:a5:6b:26:51:c5:3f:10:
         69:fa:02:c5:f4:04:71:ae:e4:dc:34:12:c5:d2:b2:f5:ef:01:
         fc:18:ab:24:09:0d:6d:6b:1f:33:c8:fc:59:db:0f:9d:3a:01:
         44:15:98:4b:10:6e:eb:c7:35:19:9c:9d:d6:ac:19:e4:30:1f:
         3e:7d:98:21:87:1a:8f:da:c6:0f:40:f7:0a:c3:2c:a2:f9:69:
         62:55:17:ce:f7:27:53:ee:fd:08:ea:0f:cf:78:c5:ae:fd:47:
         ac:6b:1b:c7:41:9a:69:5d:f8:c5:18:9a:b5:a5:cb:c8:6f:16:
         92:dc:e5:b6:3f:ae:af:e5:54:30:af:e5:a8:4a:2d:8a:54:19:
         40:73:f2:ca:d4:92:df:28:99:c0:86:37:7e:c2:6b:4a:0f:40:
         32:5f:4f:ba:08:db:c3:f0:64:a8:24:ef:c3:07:e4:23:af:77:
         46:fb:62:39:59:b7:3a:4e:61:df:41:85:69:05:80:02:d4:54:
         47:99:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:56 2024 by rpki-client on console-fra.rpki-client.org