Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/323830333a336431303a3a2f33322d3438203d3e20323732303535.roa
File:                     323830333a336431303a3a2f33322d3438203d3e20323732303535.roa (raw, json)
Hash identifier:          9gOA6AT0611FNrSsJWDKlpFojI4ajYpu7VCCtUkVUBw=
Subject key identifier:   00:8E:3A:BD:AF:9C:12:46:C1:67:08:27:88:74:88:40:6C:0D:59:B7
Certificate issuer:       /CN=DC7052981579462650CB20156007E7D260889208
Certificate serial:       106A4F1034CFC19E89F6775DAB756613EA0FA690
Authority key identifier: DC:70:52:98:15:79:46:26:50:CB:20:15:60:07:E7:D2:60:88:92:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7052981579462650CB20156007E7D260889208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/323830333a336431303a3a2f33322d3438203d3e20323732303535.roa
Signing time:             Tue 05 Mar 2024 17:48:28 +0000
ROA not before:           Tue 05 Mar 2024 17:43:28 +0000
ROA not after:            Tue 04 Mar 2025 17:48:28 +0000
asID:                     272055
IP address blocks:        2803:3d10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/DC7052981579462650CB20156007E7D260889208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/DC7052981579462650CB20156007E7D260889208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7052981579462650CB20156007E7D260889208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:4f:10:34:cf:c1:9e:89:f6:77:5d:ab:75:66:13:ea:0f:a6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7052981579462650CB20156007E7D260889208
        Validity
            Not Before: Mar  5 17:43:28 2024 GMT
            Not After : Mar  4 17:48:28 2025 GMT
        Subject: CN=008E3ABDAF9C1246C1670827887488406C0D59B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:20:ef:a1:cd:f1:06:ee:bd:f4:85:28:39:
                    4a:cb:4d:b3:8a:9d:0d:cd:a7:c0:c3:84:cd:72:46:
                    73:71:95:d5:73:49:ec:5f:33:ab:1d:50:f0:14:18:
                    be:70:53:87:76:7e:45:b1:aa:9e:1d:a2:14:75:99:
                    fd:79:40:70:db:73:c5:a0:6a:25:f1:af:c5:a0:48:
                    d1:d8:32:0e:39:0a:33:b5:c7:17:56:7f:40:e8:56:
                    34:d3:c6:6d:35:d7:47:a8:36:62:e9:cf:a7:ec:5b:
                    35:e9:02:14:9a:4d:cc:08:b0:2a:af:36:a0:39:f7:
                    39:0b:6a:17:d0:28:74:11:95:d2:19:a6:02:4c:b0:
                    24:17:2e:c4:b4:68:af:be:75:dd:d9:a0:19:ab:e9:
                    88:aa:a2:cf:c1:42:ab:2c:05:1f:78:47:40:b9:f1:
                    1a:25:ef:99:78:8a:5f:c1:75:3f:50:11:cf:b2:da:
                    a4:d3:33:92:ad:68:d1:9c:b9:ae:76:2f:b8:92:84:
                    d0:90:94:9c:8b:0b:69:90:8f:37:18:26:c4:17:5b:
                    15:ed:9a:15:69:29:88:f7:92:d8:17:42:43:4c:ba:
                    c2:df:e3:ac:0b:37:db:7d:42:3b:08:f4:67:f6:c7:
                    1a:fe:da:4d:e0:62:75:45:c7:e3:c8:0f:23:8f:de:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:3A:BD:AF:9C:12:46:C1:67:08:27:88:74:88:40:6C:0D:59:B7
            X509v3 Authority Key Identifier:
                keyid:DC:70:52:98:15:79:46:26:50:CB:20:15:60:07:E7:D2:60:88:92:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/DC7052981579462650CB20156007E7D260889208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7052981579462650CB20156007E7D260889208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4872C8674C51ABFC06367CFC7677EBF26280ADCB3F9FAA5C38103A2DA74F9DA9/0/323830333a336431303a3a2f33322d3438203d3e20323732303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:1a:3d:ee:96:9b:d4:2e:fe:bc:54:4c:30:2f:b2:fa:61:
         20:7e:2c:ce:3b:b2:31:c9:51:24:0d:7e:2b:dd:34:11:77:7f:
         86:e1:08:41:14:e0:61:71:0d:76:b0:0d:c0:15:f8:2b:01:1d:
         f0:06:d6:f2:0d:38:2d:68:f8:ff:35:73:b1:60:c9:8a:0a:92:
         19:46:a8:7e:73:c9:b7:43:8a:9a:1f:45:b6:26:b4:bc:9a:6c:
         90:38:e9:d2:90:ba:c7:88:9a:61:70:e4:dd:b8:19:29:56:1c:
         6a:cb:7e:a7:92:35:e5:59:07:1a:b8:ef:a8:82:c3:a6:c7:bc:
         8c:5a:d4:33:d0:06:a7:92:8c:2e:52:0f:3b:16:97:6d:f6:c4:
         6c:a0:ba:0b:67:b8:1b:87:96:9b:56:ce:3f:7c:8d:df:a9:e8:
         41:93:98:b1:2a:31:8c:a9:e6:37:b7:8e:4a:51:4d:11:81:c9:
         4c:69:29:62:c6:c2:92:13:5d:2f:67:89:96:36:2e:37:68:4a:
         ef:d6:34:74:70:3c:75:cd:61:d3:12:b4:42:64:fa:2f:ea:4d:
         6d:68:b8:ad:21:c0:40:fc:6f:24:26:76:26:5a:ae:f7:85:c8:
         5d:70:6d:6f:08:98:ae:62:29:c9:b6:97:f4:9f:e5:d3:0d:2b:
         1c:7b:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org