Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/323830333a663530303a3a2f33322d3332203d3e203630303232.roa
File:                     323830333a663530303a3a2f33322d3332203d3e203630303232.roa (raw, json)
Hash identifier:          ow8oHOFQjpjjelfyOJjpWEyaKR/a7eJJ5e2VeqgK9pM=
Subject key identifier:   1F:8C:71:69:42:11:67:12:42:9C:71:00:BB:2A:A3:F0:41:D5:B6:FB
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       5168FA4374D89090176A1F1D1E81A410BF753C1E
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/323830333a663530303a3a2f33322d3332203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     60022
IP address blocks:        2803:f500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:fa:43:74:d8:90:90:17:6a:1f:1d:1e:81:a4:10:bf:75:3c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=1F8C716942116712429C7100BB2AA3F041D5B6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:af:ea:8c:11:b2:05:e0:d6:4b:ba:55:6d:
                    f2:70:7b:ff:17:87:8e:19:e4:be:74:0f:f0:82:e0:
                    06:52:38:91:87:67:61:ae:3f:e0:0d:7b:7b:df:e7:
                    2a:46:72:37:8f:c5:71:7c:e1:99:18:0b:db:9d:42:
                    d7:9e:13:82:aa:72:02:72:7d:6c:bc:24:12:38:b4:
                    e0:82:92:11:51:00:75:be:b8:f0:84:e3:77:a7:a8:
                    eb:15:16:1c:fc:e7:71:03:4b:d0:ae:e6:d4:53:b9:
                    2e:96:f4:24:d4:07:97:c4:d0:b4:c1:5b:9b:c9:e7:
                    27:53:01:c4:a7:37:de:79:0f:5c:17:4a:04:18:88:
                    0c:04:5a:03:a2:37:3c:84:17:50:40:6e:e2:96:e2:
                    3b:42:f3:95:c5:45:cd:c8:c8:0a:07:a2:02:f1:e7:
                    0e:fa:82:3d:e8:3f:b2:e5:24:87:32:15:8b:f1:ae:
                    d4:91:56:b2:0d:93:f6:71:a6:37:78:46:ee:74:92:
                    27:fa:e3:04:08:cf:db:f3:d7:e2:17:e7:d2:9e:81:
                    bc:4b:f1:30:44:29:c1:32:39:9f:91:15:2f:8c:0f:
                    3d:a8:3d:d1:c6:f9:c1:93:0b:b1:04:db:2a:4d:32:
                    f0:1c:68:2a:5a:42:82:6c:73:ce:cf:6b:36:08:be:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:71:69:42:11:67:12:42:9C:71:00:BB:2A:A3:F0:41:D5:B6:FB
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/323830333a663530303a3a2f33322d3332203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:4d:7d:59:47:9a:fa:42:82:0a:3b:63:f8:57:fb:04:50:
         1e:b4:6a:4d:89:e1:8f:eb:7c:cf:23:d4:54:38:80:42:16:8b:
         fc:cc:bf:fc:5d:d4:08:cb:83:18:46:e7:24:ac:4e:e2:60:67:
         66:e6:6d:e9:e7:af:d7:05:7c:91:fe:b8:4f:4e:38:8a:80:c2:
         c8:81:12:03:52:4a:7f:cf:f1:a7:68:bd:92:28:c9:15:c4:f3:
         f1:a6:55:e1:c9:e2:30:16:53:59:96:57:b3:43:8f:7c:14:ad:
         34:28:b1:23:08:d2:71:80:ba:46:c1:75:6e:9e:b8:14:71:dd:
         e1:72:b5:78:41:9a:75:ad:04:33:dd:de:f9:47:f1:c0:d7:39:
         45:a9:03:18:8b:f7:cc:45:04:d3:60:48:fc:c5:1e:e9:04:c4:
         a5:22:c2:03:73:73:46:83:68:c9:86:b6:c1:31:3a:3f:c0:1e:
         2d:87:e9:cc:ea:50:c3:34:7e:0b:dd:53:c7:cd:84:4d:13:29:
         cc:42:c5:3c:2c:10:44:f4:42:c4:62:8d:a4:7e:e7:2b:30:d4:
         a2:e8:bc:36:8d:4c:80:e8:0d:7b:c1:50:6d:b5:2d:24:bc:50:
         35:9e:2c:86:19:8b:8b:f1:67:37:aa:26:32:07:6e:9e:f6:7e:
         10:73:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org