Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/323830333a623431303a3a2f33322d3332203d3e20323731383634.roa
File:                     323830333a623431303a3a2f33322d3332203d3e20323731383634.roa (raw, json)
Hash identifier:          b6xPG9ovGLxA/dnABLkplFUoNT4oZxT61Ymn93JxMgA=
Subject key identifier:   C8:81:C4:04:81:45:3F:74:B5:CD:43:31:7A:B1:3D:73:8D:F4:26:F6
Certificate issuer:       /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
Certificate serial:       5B6C330EB6D3410BF583F1A528E9B243639D7993
Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/323830333a623431303a3a2f33322d3332203d3e20323731383634.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     271864
IP address blocks:        2803:b410::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6c:33:0e:b6:d3:41:0b:f5:83:f1:a5:28:e9:b2:43:63:9d:79:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=C881C40481453F74B5CD43317AB13D738DF426F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:fc:7d:00:db:92:dc:e6:ec:e3:11:f4:94:
                    f2:bf:57:66:42:a6:28:c2:d8:48:d6:c0:90:e2:d4:
                    ac:62:fa:4b:a6:e3:0c:1d:58:04:cb:b6:ac:d0:d6:
                    8d:eb:aa:38:70:0d:30:df:6b:3b:4e:ca:ea:2a:82:
                    3d:29:e0:29:b0:42:58:b1:f2:80:30:64:75:22:7e:
                    ec:35:51:cb:06:6b:64:19:d9:dc:d0:ee:59:76:dd:
                    6c:64:02:ce:12:da:5f:7a:58:52:1e:50:29:24:2c:
                    db:44:0b:fd:fb:44:6f:7b:74:e2:39:50:b5:3d:bc:
                    f3:64:33:37:84:65:33:0d:4d:d1:40:74:9b:62:7e:
                    7f:34:27:f0:31:3a:d1:e7:29:0a:43:0b:9c:51:04:
                    21:e7:34:70:f5:90:b2:97:75:8e:00:ae:f5:fe:de:
                    2f:2c:57:a9:a9:2e:3a:f7:8b:64:ea:9e:6c:88:57:
                    ca:00:43:71:6c:db:6c:3d:00:7b:f7:33:38:4d:0b:
                    0d:1b:c9:a0:c6:43:83:b3:f5:78:28:9d:d2:5b:68:
                    d0:9e:1f:66:d1:f5:25:ec:9e:0c:54:69:2a:59:32:
                    1f:4d:db:6d:82:6f:8c:57:13:9f:cb:4e:a2:ba:43:
                    eb:ca:0d:7c:52:a7:be:e7:91:de:94:50:91:34:66:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:81:C4:04:81:45:3F:74:B5:CD:43:31:7A:B1:3D:73:8D:F4:26:F6
            X509v3 Authority Key Identifier:
                keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/323830333a623431303a3a2f33322d3332203d3e20323731383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b410::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:79:61:5d:76:b4:ad:dc:d6:00:f7:b5:ae:e9:6b:dd:f1:63:
         b7:b0:50:4d:62:1a:76:5f:a8:59:71:11:79:bc:7d:8b:e3:aa:
         86:b9:bd:9f:5f:77:96:de:bf:fb:f4:ca:47:b3:39:83:4d:f1:
         b1:04:14:68:cd:d8:1b:36:40:08:d7:77:64:87:c1:c4:36:10:
         76:ce:a4:2b:da:fb:91:ba:db:c9:c3:49:bc:da:e0:3f:c5:19:
         0e:5d:7d:2a:da:f3:21:dd:e8:e9:5f:4c:dd:65:9b:30:f1:42:
         58:47:69:54:bb:15:17:41:03:56:a0:0c:f4:29:7b:45:2a:b2:
         7b:2d:f0:18:31:d5:c2:90:4e:3c:2b:12:c9:b6:17:16:5d:56:
         53:9f:cb:93:ac:81:2f:00:59:a8:f2:bb:b1:55:81:66:60:62:
         a9:08:c0:ce:59:b6:91:f3:f4:0c:b8:4f:dc:d5:cc:11:48:a3:
         e9:4f:0a:b8:f9:ef:fe:8b:51:d7:f1:c9:3e:67:74:b8:5d:6b:
         15:38:62:a8:80:88:a5:3c:50:b1:f8:6d:55:31:ca:c3:d8:39:
         8d:e0:f5:1e:66:c9:62:3d:d6:92:b6:c7:c8:d1:74:91:96:c3:
         45:f8:ae:7d:9d:f9:ef:4e:b5:32:8c:83:44:15:b5:91:8f:71:
         27:2f:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org