Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/323830333a656539303a3a2f33322d3332203d3e20323732393136.roa
File:                     323830333a656539303a3a2f33322d3332203d3e20323732393136.roa (raw, json)
Hash identifier:          R2UY1iVh6i2aki6TgKdkHzq1+JDo5OScRq+s8U2PKKc=
Subject key identifier:   BB:5D:1B:A9:89:5B:2F:08:FF:59:45:DD:C9:D9:D3:29:78:87:3F:5E
Certificate issuer:       /CN=DA7C2A33104FFD287155E98FCD400587BDDDBD9C
Certificate serial:       7994BDAF28F97F0F0BD22E539316FEBA9041DE88
Authority key identifier: DA:7C:2A:33:10:4F:FD:28:71:55:E9:8F:CD:40:05:87:BD:DD:BD:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/323830333a656539303a3a2f33322d3332203d3e20323732393136.roa
Signing time:             Tue 05 Mar 2024 18:09:32 +0000
ROA not before:           Tue 05 Mar 2024 18:04:32 +0000
ROA not after:            Tue 04 Mar 2025 18:09:32 +0000
asID:                     272916
IP address blocks:        2803:ee90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:94:bd:af:28:f9:7f:0f:0b:d2:2e:53:93:16:fe:ba:90:41:de:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7C2A33104FFD287155E98FCD400587BDDDBD9C
        Validity
            Not Before: Mar  5 18:04:32 2024 GMT
            Not After : Mar  4 18:09:32 2025 GMT
        Subject: CN=BB5D1BA9895B2F08FF5945DDC9D9D32978873F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:7d:e6:30:e8:94:a6:17:f0:75:98:86:ad:
                    07:84:69:f1:87:3a:40:18:6d:50:cf:9d:d7:a2:71:
                    36:4f:0e:a5:e2:fd:68:0b:77:dc:ff:8a:92:c3:2d:
                    ad:69:96:c8:f5:f2:d7:96:89:70:93:0a:ee:39:91:
                    20:35:28:14:7a:0d:e8:9f:2e:8d:53:57:8e:d5:94:
                    39:c7:34:b0:07:a6:87:f9:de:62:61:e8:47:27:8d:
                    f1:de:59:62:86:af:31:80:47:20:c2:37:91:bd:37:
                    dd:56:5d:c0:90:38:8c:d5:dc:73:e4:e2:74:fd:42:
                    e2:c0:95:cb:ff:f5:9c:9f:56:dd:7d:d7:bd:06:09:
                    40:bc:85:74:e1:4c:1c:0f:2e:e0:6d:4f:d1:ea:b2:
                    c2:06:4e:3b:0b:92:d9:a5:3a:76:22:08:60:cb:f9:
                    b1:6c:85:c4:a0:f8:a0:d4:5e:03:9c:fc:e2:5c:48:
                    38:23:2b:49:73:14:8e:fb:43:ca:e0:33:22:d9:4a:
                    ec:88:79:f8:f2:b0:82:46:71:72:08:46:09:8f:24:
                    be:e7:cf:b5:c6:54:9c:f3:27:2f:e0:23:a4:af:13:
                    1f:7d:5f:4b:3e:0a:a0:8f:be:fa:a2:ab:83:fe:2a:
                    fa:e0:1e:6c:10:f2:95:38:6f:83:4e:d7:44:40:e6:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:1B:A9:89:5B:2F:08:FF:59:45:DD:C9:D9:D3:29:78:87:3F:5E
            X509v3 Authority Key Identifier:
                keyid:DA:7C:2A:33:10:4F:FD:28:71:55:E9:8F:CD:40:05:87:BD:DD:BD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA7C2A33104FFD287155E98FCD400587BDDDBD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50214E977C89AD1F110DC45B53DBD2FCC6516213BC3A08AD2CAB7AA79A0878F9/0/323830333a656539303a3a2f33322d3332203d3e20323732393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:bd:0e:0f:a2:d9:03:2a:5d:ea:51:a8:38:91:ec:2f:bb:
         fe:ef:29:6d:40:d8:a3:31:a5:5b:1f:a5:d3:fc:2f:3f:f1:8d:
         a7:31:b3:60:af:dd:f8:17:d3:81:f4:3a:4a:52:a3:53:6b:5c:
         5f:a0:cd:49:01:fa:43:d2:c1:83:48:7e:bf:ff:6e:05:0b:68:
         0f:d7:ce:47:30:25:2b:cd:85:ff:07:18:f4:0f:04:95:03:b7:
         63:58:f2:74:85:a5:1c:4f:ec:74:14:ae:65:bf:15:cb:07:f9:
         91:1a:42:6c:f0:ce:f5:80:8c:da:64:a4:ca:c3:22:17:52:69:
         93:0d:15:56:fe:ac:3f:ac:23:f2:4b:65:5b:9b:07:1c:2d:c6:
         76:3c:28:53:cb:b6:56:d9:5c:7f:af:9b:1e:8f:08:0d:25:68:
         46:ba:f8:57:7a:20:bb:50:99:85:a9:1f:32:6d:e5:bc:c0:f6:
         c0:40:ce:8e:14:63:ac:aa:1e:b9:0d:75:4d:6b:d6:41:dd:27:
         30:7b:c7:35:b1:37:d4:10:f1:b9:09:c0:af:89:f9:20:36:3f:
         82:1d:67:ec:81:46:68:b0:7a:60:6f:8c:21:08:dc:ad:7a:fe:
         b7:39:63:10:a3:13:69:23:00:fe:c6:14:ba:73:b8:16:a5:4e:
         43:ab:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org