Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa
File:                     323830333a313535303a3a2f33322d3438203d3e20323733383534.roa (raw, json)
Hash identifier:          TEicY60GOr1oerg9vrz2DNwkX/XFJ5yLl3FlNrUpXL8=
Subject key identifier:   3C:61:2F:87:3E:6F:AB:D6:67:C6:E5:1D:69:B3:AF:BD:F1:5F:9D:DA
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       362322ACEFBB571D480490BE6B4E9BAC66D2DAC3
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa
Signing time:             Wed 25 Sep 2024 17:55:00 +0000
ROA not before:           Wed 25 Sep 2024 17:50:00 +0000
ROA not after:            Wed 24 Sep 2025 17:55:00 +0000
asID:                     273854
IP address blocks:        2803:1550::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:22:ac:ef:bb:57:1d:48:04:90:be:6b:4e:9b:ac:66:d2:da:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Sep 25 17:50:00 2024 GMT
            Not After : Sep 24 17:55:00 2025 GMT
        Subject: CN=3C612F873E6FABD667C6E51D69B3AFBDF15F9DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:0c:4e:e2:69:c5:89:af:57:0a:47:f4:5e:
                    5b:90:7c:b5:45:6f:ff:d6:8e:e9:04:9d:79:41:39:
                    79:1f:b4:23:ed:d9:a4:3a:90:23:3e:ef:8b:e6:26:
                    92:6c:1e:66:05:22:20:7f:22:88:d9:2f:ae:27:f8:
                    c8:42:12:ef:86:a4:e3:46:af:2c:c5:7d:d0:6e:0e:
                    97:6b:44:9d:79:03:9d:ec:12:fa:f1:d6:b0:f5:27:
                    4b:1e:ed:0b:62:f2:b6:cf:70:c2:cb:d1:ca:c9:c0:
                    f8:19:b5:6d:05:03:d4:0d:5c:14:7f:5f:a7:7e:b7:
                    e4:d8:8a:48:25:12:19:bc:45:35:10:9d:65:10:0a:
                    5d:db:11:55:c0:c0:10:3e:c2:4d:0d:37:c4:a9:01:
                    16:4c:b4:26:ef:23:a8:9a:36:d1:37:a3:71:30:13:
                    29:96:fc:3b:86:68:fb:cf:b0:a1:0c:9b:2d:8c:3f:
                    5a:42:9f:b8:29:fc:63:64:07:f8:68:7a:e6:59:06:
                    4f:6e:b4:41:26:9e:1e:18:68:02:7e:9c:59:ff:1b:
                    81:8c:d0:9e:cb:66:dd:26:45:f9:c7:f5:17:21:a9:
                    c4:54:8a:6a:d1:a5:b1:63:dc:fe:3d:6d:27:47:07:
                    5c:c4:f1:85:0a:bb:d7:0a:6f:eb:00:90:1b:3c:92:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:2F:87:3E:6F:AB:D6:67:C6:E5:1D:69:B3:AF:BD:F1:5F:9D:DA
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/323830333a313535303a3a2f33322d3438203d3e20323733383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1550::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:80:57:a7:f9:21:52:8c:b8:7a:d7:58:8d:a5:cb:14:85:c3:
         6f:18:f2:62:e0:92:e7:e5:4f:4e:83:c9:b2:52:27:2a:63:6f:
         06:8a:67:08:83:57:e2:f5:a0:31:f3:9d:c3:bf:a3:41:de:90:
         67:4a:dd:18:53:b7:ed:ec:63:0d:1f:ee:4a:ed:dd:d6:ad:94:
         07:22:e3:2f:c9:ad:fc:df:6d:63:fd:ec:8f:4d:a0:73:1d:19:
         00:2a:d4:70:f0:29:3c:75:0c:ca:95:84:6e:59:16:9b:08:46:
         c2:19:c6:b7:1b:46:f5:ef:75:00:9f:59:11:bc:d8:86:8a:8a:
         06:77:5d:b1:85:fc:74:45:c8:26:8d:2c:03:04:d0:35:60:35:
         22:62:d1:a5:61:dc:2d:5a:d8:e4:80:6b:98:39:9a:77:1b:31:
         7e:98:e6:0d:78:ef:17:27:02:6c:27:fa:1a:e9:1e:ec:20:3b:
         4f:5e:6c:90:8b:a7:60:2d:27:5f:c6:11:25:3f:e0:47:66:a0:
         f0:91:2a:65:99:4d:45:0a:13:62:62:4f:4f:f5:a1:c5:73:7f:
         4c:37:2c:a2:03:35:ad:5a:56:6a:a7:77:19:f9:fa:10:25:e2:
         40:2d:f0:c5:7a:06:0f:1c:e0:b8:c9:da:cf:06:63:39:fe:47:
         3e:1f:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:17:08 2024 by rpki-client on console-fra.rpki-client.org