Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          US5tX9L6XA1X9dt/0uim3ic3jJR3uEpjfJnt96YGD90=
Subject key identifier:   2D:C5:75:C5:70:46:7E:24:53:8F:C7:E4:19:7B:CA:B8:1B:8F:29:33
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       2C468F3B1B705ABA51797A7A8E33051AA85DA0D9
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 25 Jun 2024 14:30:00 +0000
ROA not before:           Tue 25 Jun 2024 14:25:00 +0000
ROA not after:            Tue 24 Jun 2025 14:30:00 +0000
asID:                     273142
IP address blocks:        2803:2c50:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:8f:3b:1b:70:5a:ba:51:79:7a:7a:8e:33:05:1a:a8:5d:a0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Jun 25 14:25:00 2024 GMT
            Not After : Jun 24 14:30:00 2025 GMT
        Subject: CN=2DC575C570467E24538FC7E4197BCAB81B8F2933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:0b:07:22:d8:80:14:a0:2f:56:15:94:2c:
                    51:24:f6:75:8d:54:20:eb:8a:ad:87:67:34:7d:68:
                    54:da:ab:47:d6:83:90:b7:75:43:07:61:55:2f:0d:
                    38:89:c2:4d:82:8c:29:27:1e:fa:58:3b:e8:3e:54:
                    bd:74:0d:dd:bc:7d:e1:11:c7:52:bb:b2:dd:23:5f:
                    6c:da:f2:14:07:55:de:a4:6a:8e:3f:10:ec:e7:ab:
                    50:70:db:ed:3e:42:2e:5d:a0:72:d5:60:fc:ec:f3:
                    d1:34:86:62:9f:23:d5:60:c8:2b:ca:ef:5b:5c:de:
                    9f:85:bb:8f:31:99:1c:5b:13:04:5b:7d:de:8d:a9:
                    d5:50:73:e3:f7:b5:2d:23:45:3b:c6:73:7e:55:d4:
                    fe:23:a5:ef:03:82:68:19:3f:c3:22:fc:99:8f:f2:
                    69:b1:02:80:ae:23:82:0c:a7:2e:d3:e6:c3:a5:96:
                    cb:a6:79:84:23:06:02:e2:ac:33:dc:a2:15:a3:51:
                    a2:3e:65:1f:32:c7:bf:49:98:62:4a:a3:36:97:1b:
                    88:72:66:29:30:b9:67:8a:3c:4d:e8:92:31:e8:ae:
                    96:df:cd:19:23:94:23:66:c4:ea:1e:97:c9:07:46:
                    8d:c6:f4:df:8d:15:ed:10:5a:d4:6c:9c:10:19:cb:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:75:C5:70:46:7E:24:53:8F:C7:E4:19:7B:CA:B8:1B:8F:29:33
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a323030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:96:d1:22:11:a7:4c:9c:f7:0a:0b:38:4c:8a:43:68:32:b4:
         57:52:ad:f3:b5:8d:51:4a:bf:a9:57:47:f4:82:df:e9:f6:c0:
         99:3f:9d:99:95:53:89:b5:94:c1:34:ba:14:f0:b0:f9:f9:81:
         d8:78:0a:86:1b:bd:b3:a2:4c:ec:cd:6d:86:2c:43:ab:54:f7:
         3b:d6:47:d8:a0:c5:48:23:2a:d3:4f:47:78:99:5c:d6:db:24:
         5e:b5:32:1f:8d:bd:68:b7:13:00:e8:a2:75:c4:e8:10:6e:3c:
         4f:06:a9:9d:b4:55:0c:6a:de:4f:2a:6e:f2:1d:29:c2:23:95:
         bb:d1:73:3d:58:24:63:7b:22:b7:ab:2d:27:d1:bf:44:06:68:
         89:f3:42:95:07:e5:94:6f:22:98:70:43:9d:f8:3e:04:29:f0:
         58:92:90:70:de:75:01:dc:bd:da:7b:18:99:dc:61:bb:c6:8e:
         af:b6:b1:51:49:d1:88:8c:db:cd:7c:c6:fe:f2:2f:d4:d6:a6:
         81:da:b2:a5:59:5b:c8:df:bf:92:eb:d3:49:47:ee:6a:29:de:
         3c:53:a9:36:8a:2b:41:27:b4:a3:94:08:3a:b0:3f:b4:2f:c8:
         19:ed:ec:a5:58:75:e0:50:a9:5e:4a:5f:8b:07:2c:3b:4f:c8:
         77:93:62:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org