Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa
File:                     323830333a373338303a3a2f33322d3332203d3e203237373831.roa (raw, json)
Hash identifier:          nrYgTREGDiSft39bWY+Irokc/8hoz8r4WqO7evuCxyU=
Subject key identifier:   72:51:57:C8:1E:C1:BC:8E:85:33:2F:E8:9E:15:D3:00:09:D7:AC:09
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       25601D0C918F1091D14BD6B0D287B3F7D3E95F69
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa
Signing time:             Mon 15 Apr 2024 04:50:01 +0000
ROA not before:           Mon 15 Apr 2024 04:45:01 +0000
ROA not after:            Mon 14 Apr 2025 04:50:01 +0000
asID:                     27781
IP address blocks:        2803:7380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:1d:0c:91:8f:10:91:d1:4b:d6:b0:d2:87:b3:f7:d3:e9:5f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Apr 15 04:45:01 2024 GMT
            Not After : Apr 14 04:50:01 2025 GMT
        Subject: CN=725157C81EC1BC8E85332FE89E15D30009D7AC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:db:01:19:a6:75:fd:8e:b9:7f:42:3f:be:
                    ca:5b:17:2d:64:39:c5:93:a0:74:ac:11:f5:e1:36:
                    2c:b3:65:fb:2f:1d:3d:a3:4d:01:53:13:8f:25:a2:
                    19:bb:1c:cc:20:1d:e7:77:45:df:4c:35:21:ff:bb:
                    ea:be:7c:ae:34:58:f9:69:0c:28:c8:e1:f2:49:a4:
                    c7:1c:4b:98:01:2d:6c:74:2b:d9:1a:9a:b4:68:b7:
                    95:26:91:03:99:76:c7:b5:7f:dd:74:0d:e9:ff:e4:
                    1b:41:ef:7d:43:e0:75:61:e9:4b:55:1d:e1:c8:12:
                    5e:be:6c:29:2a:13:65:b4:9c:93:54:63:c5:05:e8:
                    7c:f3:1c:a8:f2:1b:94:ea:62:3c:b2:0a:0a:34:15:
                    5b:39:4d:3c:44:da:21:cc:25:f3:0b:20:7c:ca:aa:
                    0b:58:1b:c4:93:f2:4f:b7:14:df:a9:3b:2a:eb:89:
                    fa:1e:a4:b8:09:86:6f:69:56:2c:f8:07:73:84:48:
                    73:e3:b0:4c:b5:43:b8:a2:5e:77:10:dd:b0:06:7e:
                    69:c0:45:3e:d2:b0:65:6c:ae:ca:e5:f1:67:a6:4f:
                    9e:03:16:77:5b:43:df:26:91:c5:df:b8:a6:c5:de:
                    7a:26:08:b4:ab:56:70:e4:00:20:49:84:b7:74:c8:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:57:C8:1E:C1:BC:8E:85:33:2F:E8:9E:15:D3:00:09:D7:AC:09
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a3a2f33322d3332203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:18:b3:8a:3f:96:32:95:06:2f:19:fa:49:cc:fc:ac:92:
         a0:2a:8b:06:b8:e8:08:e2:78:28:0d:cc:ba:d0:c3:bb:b4:8d:
         fa:52:53:56:4c:d3:36:d7:79:db:37:3d:34:66:43:fe:51:45:
         7d:00:36:8a:a3:bf:28:99:b5:18:3b:7e:6b:a6:23:54:95:43:
         6f:78:b9:e8:0e:9e:9e:1c:29:4d:34:e6:17:ea:4c:e2:73:d1:
         a9:db:00:be:f8:24:e1:9d:04:de:08:78:6f:2a:90:52:a4:92:
         22:67:15:1c:6f:bb:69:13:d6:08:4b:87:28:28:1e:4c:0f:f1:
         96:47:0e:9b:98:fb:3a:0b:c1:91:f4:94:f4:fd:eb:4b:97:30:
         bc:f0:d2:c7:a3:02:1d:8c:e6:f6:20:d6:f1:90:ac:f7:5a:7d:
         07:e7:db:72:67:f2:d5:50:db:6a:3b:73:78:a0:f0:4c:4a:68:
         53:49:90:05:86:b3:74:92:e6:5a:cb:64:1a:ea:a6:22:0a:98:
         47:6e:48:f2:4f:74:e2:18:6c:aa:89:0f:10:03:a9:88:8d:1c:
         90:ea:15:51:0a:14:fd:78:5e:34:1a:56:2c:19:8b:da:ff:5d:
         33:1a:63:91:1b:d7:93:48:a6:fc:38:92:2b:8e:f8:da:de:36:
         1b:4d:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org