Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a633030303a3a2f33342d3334203d3e203237373831.roa
File:                     323830333a373338303a633030303a3a2f33342d3334203d3e203237373831.roa (raw, json)
Hash identifier:          R9hJI9WyHai2Swt+qRZkuvHjHQmevn78idka+aHqPUk=
Subject key identifier:   64:76:E8:E3:F4:61:76:67:24:9B:DB:0E:23:98:F6:4B:23:CB:8F:9B
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       4096E51DC0E71B9EA72849EF0E757C20BF1FB13E
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a633030303a3a2f33342d3334203d3e203237373831.roa
Signing time:             Mon 15 Apr 2024 04:50:02 +0000
ROA not before:           Mon 15 Apr 2024 04:45:02 +0000
ROA not after:            Mon 14 Apr 2025 04:50:02 +0000
asID:                     27781
IP address blocks:        2803:7380:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:e5:1d:c0:e7:1b:9e:a7:28:49:ef:0e:75:7c:20:bf:1f:b1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Apr 15 04:45:02 2024 GMT
            Not After : Apr 14 04:50:02 2025 GMT
        Subject: CN=6476E8E3F4617667249BDB0E2398F64B23CB8F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:a7:79:c6:ca:73:1a:74:be:58:21:74:a6:
                    91:13:60:3f:c2:c4:ac:60:53:eb:34:b0:b7:c0:4f:
                    bc:11:82:80:34:dc:0c:1b:6a:5a:9c:27:0c:f0:3f:
                    c7:4a:21:22:3d:93:09:0b:98:fb:9c:33:05:70:eb:
                    f9:e0:b5:3c:39:5e:9e:17:1d:8c:b9:48:b4:16:ae:
                    6c:0a:90:be:e3:8a:b6:48:26:e1:b8:a8:ad:29:f4:
                    9b:44:d4:a0:10:8a:31:f8:5f:35:e1:ee:0b:b8:3e:
                    54:37:36:b9:e9:b7:e7:e0:b0:f3:8b:33:7b:cc:28:
                    40:0b:7b:78:27:dc:3b:30:88:ff:72:72:19:4c:50:
                    90:fe:5e:f2:6f:99:39:19:a5:01:1e:cc:3d:0e:92:
                    99:ff:4e:4e:2e:35:96:c4:06:22:71:a9:a8:dd:62:
                    00:0b:b2:5f:25:44:e4:ed:8a:61:58:04:63:c4:3d:
                    c8:12:43:30:22:bf:97:70:b9:11:94:19:2b:f9:00:
                    76:68:82:ae:92:56:89:82:77:b6:27:65:c8:44:ff:
                    f2:b7:b3:e8:50:95:28:22:a3:2f:86:e3:df:78:7d:
                    6a:21:c9:3f:30:d4:a1:d1:86:81:89:67:5d:ef:49:
                    8f:06:11:b8:27:40:26:32:b8:74:ee:02:56:aa:33:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:E8:E3:F4:61:76:67:24:9B:DB:0E:23:98:F6:4B:23:CB:8F:9B
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a633030303a3a2f33342d3334203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7380:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:45:d2:a1:36:62:3a:b7:5c:b7:9a:1f:ab:83:c2:f1:38:
         8f:4e:23:9a:c5:ef:8e:9a:7f:81:4c:fa:9f:49:f7:97:8a:7d:
         57:34:2a:ce:d0:ec:51:31:e9:42:d2:cc:74:20:17:74:d1:b8:
         09:84:b2:fb:66:f5:28:d7:a2:4b:b1:63:b8:34:cb:e5:84:b4:
         39:c8:89:07:f1:10:1f:b9:7e:64:e5:a8:5a:dc:f1:6c:7d:e3:
         bf:f0:46:fc:d1:db:7e:b8:17:ca:66:7b:ae:6e:86:3b:33:fa:
         4e:ad:f4:f0:0c:31:26:af:0e:84:d5:4a:59:e2:e4:70:2c:71:
         26:38:3e:21:7a:0d:22:ba:f8:d6:fa:f0:1c:71:37:1d:58:d0:
         c7:e1:d3:35:15:ca:dc:df:bd:bf:32:ec:a2:74:98:02:22:79:
         b9:a1:02:6b:b6:54:90:e4:37:8f:c3:51:96:74:9c:27:45:5a:
         7c:78:85:f8:bc:7c:f0:b6:5a:45:a4:b3:09:9d:6e:38:c6:47:
         9b:61:23:ee:a6:54:c3:3f:f6:7b:b9:10:0e:5d:33:ad:ac:bb:
         01:e1:11:5f:84:46:9d:4a:c7:1e:54:cb:b4:60:75:a3:f0:dc:
         e0:bc:f3:e2:77:4e:f3:12:21:80:70:32:b8:3b:b1:39:7e:54:
         48:ed:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:22 2024 by rpki-client on console-fra.rpki-client.org