Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          4a+cAoxy20Cy1mJpy+xF6BgJZ8XyNwPmD8y7d33zGCU=
Subject key identifier:   9C:E4:89:33:42:7A:87:94:66:86:C1:81:3F:D8:EB:9C:8A:79:C6:51
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       67F3123449E31D845B363C9935766C55F66F88B5
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:35 +0000
ROA not before:           Tue 05 Mar 2024 18:17:35 +0000
ROA not after:            Tue 04 Mar 2025 18:22:35 +0000
asID:                     272082
IP address blocks:        2803:9b10:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f3:12:34:49:e3:1d:84:5b:36:3c:99:35:76:6c:55:f6:6f:88:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:35 2024 GMT
            Not After : Mar  4 18:22:35 2025 GMT
        Subject: CN=9CE48933427A87946686C1813FD8EB9C8A79C651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:d0:06:7c:d8:b2:95:1f:e0:f5:f9:09:ba:
                    d8:8c:a8:a2:3e:16:7c:aa:0b:35:fe:5e:ff:3a:37:
                    4d:c5:4a:01:13:44:d7:54:21:47:46:b3:44:bf:0f:
                    b6:7b:c8:52:65:0b:f4:3d:ef:54:11:cc:e3:7d:b3:
                    14:b7:fd:69:2d:ae:8b:07:d0:a9:d4:dd:d3:90:18:
                    17:9a:4e:9d:d7:4c:32:fd:e8:0c:66:b9:43:a7:f0:
                    17:ff:10:8f:62:ac:f3:e8:e9:04:23:08:4a:0b:25:
                    46:b6:b1:ec:cd:ee:3b:19:9e:69:80:94:4b:1a:52:
                    b5:51:fe:4c:80:87:c7:a9:a3:e0:ce:bb:7c:83:5d:
                    a0:57:f0:6c:53:83:e6:f6:10:c4:45:6a:81:33:5d:
                    31:4e:28:b3:69:de:55:7d:4a:3c:49:08:dc:73:fd:
                    33:0a:b0:04:90:ee:b0:78:b0:14:0f:16:65:e1:06:
                    d5:17:ce:9e:d3:22:f9:d5:23:2e:39:76:67:4f:6c:
                    a3:72:97:a3:77:86:5e:52:8b:66:97:95:95:d2:af:
                    26:ec:96:eb:96:53:bc:5f:64:3f:6a:fa:2d:dd:89:
                    eb:a9:0b:ca:1f:47:69:f8:5a:8e:9d:a6:5e:ca:77:
                    94:d0:a2:c7:71:91:43:7c:a3:28:ed:da:cf:b0:d6:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:89:33:42:7A:87:94:66:86:C1:81:3F:D8:EB:9C:8A:79:C6:51
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a353a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:91:8e:fa:ba:f5:05:17:7f:7c:2c:a9:0f:6b:40:b7:2b:74:
         03:22:4c:11:5c:68:df:bf:0c:29:47:eb:78:68:cc:9d:0d:26:
         88:61:bf:f2:74:cb:b0:c3:27:28:20:c4:b0:77:ba:34:f6:f1:
         4c:5d:9c:7d:c8:ba:76:33:1e:fb:6d:c6:8d:9e:9c:da:eb:de:
         27:30:80:ce:38:29:24:46:8f:98:90:ac:b5:30:81:ea:63:8d:
         4a:38:e6:77:63:e1:f0:8d:d5:de:d1:a3:d6:94:b6:88:50:b0:
         d2:cb:30:8b:06:bf:f2:c8:86:f0:7e:69:3d:43:b2:80:ce:b7:
         92:c1:aa:52:ef:4b:a9:51:50:40:75:e3:84:75:65:6e:21:7a:
         e1:fe:ec:63:3f:fa:7b:95:a8:d9:d7:5f:71:c4:73:30:ce:f6:
         3a:7c:be:1a:83:00:8c:1b:04:0f:15:ac:72:ce:88:a4:71:85:
         fd:a6:a9:17:b0:4a:73:c7:78:b1:63:91:72:bf:bb:94:d6:0e:
         79:ab:b4:11:0d:26:02:97:cc:96:d5:1c:e7:9a:8b:49:a5:62:
         0e:3b:cc:9f:19:1d:3f:cc:b4:70:f4:3f:74:32:05:68:59:4f:
         14:de:3f:88:01:4a:ee:24:5b:5c:7c:47:14:fd:a8:fc:8d:9c:
         03:8b:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org