Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3438203d3e20323639383533.roa
File:                     323830333a313065303a3a2f33322d3438203d3e20323639383533.roa (raw, json)
Hash identifier:          ysCr4jeDBPqgJdB3VDlcUmpudQqYD2MkDbMtzgzeqO8=
Subject key identifier:   AC:9D:2E:D3:8E:43:30:13:2E:90:7B:84:48:7A:5E:73:E4:4F:68:3C
Certificate issuer:       /CN=A705052BB6C34BD8AC98D939073DF4308F336B54
Certificate serial:       644862889E573189194BA3130EED5908015A7C6C
Authority key identifier: A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3438203d3e20323639383533.roa
Signing time:             Tue 05 Mar 2024 18:02:00 +0000
ROA not before:           Tue 05 Mar 2024 17:57:00 +0000
ROA not after:            Tue 04 Mar 2025 18:02:00 +0000
asID:                     269853
IP address blocks:        2803:10e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:48:62:88:9e:57:31:89:19:4b:a3:13:0e:ed:59:08:01:5a:7c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A705052BB6C34BD8AC98D939073DF4308F336B54
        Validity
            Not Before: Mar  5 17:57:00 2024 GMT
            Not After : Mar  4 18:02:00 2025 GMT
        Subject: CN=AC9D2ED38E4330132E907B84487A5E73E44F683C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:6b:4b:19:00:d1:d7:e5:ee:dc:64:55:dd:
                    d3:b6:0b:00:55:5c:7c:87:a9:8c:d5:7e:dc:b8:5d:
                    50:46:52:9b:b3:85:0d:e6:a0:b5:57:45:77:66:fe:
                    2a:50:a9:83:50:f3:58:5e:79:26:3b:6e:6b:64:1d:
                    c2:19:14:cb:54:58:46:3b:cf:48:0c:7e:06:4b:64:
                    85:96:22:0a:f5:53:8b:7e:78:79:2f:dc:17:99:78:
                    79:e7:ed:7f:f9:b0:13:3b:e3:89:1c:fe:9e:0b:1d:
                    3f:39:23:b0:2a:91:bd:78:4d:cf:f1:a1:80:69:28:
                    fb:ff:5f:7e:72:05:90:71:92:9f:65:d3:f0:6d:24:
                    bf:f2:c9:b4:7a:8a:46:92:2d:e6:fe:c3:af:18:a7:
                    4c:a4:ad:4a:3e:8e:57:17:fd:56:b5:c9:dd:29:1c:
                    e2:b7:22:c7:08:e4:75:e4:b0:c3:5c:cf:31:83:22:
                    46:29:31:18:9e:9c:2c:50:ff:64:61:c3:b9:54:5a:
                    6f:0f:99:8c:9a:1e:c7:4d:b5:0b:4f:59:ce:fd:4d:
                    33:e0:37:c7:f6:10:87:f6:f4:89:9c:1b:da:1b:5c:
                    ee:90:d2:93:cb:3d:d0:d3:86:ae:a0:62:a5:7f:61:
                    52:bb:18:98:5b:8b:54:f8:33:db:42:68:31:2a:b7:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:2E:D3:8E:43:30:13:2E:90:7B:84:48:7A:5E:73:E4:4F:68:3C
            X509v3 Authority Key Identifier:
                keyid:A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/323830333a313065303a3a2f33322d3438203d3e20323639383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:64:75:c8:94:86:6c:4f:dd:07:53:07:f1:a7:77:b2:f4:3c:
         ff:22:92:5f:49:46:76:c9:42:5e:22:1e:1b:00:41:a2:e5:f8:
         aa:31:89:da:b8:70:46:55:f5:4e:d1:c1:cd:72:a8:50:6d:b3:
         02:84:ea:75:0d:d7:47:f8:b1:70:45:b3:e0:13:ee:d7:23:f3:
         f8:7d:28:2c:a3:f6:ab:9c:a7:14:99:1f:4f:4c:35:db:70:d4:
         58:31:4a:77:6c:4a:4e:c5:d9:2e:c2:d7:51:b9:73:5c:a0:3c:
         ee:c9:e8:d1:14:86:cb:e1:30:05:b7:bf:d7:69:24:b3:b1:ee:
         3e:86:28:c0:15:58:ed:58:07:d4:b3:bb:2e:7f:f2:9b:86:70:
         d3:1d:65:6b:02:0b:78:f9:67:a3:b3:e2:3b:6b:be:a4:b5:47:
         fd:45:70:6b:0b:b4:2e:79:55:df:00:25:49:06:ab:89:7f:a3:
         8e:82:e6:fd:86:fe:83:22:54:de:45:b0:30:fd:86:be:38:bf:
         db:a1:a3:96:a9:27:8c:75:0b:5b:a4:21:2d:d1:c2:ff:39:68:
         d4:34:86:55:74:47:43:f1:74:29:99:63:89:3f:60:e1:73:c5:
         92:4f:a9:51:57:c7:6f:9d:a2:b0:16:51:63:c1:81:7e:24:85:
         91:5c:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org