Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/323830333a353930303a3a2f33322d3438203d3e20323633313735.roa
File:                     323830333a353930303a3a2f33322d3438203d3e20323633313735.roa (raw, json)
Hash identifier:          UfiyImV4cDh3IYuyytJ5vh++4AwlPTY5DOpN7EYmaf8=
Subject key identifier:   C0:77:77:C0:B4:3B:0F:1C:40:AB:46:AB:4E:EA:64:0C:A5:36:41:96
Certificate issuer:       /CN=2B795AADFBF75B8B247797B9A50549F729589CFE
Certificate serial:       547C641608F5D52517209661E066BC458A35E458
Authority key identifier: 2B:79:5A:AD:FB:F7:5B:8B:24:77:97:B9:A5:05:49:F7:29:58:9C:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/323830333a353930303a3a2f33322d3438203d3e20323633313735.roa
Signing time:             Tue 05 Mar 2024 17:59:27 +0000
ROA not before:           Tue 05 Mar 2024 17:54:27 +0000
ROA not after:            Tue 04 Mar 2025 17:59:27 +0000
asID:                     263175
IP address blocks:        2803:5900::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7c:64:16:08:f5:d5:25:17:20:96:61:e0:66:bc:45:8a:35:e4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B795AADFBF75B8B247797B9A50549F729589CFE
        Validity
            Not Before: Mar  5 17:54:27 2024 GMT
            Not After : Mar  4 17:59:27 2025 GMT
        Subject: CN=C07777C0B43B0F1C40AB46AB4EEA640CA5364196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:6a:1b:75:b4:5e:80:77:d4:1a:1d:4d:a9:
                    13:b0:c5:07:00:13:85:45:3f:cc:46:0c:a7:d6:e0:
                    a3:1c:5c:0d:56:bf:4d:40:13:6f:b6:ce:24:8f:56:
                    f2:ce:5b:c5:93:f7:76:b3:87:e3:1b:85:b8:dd:26:
                    f4:af:1c:01:34:cd:c3:b5:59:c4:ca:a3:ae:d3:fa:
                    b4:7d:bf:55:2a:ad:03:4a:ce:77:e3:2b:43:d6:31:
                    1f:4a:49:83:56:84:db:a1:ae:b8:bb:c5:29:ff:0f:
                    9a:39:8f:14:ee:b3:a5:06:75:19:1f:9f:1a:43:cb:
                    b9:c0:7e:ef:06:1f:2a:f6:86:d0:4e:2b:dc:1a:a7:
                    95:34:c2:78:aa:8f:0a:83:b9:3f:88:27:35:72:bc:
                    55:ff:77:4a:fc:ca:ec:e1:26:c5:b1:18:6c:47:79:
                    ab:bd:6a:92:18:85:8d:31:66:51:96:ce:d5:c7:14:
                    3f:10:93:99:86:b4:d5:1c:5d:45:2f:fc:00:e0:58:
                    bf:ff:25:fe:7d:da:31:e9:bc:71:1d:ba:ce:29:00:
                    ea:52:71:68:b7:0e:2d:d4:ab:1e:57:3c:18:c0:ba:
                    b1:49:bf:6f:1d:2e:a8:84:49:b0:06:ef:f2:33:0a:
                    b2:26:16:e2:ad:85:e1:40:8e:69:22:01:cc:6d:82:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:77:C0:B4:3B:0F:1C:40:AB:46:AB:4E:EA:64:0C:A5:36:41:96
            X509v3 Authority Key Identifier:
                keyid:2B:79:5A:AD:FB:F7:5B:8B:24:77:97:B9:A5:05:49:F7:29:58:9C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/2B795AADFBF75B8B247797B9A50549F729589CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B795AADFBF75B8B247797B9A50549F729589CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B5494199C323CF085CE159364499F45B41B8BFAA7432C284D4DDE57F340CF0/0/323830333a353930303a3a2f33322d3438203d3e20323633313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5900::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:72:af:fa:66:c2:c5:bb:83:63:6f:3b:7a:35:cf:55:b3:
         6d:d3:85:4e:4a:24:84:67:cd:a3:3c:89:1d:a9:35:ed:42:ed:
         ab:0a:8a:73:85:10:c2:7e:ec:5e:2a:64:54:e5:b3:50:92:74:
         c4:ff:12:4a:11:96:26:0a:55:1b:3f:3e:a6:6f:dd:3a:b7:f4:
         6f:b9:fd:29:d5:5d:03:5e:b1:19:69:95:73:95:21:fc:80:59:
         29:0d:f8:65:8d:4d:c3:fc:65:90:92:e4:f1:b0:96:59:9b:e9:
         f9:a2:02:87:02:b9:5a:d0:80:eb:55:32:be:71:c7:70:5e:ea:
         d7:42:8f:18:7e:11:0c:6b:43:6c:ce:d5:ef:c0:88:85:a2:ea:
         93:6a:a3:ea:7c:91:71:d0:39:3c:85:c2:c0:c5:7e:5c:9d:07:
         1b:4f:8d:c5:60:2d:e7:8a:2e:23:8d:e1:47:f2:1c:e2:6e:e0:
         d2:d7:1a:f1:cb:2b:c7:4d:9f:01:29:a1:9b:7d:b9:a0:40:b1:
         09:c9:4d:83:87:b9:4b:14:24:06:b6:66:67:14:d2:ac:c0:f0:
         e8:d7:a2:c2:55:75:1d:c4:3f:8e:e3:47:b0:b0:b9:5e:22:15:
         cb:3a:65:66:8c:0d:00:23:dc:f3:82:52:75:95:03:d7:26:15:
         9f:cf:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:02:19 2024 by rpki-client on console-fra.rpki-client.org