Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          hdc3pFX+GsP9Q8RWXbmGTtWKSOZ36zGOgC+9WsvtWdY=
Subject key identifier:   FB:FC:31:13:9A:40:74:2E:E2:83:13:98:42:F3:2D:E3:36:57:57:DB
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       2F3984A32AA38747EE56C8CD615C540078811916
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 05 Mar 2024 17:45:00 +0000
ROA not before:           Tue 05 Mar 2024 17:40:00 +0000
ROA not after:            Tue 04 Mar 2025 17:45:00 +0000
asID:                     272877
IP address blocks:        2803:2a90:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:84:a3:2a:a3:87:47:ee:56:c8:cd:61:5c:54:00:78:81:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Mar  5 17:40:00 2024 GMT
            Not After : Mar  4 17:45:00 2025 GMT
        Subject: CN=FBFC31139A40742EE283139842F32DE3365757DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:c7:3d:4e:91:7d:b7:29:dd:73:55:1e:66:
                    23:ce:d7:c9:7f:c8:ee:12:d4:d1:34:59:24:a6:20:
                    33:60:bc:0d:f6:56:88:36:44:e2:58:f7:b1:de:af:
                    dc:4a:4c:d0:7f:7e:c7:90:fd:52:ea:c4:db:af:69:
                    d6:ee:26:f2:c1:5b:36:74:15:ae:a4:65:be:11:d5:
                    a8:ef:e8:37:00:4f:25:f0:91:12:1c:cf:7b:5f:87:
                    49:b4:9d:b7:c9:2b:6c:39:8a:90:4e:13:d3:76:2f:
                    a5:3c:be:16:e1:78:13:87:32:fd:72:c4:e8:b1:74:
                    01:16:3d:6f:e0:2f:c8:38:70:ad:0c:d5:6e:8a:d6:
                    31:46:90:e2:5d:07:52:1a:09:4e:e6:90:54:a8:fa:
                    2a:3f:a6:9f:74:d3:87:ce:62:08:38:ae:dd:b5:8f:
                    0f:b8:18:fe:a9:ef:2d:3c:08:bd:82:66:a1:bc:58:
                    31:4a:da:90:2a:93:ef:99:9b:90:ea:27:a9:36:10:
                    f2:7f:d6:59:25:76:b1:66:50:57:cb:b3:a5:a7:96:
                    2c:17:5c:ae:69:e9:4b:d5:e6:88:fd:97:2b:2a:0f:
                    cd:72:b9:b7:a6:b2:8f:e9:26:54:5d:49:b9:88:c3:
                    5a:51:50:81:e1:06:38:ae:02:f2:b8:96:a8:b9:53:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:31:13:9A:40:74:2E:E2:83:13:98:42:F3:2D:E3:36:57:57:DB
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6230303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:b6:ec:5f:55:e2:6f:d4:d6:b8:7d:08:51:c5:be:54:fc:
         6d:1d:bb:04:f1:ec:16:2f:66:e2:d8:5b:cf:4d:d9:41:65:82:
         ef:52:8d:bb:4f:ae:4f:8f:e4:98:be:16:1c:16:53:3d:30:dd:
         ff:ea:51:97:97:26:cf:9b:5f:8e:78:53:64:07:53:c2:f9:4e:
         6a:22:26:d7:36:b6:1f:a5:3f:d8:1b:b1:2e:53:0b:ce:3d:db:
         d4:82:61:86:f5:21:43:a1:13:08:58:4a:36:ca:d6:5c:cc:6f:
         4a:6c:de:b0:f0:7b:ed:06:3f:b5:6b:f6:bb:96:39:bf:7b:15:
         f8:28:4b:fd:3a:72:c1:00:a6:86:84:fd:07:6f:eb:15:83:a8:
         0e:2f:a2:9b:7c:a4:b9:16:d3:a5:fd:37:ad:cd:db:9e:62:fc:
         b8:e3:62:c8:15:c4:d1:11:5a:a3:2d:a5:0f:57:0b:d2:0a:42:
         ac:8d:48:2d:bc:fd:7f:a8:b8:d0:dd:60:2d:95:83:aa:95:c4:
         3e:cb:87:35:09:eb:eb:c5:5d:cf:00:be:ec:54:2f:43:2e:83:
         ef:06:9e:05:e5:01:68:9d:21:41:77:38:74:e4:59:9d:07:56:
         b1:6f:62:9b:2c:fa:3e:ab:ed:bd:8c:a3:63:e3:0b:ad:1b:8d:
         e8:53:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org