Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3332203d3e20323733303030.roa
File:                     323830333a356439303a3a2f33322d3332203d3e20323733303030.roa (raw, json)
Hash identifier:          OqoysxiK5LM/2QUI/f8u0U24svII7Sf6+Ml+W77XHqM=
Subject key identifier:   D2:F3:15:D6:CB:75:33:3B:F6:21:39:E7:28:5C:EF:B6:3D:88:1C:26
Certificate issuer:       /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Certificate serial:       7F7715AE48AAD541EE8C243200FEFF6361349B78
Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3332203d3e20323733303030.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     273000
IP address blocks:        2803:5d90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:15:ae:48:aa:d5:41:ee:8c:24:32:00:fe:ff:63:61:34:9b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=D2F315D6CB75333BF62139E7285CEFB63D881C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:10:12:7d:ed:78:71:aa:27:01:65:15:a3:
                    aa:3b:6a:90:9d:ef:73:99:d3:8c:2e:d3:8a:60:f8:
                    a5:80:f2:32:15:d8:43:2e:01:7a:15:0d:dc:32:bb:
                    64:81:53:b4:36:03:1c:5d:09:8d:28:76:f9:c4:9b:
                    61:33:87:40:1d:5b:37:a6:66:09:12:33:0f:a8:8d:
                    a3:c0:b4:9c:44:f6:6b:64:d4:85:e0:81:c6:58:29:
                    c8:a8:6c:22:03:67:9c:a0:eb:b5:27:b8:58:ba:ee:
                    78:ef:d3:da:86:c3:f7:36:9f:55:16:6a:95:a6:45:
                    e8:54:d7:ac:20:51:26:34:3f:26:7d:45:a9:d7:de:
                    b2:ca:cf:85:f2:95:12:08:af:a8:dc:4c:04:10:f4:
                    aa:70:6c:08:da:85:05:c8:39:e0:b1:a5:17:34:d8:
                    ae:31:ba:d0:e3:db:3d:23:0d:e3:3a:bc:3e:db:1b:
                    70:ad:a3:f1:e8:8e:3e:30:2a:8c:b1:80:f8:8d:16:
                    70:61:1a:03:7e:76:38:58:41:1a:fb:47:49:4d:d4:
                    47:17:af:70:e1:0c:30:63:d7:c4:98:f3:1d:62:6a:
                    90:78:fd:fa:60:bb:8a:63:9b:45:99:c4:b9:60:d6:
                    02:7c:e6:e8:58:32:4c:b2:40:39:26:79:03:cc:ef:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:15:D6:CB:75:33:3B:F6:21:39:E7:28:5C:EF:B6:3D:88:1C:26
            X509v3 Authority Key Identifier:
                keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3332203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:93:68:8f:d1:f6:61:00:34:23:a4:4f:25:e8:05:6c:df:
         7c:28:9f:91:9f:1b:7e:7e:7b:c1:6c:ae:9a:92:57:af:b4:85:
         60:86:5b:14:ae:9e:9b:6a:a4:a7:47:ef:ba:27:5f:e3:36:58:
         4b:83:2b:bf:22:0b:9a:e4:21:d3:0f:fe:98:11:71:aa:7a:75:
         09:7a:3c:43:ce:64:1f:c3:ed:42:ea:e8:10:90:0c:d1:8c:b9:
         3f:4d:88:75:d0:26:77:3d:b8:12:c2:e3:8d:63:3a:43:ff:4c:
         90:fc:8b:5b:19:54:62:bc:c8:2b:c6:d9:f4:0f:36:4a:11:52:
         0a:3f:0e:1f:ee:4a:54:e8:3b:d8:bf:ca:05:ad:d7:fe:dd:e0:
         ea:73:ff:a9:06:b3:80:14:53:71:0d:33:18:e3:de:bb:d5:7b:
         a2:f6:92:50:f7:29:4c:f2:fd:e4:9c:a0:8a:b1:9b:c9:99:00:
         34:68:96:ee:f3:f7:85:9d:86:7c:a2:9b:20:5e:3a:6a:1f:07:
         c9:47:6b:5c:95:ba:3f:a4:bb:77:fe:9d:ff:63:01:05:4c:d1:
         2b:52:b3:5e:33:c2:11:66:e2:72:de:6d:72:46:26:ea:2d:29:
         d7:1b:89:a3:84:10:32:c9:ba:22:94:9a:e4:61:0f:b1:bd:d2:
         b0:01:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org