Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa
File:                     323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa (raw, json)
Hash identifier:          kPAMLvPU+sJTTM/NIq+XS89BUOogPW1QfLLi1C8hTRo=
Subject key identifier:   B7:7D:3B:38:AE:BB:45:DD:D9:19:50:58:FB:C0:9B:ED:CE:C5:E3:23
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       2DB8223696B3C690756EFFB2082E8D0F85BEC2F3
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa
Signing time:             Tue 05 Mar 2024 17:53:00 +0000
ROA not before:           Tue 05 Mar 2024 17:48:00 +0000
ROA not after:            Tue 04 Mar 2025 17:53:00 +0000
asID:                     272848
IP address blocks:        2803:5200:6413::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b8:22:36:96:b3:c6:90:75:6e:ff:b2:08:2e:8d:0f:85:be:c2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:00 2024 GMT
            Not After : Mar  4 17:53:00 2025 GMT
        Subject: CN=B77D3B38AEBB45DDD9195058FBC09BEDCEC5E323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:ce:27:a9:ff:b8:e7:ee:b0:2c:89:08:e2:
                    8d:80:45:14:7e:12:33:93:e2:71:91:e6:2f:8c:7b:
                    dc:a6:36:a7:4b:8d:1b:6e:9c:ed:8d:bf:cc:bd:0d:
                    a0:77:88:ba:58:c7:3c:da:e3:e2:27:05:cd:33:89:
                    5a:ef:da:db:1d:74:8b:b8:b3:e1:61:8a:2e:09:cb:
                    75:eb:22:cd:74:59:0b:96:65:87:06:4a:6c:8e:60:
                    e5:9d:6b:d6:28:d7:15:af:4e:95:ea:28:f2:04:35:
                    55:65:50:7a:d8:02:d0:11:3f:04:ab:2b:6f:c6:7b:
                    02:67:7a:b0:09:95:d6:1d:84:99:72:63:b8:d3:14:
                    99:cd:8d:16:06:45:7d:33:a2:7c:74:86:46:92:74:
                    f4:5b:a6:12:19:46:dd:84:fb:d4:c7:62:df:91:83:
                    2b:b8:81:92:7a:ca:e0:d1:f6:d7:5b:fa:af:3e:e4:
                    7d:cb:f5:f4:63:c6:d2:03:cb:d8:35:4c:7b:5d:59:
                    8d:ae:6f:86:c7:e5:5f:ca:c6:d0:64:bd:d2:f0:9f:
                    25:f6:dc:6c:34:81:e0:c3:61:65:dd:6a:e9:cb:3f:
                    94:0d:4d:43:c1:e1:c5:5e:b0:73:2e:db:23:ee:c3:
                    d1:36:09:8b:6c:fe:2f:6c:ae:11:a4:2e:ae:e0:46:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:3B:38:AE:BB:45:DD:D9:19:50:58:FB:C0:9B:ED:CE:C5:E3:23
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6413::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:bc:79:07:30:cd:40:1a:76:85:e3:b3:c8:de:f0:de:f3:
         e5:e4:24:36:6f:09:4b:22:68:d1:67:b7:7e:38:db:7f:b2:14:
         7a:94:b8:33:57:52:9d:6d:c1:30:4d:40:3e:f6:64:2a:c1:97:
         57:65:b1:e6:fb:26:76:6b:b4:c7:2d:ee:1d:5a:7d:c2:36:2b:
         b4:e6:1e:d6:57:c4:cb:2d:3e:e0:a0:6f:ce:8f:4a:89:1e:dc:
         47:de:c2:aa:cb:d7:93:5f:85:7a:f2:99:bd:90:3b:34:34:fd:
         d7:f9:c5:74:5a:19:fc:b0:ff:c7:20:d3:5d:79:c5:95:31:3a:
         da:ed:2f:ea:0a:8a:8d:66:db:a9:77:50:e2:a7:77:b6:3c:2d:
         69:50:69:50:43:27:55:4b:63:26:3a:86:82:c4:01:53:16:33:
         94:1c:d6:4c:f6:89:aa:96:7d:36:8f:13:88:f1:a3:1b:e2:1b:
         ba:e7:66:a8:32:11:ee:ba:1f:8b:ce:9f:41:69:a1:be:a8:33:
         85:ac:13:54:82:34:38:aa:9b:ab:e0:f9:2a:46:0f:a8:4e:74:
         e2:98:08:d0:e3:80:73:7a:12:9c:ad:df:bc:78:6c:aa:26:c7:
         df:ca:a0:ba:b2:a6:b1:47:11:15:6a:9a:36:da:2e:1a:75:1a:
         8e:2f:de:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 15 23:55:25 2024 by rpki-client on console-fra.rpki-client.org