Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f34372d3438203d3e20323733323338.roa
File:                     323830333a343135303a3a2f34372d3438203d3e20323733323338.roa (raw, json)
Hash identifier:          GkoIvVosExWhgb51o+LZxfW0cqAUeerdvRppwdfKVuI=
Subject key identifier:   2D:62:E7:57:93:FB:11:D6:89:7F:0A:EB:FB:64:30:CC:13:A6:8E:3C
Certificate issuer:       /CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2
Certificate serial:       5B1EEFD254A70E60FAA4DBC95D94DD624258B13E
Authority key identifier: 65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f34372d3438203d3e20323733323338.roa
Signing time:             Fri 18 Oct 2024 05:40:00 +0000
ROA not before:           Fri 18 Oct 2024 05:35:00 +0000
ROA not after:            Fri 17 Oct 2025 05:40:00 +0000
asID:                     273238
IP address blocks:        2803:4150::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1e:ef:d2:54:a7:0e:60:fa:a4:db:c9:5d:94:dd:62:42:58:b1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2
        Validity
            Not Before: Oct 18 05:35:00 2024 GMT
            Not After : Oct 17 05:40:00 2025 GMT
        Subject: CN=2D62E75793FB11D6897F0AEBFB6430CC13A68E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:6b:12:e4:ea:a7:3c:8c:4a:82:55:43:7f:
                    23:60:d2:5c:0f:6d:10:17:b0:b3:f0:20:27:10:7e:
                    b1:0a:06:18:57:95:13:f6:b3:a6:53:18:59:4f:25:
                    15:8d:6a:e8:70:26:0a:d1:ef:69:b8:cd:aa:dd:aa:
                    3a:65:b9:73:f3:90:ba:e0:15:6d:74:e2:c1:37:07:
                    de:8b:a1:1d:43:2b:82:e0:76:1a:ee:81:42:a4:ed:
                    9e:fc:0a:84:d2:96:9b:bd:c8:46:6b:dd:41:15:17:
                    60:e0:6e:d0:29:f9:91:69:17:9f:16:8e:4e:64:f3:
                    bb:25:e6:c8:1c:ff:46:e8:57:85:03:09:ec:1e:f1:
                    a0:65:db:f3:ef:21:00:dc:7d:7f:a3:fd:a0:cb:17:
                    35:5f:dc:a0:7d:bc:dc:f2:56:46:e8:1e:21:02:e8:
                    3f:f7:86:67:30:78:21:47:3c:82:d6:f2:4b:79:7c:
                    be:2e:07:0c:68:af:3d:f1:bd:7d:4b:14:6f:62:a3:
                    51:6c:50:9b:e5:73:11:42:e3:a3:f3:55:f6:d4:ce:
                    0c:b5:c8:cd:85:3e:e4:0e:bb:f4:8f:eb:57:6d:dd:
                    48:6b:96:33:a9:57:33:c0:d6:64:26:60:39:02:6f:
                    e9:f3:11:a4:83:63:ac:a8:68:0d:1d:ba:f0:5d:79:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:E7:57:93:FB:11:D6:89:7F:0A:EB:FB:64:30:CC:13:A6:8E:3C
            X509v3 Authority Key Identifier:
                keyid:65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f34372d3438203d3e20323733323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4150::/47

    Signature Algorithm: sha256WithRSAEncryption
         a9:c3:2e:43:92:2d:1d:ae:71:15:3a:d1:b7:b6:06:02:8e:cf:
         11:a8:0c:77:d7:89:29:99:05:1d:a2:bf:55:3d:50:82:29:62:
         dd:ec:45:93:cb:3c:f8:62:d8:5a:ed:0b:a2:82:cd:21:16:23:
         24:24:c5:16:a3:85:32:3b:7c:10:5d:34:41:8d:0c:cc:54:2a:
         f5:85:ee:ea:03:93:17:d2:56:bb:a6:ee:0a:8d:22:81:65:4f:
         cd:c1:d3:19:1b:f8:e6:5d:0c:01:a9:61:14:c9:4f:c3:e0:90:
         bd:68:7d:68:50:41:c3:17:a7:58:8a:d8:83:4a:7a:29:63:31:
         de:0a:eb:fe:51:90:14:79:ce:d8:25:f1:36:2a:17:14:7b:d9:
         32:48:7f:47:8e:c2:c9:08:95:5e:db:26:85:e0:05:ff:bf:06:
         39:c8:53:28:67:e6:19:50:d9:18:17:87:dc:cd:8a:9d:c9:be:
         d2:4a:d6:5d:eb:23:41:4a:a7:d7:35:a9:2b:3d:51:06:10:67:
         03:1a:85:d8:3a:b6:f0:24:98:bd:c9:f9:06:8e:8d:e0:52:68:
         15:dd:39:b9:ca:8f:90:f8:34:c4:ff:42:fc:94:54:ef:a2:ec:
         ec:85:40:88:5b:c1:4e:c9:32:bc:1e:b1:bf:18:5e:52:0e:08:
         5c:bf:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org