Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa
File:                     323830333a626438303a3a2f33322d3438203d3e203238303037.roa (raw, json)
Hash identifier:          q92SRILRlDhnoS0Xb4FjsEykLBPcX7LtLvKZKm52IOw=
Subject key identifier:   D9:09:D6:F8:EC:C7:EF:FA:B6:64:5D:71:3C:91:B4:46:89:59:6A:B4
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       3550F6BB971D1E1CDF6D4B712B65F680719588F0
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:59:55 +0000
ROA not before:           Tue 05 Mar 2024 17:54:55 +0000
ROA not after:            Tue 04 Mar 2025 17:59:55 +0000
asID:                     28007
IP address blocks:        2803:bd80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:50:f6:bb:97:1d:1e:1c:df:6d:4b:71:2b:65:f6:80:71:95:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Mar  5 17:54:55 2024 GMT
            Not After : Mar  4 17:59:55 2025 GMT
        Subject: CN=D909D6F8ECC7EFFAB6645D713C91B44689596AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:ee:54:65:e2:28:77:ee:7e:d4:cf:e8:ae:
                    76:fb:74:df:32:3f:3d:b6:87:2b:a7:44:f0:c4:e3:
                    9c:4e:dc:4e:c9:11:3c:2d:41:39:e8:e0:e6:39:51:
                    a2:9a:e2:78:85:f4:92:4f:07:24:04:c1:36:94:2f:
                    8c:bc:57:3e:45:5b:c3:a3:7b:b8:20:28:e7:d7:8a:
                    b9:d0:a7:fd:1c:1e:bc:26:8b:a0:f2:b8:5c:a4:d9:
                    88:79:da:47:6d:96:e0:e5:49:a5:63:73:de:51:a8:
                    6e:c7:be:93:ca:99:21:f9:c9:68:06:63:ed:87:8e:
                    16:f8:10:83:0e:b2:96:f4:ac:b2:25:d2:8c:6c:cb:
                    00:f6:7c:82:31:e2:13:b2:f2:42:ee:e2:ef:13:4d:
                    f7:a5:15:c6:e4:f6:25:d3:ea:61:9f:03:05:5d:8b:
                    96:01:f6:a2:33:97:b4:f3:12:09:0e:3e:3f:bd:db:
                    c0:39:aa:c6:56:a1:73:f0:2b:dd:0f:f1:a1:24:59:
                    69:1e:c3:e5:ef:f7:4e:ef:ce:fb:61:e3:45:6d:d5:
                    94:6e:03:2b:71:6d:bc:c2:77:d1:b1:3d:ed:c4:ac:
                    05:bb:27:9c:34:e0:23:64:13:da:ec:15:05:74:b0:
                    f8:2d:d7:89:4a:54:8a:2c:3e:28:02:0d:ed:4f:2e:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:D6:F8:EC:C7:EF:FA:B6:64:5D:71:3C:91:B4:46:89:59:6A:B4
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:cc:2b:82:5c:b5:94:cc:0d:e1:90:1e:4e:89:69:e6:c2:
         90:ad:07:e7:3f:11:5e:de:a1:d2:a8:36:a6:8d:ad:85:bf:19:
         ea:80:b6:9a:c8:d0:11:f3:28:5b:98:a3:b8:6b:28:be:b1:a1:
         d7:7e:ea:1c:df:5e:54:71:ac:29:d3:a6:45:47:ad:16:8f:70:
         8c:86:9e:5d:95:09:17:a6:55:89:1b:7a:5b:69:4a:58:e0:9b:
         27:b1:ea:83:cd:a7:23:38:6a:31:06:4a:00:66:ce:26:66:49:
         9f:fd:2a:2d:61:87:d6:76:9a:2b:1a:e2:c1:66:4f:51:76:40:
         9d:ab:70:23:32:df:6b:d9:fc:80:d0:60:fd:91:c9:2f:c1:77:
         af:d8:00:57:2c:43:f6:e2:4a:ba:c9:db:91:f9:e4:60:e2:3b:
         58:ac:43:a3:28:a9:88:a5:02:81:61:38:2a:0d:2d:33:32:87:
         4f:05:01:fa:b8:b4:69:75:26:d1:46:3e:fc:88:d9:51:6b:39:
         22:bf:6a:c7:3e:c0:ce:e3:f0:24:c6:05:13:aa:ee:82:7c:da:
         ff:da:0e:dd:22:24:55:e3:20:02:74:17:6b:de:1f:aa:82:5e:
         f5:05:1a:a3:6a:3c:62:ca:fc:bd:99:70:c3:07:a3:f3:7d:b6:
         e0:89:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org