Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/323830333a623239303a3a2f33322d3438203d3e20323732383638.roa
File:                     323830333a623239303a3a2f33322d3438203d3e20323732383638.roa (raw, json)
Hash identifier:          Ebeu9iYJOkQ1j5IyZEx5dvGkEYTQl/ydXK9c8ZcK7CY=
Subject key identifier:   30:EB:7C:AF:46:24:2C:14:FB:84:32:15:8B:BD:F4:4C:82:95:5B:A4
Certificate issuer:       /CN=33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4
Certificate serial:       52DB03D7B4F4C19F6C6437E4B95EB83C03745F0C
Authority key identifier: 33:FB:DC:29:F8:EA:02:92:74:E5:D3:ED:2E:2C:CE:16:FA:82:26:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/323830333a623239303a3a2f33322d3438203d3e20323732383638.roa
Signing time:             Sat 17 Aug 2024 21:45:00 +0000
ROA not before:           Sat 17 Aug 2024 21:40:00 +0000
ROA not after:            Sat 16 Aug 2025 21:45:00 +0000
asID:                     272868
IP address blocks:        2803:b290::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:03:d7:b4:f4:c1:9f:6c:64:37:e4:b9:5e:b8:3c:03:74:5f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4
        Validity
            Not Before: Aug 17 21:40:00 2024 GMT
            Not After : Aug 16 21:45:00 2025 GMT
        Subject: CN=30EB7CAF46242C14FB8432158BBDF44C82955BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:62:91:07:cb:81:d4:9a:07:98:40:e7:71:
                    d3:43:d2:de:ce:16:e6:d6:6a:38:be:62:18:7d:6d:
                    ed:21:2b:98:a0:84:1a:2d:4b:f8:ae:9c:2f:99:f3:
                    08:fc:49:34:39:90:04:4e:b4:fc:54:26:7c:b3:8d:
                    93:fd:db:d0:1d:ac:17:1b:bf:4d:ae:22:62:3f:2a:
                    9d:63:8d:97:3f:24:6e:5b:ea:16:6d:e0:eb:28:be:
                    c5:79:46:56:c6:35:88:96:b9:87:ca:7f:71:77:62:
                    43:16:9c:a1:48:9b:77:c7:3f:28:92:e1:82:b1:c1:
                    02:0f:d2:b6:ba:c5:a0:8f:29:42:e3:b0:32:d5:23:
                    a9:5e:67:33:75:dd:8b:07:f1:e9:33:29:e4:4a:9b:
                    6c:dd:67:6e:ba:27:53:84:16:4a:74:d8:b8:c5:93:
                    38:7d:33:d9:ef:b3:73:86:e1:e1:67:e9:78:8a:36:
                    36:c8:f9:26:a6:bf:1d:78:4c:39:dd:e7:b3:54:c0:
                    e1:b4:cc:57:c6:1c:4f:23:ae:6c:7e:b1:15:da:fd:
                    ce:25:51:81:dc:87:cf:35:b4:ca:b1:81:6d:07:d2:
                    21:b5:8f:3d:cd:c9:f2:26:35:36:c8:f6:33:0d:7c:
                    a1:55:55:c3:3c:c9:0b:f5:bc:c6:c2:d4:5a:97:3f:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:7C:AF:46:24:2C:14:FB:84:32:15:8B:BD:F4:4C:82:95:5B:A4
            X509v3 Authority Key Identifier:
                keyid:33:FB:DC:29:F8:EA:02:92:74:E5:D3:ED:2E:2C:CE:16:FA:82:26:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33FBDC29F8EA029274E5D3ED2E2CCE16FA8226C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7980C2E269CD9ACD1919CC28BA9169DD4D8EEDD482AE76A9126CCF6F54DB7CE0/0/323830333a623239303a3a2f33322d3438203d3e20323732383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b290::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:e3:9b:45:c4:ce:a8:7f:e3:9e:bb:74:ee:cc:2e:f4:83:f2:
         b4:bd:91:38:36:e4:7d:47:7f:c5:62:96:4d:9d:ea:23:f2:2a:
         1f:75:65:82:50:fd:34:80:90:e4:e8:06:31:c5:df:fa:46:36:
         9b:1d:2d:f8:a1:34:da:84:ba:58:cf:9c:41:b9:99:52:f6:a6:
         70:e2:5f:cf:bc:b3:9a:eb:8d:86:a8:31:01:3d:a1:d8:0f:15:
         33:d4:19:8c:6b:6b:35:c8:a6:ac:9b:0f:31:44:19:df:51:0e:
         8d:61:4e:27:a0:42:11:f4:3c:a0:ff:e5:24:fa:e9:29:81:76:
         50:d0:3c:b4:15:73:dd:a5:55:e3:c0:bb:61:c0:ab:64:1c:b0:
         72:53:83:aa:37:cb:46:d5:61:90:4d:df:a7:11:b0:e4:d7:c8:
         b8:97:6c:c7:d7:d2:18:0b:12:52:98:ec:87:17:bb:05:f1:f1:
         d9:ac:79:23:99:27:e4:79:a7:8a:7f:6b:7a:4b:34:d3:6a:73:
         4f:4c:3f:6d:1e:80:43:c6:29:f0:92:cd:77:fc:eb:2d:39:2a:
         3e:e0:1e:71:f8:a5:e9:ea:5f:34:39:3f:a2:09:d4:ff:bd:36:
         28:b0:c7:b6:45:8a:ca:58:9b:68:8b:fd:28:2e:16:c9:dd:35:
         21:d7:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:39:29 2024 by rpki-client on console-ams.rpki-client.org