Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
File:                     323830333a326135303a3a2f33322d3332203d3e20323733313830.roa (raw, json)
Hash identifier:          ki7lUCCOhgmGIvUFtaWZdZYBeCGPZFdH8C575Li5x1A=
Subject key identifier:   18:81:71:43:D1:E1:FA:39:CC:DD:B2:C2:D4:EB:4E:B3:01:16:8F:BA
Certificate issuer:       /CN=45036BDB7E22AA4777363E0285556F756CC67A52
Certificate serial:       226769BB959803563C7E2EA59DDFF873F79BB813
Authority key identifier: 45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa
Signing time:             Mon 22 Jul 2024 17:35:00 +0000
ROA not before:           Mon 22 Jul 2024 17:30:00 +0000
ROA not after:            Mon 21 Jul 2025 17:35:00 +0000
asID:                     273180
IP address blocks:        2803:2a50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:69:bb:95:98:03:56:3c:7e:2e:a5:9d:df:f8:73:f7:9b:b8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45036BDB7E22AA4777363E0285556F756CC67A52
        Validity
            Not Before: Jul 22 17:30:00 2024 GMT
            Not After : Jul 21 17:35:00 2025 GMT
        Subject: CN=18817143D1E1FA39CCDDB2C2D4EB4EB301168FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:e8:07:ee:19:cc:2a:0a:63:0f:06:2e:39:
                    68:4b:49:8d:fe:dd:a7:9f:ca:6b:66:2e:64:79:d0:
                    44:52:bb:41:fe:e3:04:3c:91:80:cf:81:0e:9b:a6:
                    85:56:8b:8a:1d:a7:a8:6c:8f:b7:84:a9:9b:bd:b6:
                    ea:9a:d2:c8:9b:c4:e2:02:2d:0a:d3:a5:54:13:c9:
                    9c:29:b4:d8:fa:79:61:fc:e7:82:b5:a9:6b:de:1f:
                    0f:03:02:1d:33:a4:ba:da:d6:24:09:11:92:99:97:
                    9f:55:99:6d:83:bc:87:17:43:b6:d9:34:2f:a2:90:
                    79:56:d1:7d:8c:8f:5e:e6:24:18:6d:66:7b:64:08:
                    70:30:c1:73:a7:4f:31:b9:e7:4c:c6:28:71:ac:8e:
                    3a:30:b2:99:22:5b:e5:1d:9e:7c:fe:b7:16:7f:9d:
                    03:6c:ad:4e:86:99:5e:05:17:60:5a:dd:a6:3a:04:
                    b8:19:cd:b4:68:5d:ac:94:5b:22:6f:45:57:5a:38:
                    3d:a7:b2:06:9a:e5:4b:0f:29:ec:59:1f:a0:57:23:
                    5f:d5:2f:a7:a3:2e:03:17:bb:37:ef:ad:c9:0d:89:
                    1d:38:c9:ff:63:50:f7:39:bb:f3:54:48:48:c9:50:
                    0d:32:3c:a3:bf:7b:9e:4d:a0:e1:25:a8:87:cf:ca:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:71:43:D1:E1:FA:39:CC:DD:B2:C2:D4:EB:4E:B3:01:16:8F:BA
            X509v3 Authority Key Identifier:
                keyid:45:03:6B:DB:7E:22:AA:47:77:36:3E:02:85:55:6F:75:6C:C6:7A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/45036BDB7E22AA4777363E0285556F756CC67A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45036BDB7E22AA4777363E0285556F756CC67A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DF02167A426893BC5FEA85E6CD3D296DEB2B9496DC3C6ECBA89F75EF4AC215D/0/323830333a326135303a3a2f33322d3332203d3e20323733313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:3b:bf:48:c4:a4:72:64:93:87:b3:2e:d4:bd:50:f7:fe:
         ff:2d:ac:fc:7c:0f:4a:85:39:0b:7c:6b:21:eb:1b:ae:e8:ff:
         25:95:97:52:28:30:48:eb:fe:a6:89:f0:63:2c:b6:7a:f1:67:
         07:5a:a0:f5:d0:12:d1:dd:a3:95:e0:42:6f:14:7e:1d:ca:e5:
         86:5b:88:60:49:65:07:1a:77:b9:e4:29:1f:bf:da:9f:98:53:
         bc:5e:b2:16:e3:0f:c4:66:8b:5e:6b:b6:3b:85:c0:cc:bd:8a:
         b0:20:86:e5:6b:56:0c:08:8e:d2:f3:11:65:65:22:7d:30:17:
         a5:4b:99:f6:57:9a:8f:16:30:f2:42:45:5f:06:9d:fb:7c:0b:
         bc:d5:94:b4:f1:19:6a:ce:48:66:a1:8f:f2:0d:49:d7:e4:dd:
         34:b4:64:4c:5e:73:7a:8e:d5:d5:69:f9:0d:70:2c:fc:24:83:
         22:4e:52:e8:25:f5:6a:47:4f:53:1d:f3:c5:ac:b2:9b:4f:f5:
         ce:58:94:cd:43:ad:4c:8e:fe:1f:c6:8f:05:38:32:d3:a1:c9:
         7e:6a:ba:58:32:33:cd:70:79:72:3b:73:26:11:90:3b:f8:74:
         2a:18:b7:2f:25:65:f6:77:9a:c8:5f:14:32:08:b6:37:2b:34:
         65:8b:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org