Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f34322d3432203d3e20323733313338.roa
File:                     323830333a663435303a3a2f34322d3432203d3e20323733313338.roa (raw, json)
Hash identifier:          cZpehL7PWyfdFeuWQEGbeVWpeCB1rVXDkEJtVOcBTv8=
Subject key identifier:   92:36:3B:57:BD:87:D9:14:EF:A1:56:47:50:50:AD:01:40:01:34:19
Certificate issuer:       /CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
Certificate serial:       38BD8EA86CCDDA755152772CD866DD76898F55B9
Authority key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f34322d3432203d3e20323733313338.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     273138
IP address blocks:        2803:f450::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:8e:a8:6c:cd:da:75:51:52:77:2c:d8:66:dd:76:89:8f:55:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=92363B57BD87D914EFA156475050AD0140013419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:8b:d7:ee:eb:39:a9:bb:83:f6:db:39:15:
                    f1:74:81:a9:d0:c2:d8:67:0a:81:24:57:54:d3:5e:
                    36:ac:91:77:b8:cc:e6:61:d5:69:66:12:29:2f:c2:
                    ca:61:2d:d0:7d:56:7b:c8:23:49:85:32:0d:38:ad:
                    2b:75:5e:85:61:7d:2d:39:68:d7:eb:a5:dc:09:cb:
                    19:91:02:7a:70:f0:29:13:19:a3:00:cb:29:db:7f:
                    bc:f2:cb:2c:30:37:ad:17:46:fd:01:5d:7c:8b:39:
                    b4:d9:cb:41:63:9b:bf:e4:61:45:8e:52:8e:0e:21:
                    1e:f8:87:b0:f8:94:84:08:eb:0d:d8:4d:02:2c:51:
                    e4:16:c5:91:ec:b5:10:4b:81:9a:fc:db:46:ee:d3:
                    76:42:b4:d5:02:ee:cd:ce:c4:74:47:9d:4a:e8:ac:
                    bf:e9:83:fd:db:95:ef:75:c4:c3:95:14:af:3a:93:
                    3c:61:7f:5c:33:f2:71:b0:4b:f5:a0:fd:79:90:82:
                    ad:34:ad:e7:5c:73:25:16:21:f4:03:6c:23:86:f7:
                    43:9b:de:1a:bb:e3:42:5c:dd:79:d6:7d:87:60:1b:
                    2d:43:d9:cc:6c:ac:e4:cc:3b:b9:c9:f5:06:12:47:
                    a8:2e:65:cf:ac:07:e3:3c:38:93:1c:fa:d7:01:ae:
                    e6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:3B:57:BD:87:D9:14:EF:A1:56:47:50:50:AD:01:40:01:34:19
            X509v3 Authority Key Identifier:
                keyid:8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f34322d3432203d3e20323733313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/42

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:0b:f2:3d:2f:39:05:88:7c:78:09:21:76:3d:71:bd:ee:
         94:4f:b4:ea:a5:92:34:74:c4:b6:a4:69:4b:7b:3f:8c:9b:b7:
         4b:aa:89:ea:e9:f6:0f:79:94:90:45:cb:d6:94:2e:0c:39:8d:
         cc:24:08:f2:49:26:9a:37:a2:f3:3f:3c:86:39:51:4c:80:92:
         d5:c1:5e:f1:79:48:f4:0d:69:5d:37:1c:ae:4e:e5:b0:7b:b2:
         5d:b3:1a:ab:58:2a:9d:63:43:fe:2c:2a:54:fd:46:f6:9e:58:
         a4:25:25:7d:50:f3:5f:fa:ff:0d:5e:37:c9:b8:91:2a:c7:15:
         9d:8a:bf:90:5e:76:e6:fd:7e:f1:36:7f:05:c7:23:6a:6c:5a:
         d8:47:0f:16:fc:6f:21:5a:9c:12:22:48:c3:82:53:75:ad:bb:
         99:6e:6c:b1:3d:ad:c5:91:29:a9:d3:43:f0:16:25:ed:85:ea:
         e7:eb:f3:46:9c:30:3b:7e:06:c7:e8:b2:18:c5:10:60:9e:50:
         68:b2:90:be:73:c4:a4:67:f3:79:b8:b4:ff:65:1d:f9:6c:9e:
         14:13:35:6c:3f:25:c9:b6:6b:20:a6:06:d5:3f:e9:d7:72:e6:
         3b:05:e5:0e:de:d1:e1:6d:01:ec:ce:e4:73:5c:ab:a6:99:a0:
         7e:66:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:27:48 2024 by rpki-client on console-fra.rpki-client.org