Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa
File:                     323830333a333839303a3a2f33322d3438203d3e20323732383039.roa (raw, json)
Hash identifier:          AEwxCaZXrV58QCFs8C3C9kqga1Jg/88bSwHC5lJvAks=
Subject key identifier:   45:1D:8A:06:06:5F:CA:57:A0:88:35:19:A6:55:97:78:95:53:CC:3F
Certificate issuer:       /CN=7611AC1988DA893F2DA7552DA8EA8121DAED841D
Certificate serial:       2451F14B21C87551AAB9E1785F03ADF54E47D1D7
Authority key identifier: 76:11:AC:19:88:DA:89:3F:2D:A7:55:2D:A8:EA:81:21:DA:ED:84:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa
Signing time:             Tue 05 Mar 2024 17:40:27 +0000
ROA not before:           Tue 05 Mar 2024 17:35:27 +0000
ROA not after:            Tue 04 Mar 2025 17:40:27 +0000
asID:                     272809
IP address blocks:        2803:3890::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:51:f1:4b:21:c8:75:51:aa:b9:e1:78:5f:03:ad:f5:4e:47:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7611AC1988DA893F2DA7552DA8EA8121DAED841D
        Validity
            Not Before: Mar  5 17:35:27 2024 GMT
            Not After : Mar  4 17:40:27 2025 GMT
        Subject: CN=451D8A06065FCA57A0883519A65597789553CC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:a2:eb:99:c7:ad:bb:f9:06:5e:4c:0b:36:
                    81:a1:13:f5:61:25:7a:c9:47:85:1f:34:f0:9c:95:
                    36:ff:97:45:7c:06:35:92:8f:9f:bc:ab:b7:35:cf:
                    c6:74:17:10:b5:45:22:01:94:a9:05:be:22:21:c8:
                    17:80:a3:45:52:0a:00:28:47:b2:be:df:4f:f8:ad:
                    13:a2:e7:25:a5:7d:a5:72:fe:fb:44:80:0d:a4:c3:
                    d6:59:1d:29:74:4a:e1:52:8f:7d:83:ee:1c:e7:97:
                    49:89:39:c0:74:c4:f1:3d:13:32:15:5e:5e:25:b0:
                    64:66:8d:06:b9:f5:af:6d:51:0f:da:94:df:87:89:
                    8c:d3:d5:4c:cd:7d:38:a7:a2:69:5e:d6:3a:f4:e5:
                    5a:78:8e:4e:1b:52:ac:b7:32:a5:7a:4f:76:ae:3a:
                    82:c4:80:d8:43:47:c9:12:eb:9e:20:f5:94:c5:0a:
                    9c:8f:f8:de:e1:54:42:68:36:42:23:7f:be:61:20:
                    75:c7:71:c8:34:f3:b5:1d:f7:52:6b:6a:3c:55:93:
                    7d:75:d5:a6:46:6d:a3:52:18:4a:b0:9f:3a:b9:d3:
                    50:ba:eb:1a:e9:99:dc:89:47:bb:13:6e:36:a1:93:
                    a6:b2:c7:d1:c2:89:8a:02:93:cb:da:2f:94:2e:ea:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:8A:06:06:5F:CA:57:A0:88:35:19:A6:55:97:78:95:53:CC:3F
            X509v3 Authority Key Identifier:
                keyid:76:11:AC:19:88:DA:89:3F:2D:A7:55:2D:A8:EA:81:21:DA:ED:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7611AC1988DA893F2DA7552DA8EA8121DAED841D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82150554D3A869C55931CC28700E735BE38C5BC505EF6428680F571CC07E3C00/0/323830333a333839303a3a2f33322d3438203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3890::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:83:ef:bb:e2:67:14:05:a8:20:69:f8:8f:89:1e:f5:51:95:
         f5:1e:26:61:02:2e:7c:83:31:e0:6d:6d:7e:6d:5f:f0:af:41:
         4e:f5:e9:fd:b7:02:d6:b3:b0:f1:ac:24:31:03:28:17:d0:e2:
         e0:9f:4b:58:25:27:bc:9c:c2:9c:7f:cd:57:b1:06:9e:24:8a:
         40:5d:84:63:b4:e7:dc:b6:ac:64:f5:a6:89:d3:f6:4d:01:39:
         9d:04:01:e9:bf:2e:dc:11:ea:79:a0:14:16:1a:11:36:34:8c:
         42:fe:25:c6:b5:b9:5f:8e:42:5c:f7:27:3b:1f:51:ac:38:9d:
         41:08:d2:e9:fe:4f:d0:5e:15:38:43:7f:c4:49:74:98:10:7b:
         8c:6d:70:6a:74:39:c9:be:fc:15:67:3b:ec:16:c0:4e:9a:25:
         db:fa:81:42:d9:92:79:80:14:73:ab:52:8d:63:3e:76:9a:37:
         49:f8:5b:78:32:6b:8f:cb:a1:ee:16:a4:bf:94:4c:7c:6d:07:
         7d:2b:10:bc:c1:5c:be:2e:57:d2:cd:cf:32:9e:5e:83:4d:4d:
         c1:b9:c3:74:65:b9:84:2e:60:91:e9:fe:cb:5e:12:c8:dd:c4:
         b5:04:d2:cb:8f:2f:07:6b:67:e5:1f:d3:d4:5f:04:4d:d8:24:
         99:62:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org