Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa
File:                     323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (raw, json)
Hash identifier:          ldjf2FkD/gBgJQsIeMZPlzppwPis0W7LgbgzfazidLs=
Subject key identifier:   96:AC:40:0B:95:B4:23:96:6E:34:77:78:29:8F:33:7D:59:40:A5:F0
Certificate issuer:       /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial:       75B656863AB2F7F22E3F6CD19C56B35637EB3803
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     273013
IP address blocks:        2803:c390::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b6:56:86:3a:b2:f7:f2:2e:3f:6c:d1:9c:56:b3:56:37:eb:38:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=96AC400B95B423966E347778298F337D5940A5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:2c:53:2e:69:e8:8e:34:9a:36:80:a2:07:
                    8b:53:25:1f:d3:62:e9:46:c5:50:d6:3e:5b:ec:76:
                    65:a4:0e:fa:7a:2b:24:3f:43:ae:4a:cf:37:19:6a:
                    c0:90:26:97:9c:36:19:d2:98:cc:0b:c4:07:98:5b:
                    17:0a:ed:7a:87:5b:6e:3e:f6:8e:bc:6f:76:2f:cc:
                    ad:76:ac:5e:57:5f:21:08:9e:e5:6b:2b:4a:f4:25:
                    ae:79:e8:d9:48:ef:3e:12:c6:0a:ee:22:b6:81:ea:
                    6d:b5:e5:a1:06:c2:a5:6b:75:3f:61:06:49:b8:21:
                    a1:36:83:0a:96:4f:50:83:10:17:10:f0:96:7d:fc:
                    8c:d6:1d:92:40:14:47:3a:f4:07:b8:34:d5:3b:90:
                    71:1c:29:7b:f3:a0:0a:cd:d2:b2:1c:7f:59:a3:61:
                    1b:f2:6f:0c:5b:94:e8:eb:f2:6f:74:1c:18:8d:aa:
                    28:a0:76:23:db:fc:9e:bd:6b:9f:0c:9b:52:a2:a7:
                    dc:32:a5:86:39:dd:5d:a2:e7:7d:f6:a7:2e:c8:75:
                    c6:59:ed:d2:3b:d5:d8:3c:d4:ee:72:1f:0d:ec:5b:
                    ad:09:2f:0f:ce:7a:e2:f7:db:a2:af:69:97:68:87:
                    c2:32:63:22:17:62:a2:58:e5:6d:32:9e:a9:b1:ba:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:40:0B:95:B4:23:96:6E:34:77:78:29:8F:33:7D:59:40:A5:F0
            X509v3 Authority Key Identifier:
                keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c390::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:57:60:9c:a9:c0:ea:77:7b:0d:09:6d:01:09:88:72:81:e5:
         86:1c:b0:bb:e7:05:58:de:ec:fd:fe:6d:2e:40:39:76:52:19:
         d9:a7:e5:8c:e0:fa:e1:62:11:1d:c5:5f:61:0b:53:0a:c7:cb:
         1f:41:68:9f:f9:c6:23:c2:e0:ef:e7:fa:cf:bf:18:d1:51:50:
         29:aa:2e:d0:ab:34:5a:bd:22:e2:14:47:a6:26:cf:48:e6:77:
         26:94:58:46:39:92:92:f4:68:5a:bd:6c:ef:3f:9d:a2:c1:88:
         d3:0c:ea:a7:a2:5b:cb:ea:97:e8:60:14:00:d4:80:16:c8:2c:
         d5:d3:d4:d0:99:16:73:da:20:0d:22:4b:e4:bc:54:f7:fc:48:
         7b:82:86:49:c4:da:0b:12:ab:d5:33:92:ea:c8:c9:e8:c4:9b:
         22:03:05:02:f6:cc:bc:1c:51:a1:9b:d7:ea:ea:79:00:15:c8:
         d1:64:1d:be:11:3f:a4:8a:e3:f8:77:bf:5d:39:da:06:50:6b:
         09:a0:1b:69:cf:ae:95:00:05:13:d5:ff:4d:29:81:89:e0:b8:
         cd:5a:1d:16:a9:34:e0:ee:3a:46:e7:d3:c4:ba:89:8c:15:81:
         85:c3:c9:7a:6c:cf:e4:ad:ec:9d:28:f4:ae:5e:45:84:49:e4:
         02:2b:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org