Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a313a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a313a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          BK2GhQFULSdU/GkhnmJVpatLAyvuiwdxbFsEX2SraWg=
Subject key identifier:   D9:C1:74:85:46:53:AC:4D:64:1F:0E:D4:24:3A:D4:D8:4E:60:32:2F
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       658312ED8CB9110EF841E702E2C245C9A504DCE2
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a313a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 05 Mar 2024 18:09:12 +0000
ROA not before:           Tue 05 Mar 2024 18:04:12 +0000
ROA not after:            Tue 04 Mar 2025 18:09:12 +0000
asID:                     273113
IP address blocks:        2803:6850:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:12:ed:8c:b9:11:0e:f8:41:e7:02:e2:c2:45:c9:a5:04:dc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Mar  5 18:04:12 2024 GMT
            Not After : Mar  4 18:09:12 2025 GMT
        Subject: CN=D9C174854653AC4D641F0ED4243AD4D84E60322F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:85:a2:cb:5a:75:e0:24:c8:e2:49:51:c1:
                    28:31:0a:87:79:17:45:de:35:98:17:21:5e:26:33:
                    c4:e0:0f:de:45:38:dd:6e:37:24:5d:7e:96:1a:c4:
                    32:ac:57:14:0a:59:c8:9f:f9:97:7d:84:71:a1:68:
                    32:50:81:19:1f:df:0a:0e:75:12:3c:ae:2a:cf:b6:
                    21:d8:39:bf:ab:4b:e8:0b:52:db:16:df:a2:95:f7:
                    3f:92:3a:4b:ca:c8:34:ad:b5:99:63:8f:e1:db:31:
                    4c:5a:4a:7a:e2:a5:1e:0c:02:b6:ba:0e:52:fd:6c:
                    ce:9d:e0:0a:0e:8d:fe:a6:63:f7:68:83:e4:e4:19:
                    dd:e4:15:99:b8:2c:d2:21:1f:7f:f3:b8:d4:9c:05:
                    5a:48:5a:22:ac:97:29:c5:a0:90:28:d5:d2:25:6a:
                    bd:50:51:cb:e4:f4:c3:9b:f1:4a:20:2f:c7:ea:48:
                    3d:97:b8:e6:51:a2:6d:1f:c5:5e:d6:56:45:c7:e7:
                    7e:33:d8:8d:39:ae:11:d9:68:c5:88:97:a5:98:ce:
                    bf:1a:02:23:32:a6:17:71:08:2e:5e:22:c8:7d:7d:
                    40:3e:57:de:e5:f4:94:90:a4:fd:c9:47:b6:90:ef:
                    2c:d2:71:c2:ab:a1:36:ee:24:cb:5e:a4:ba:07:d4:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:74:85:46:53:AC:4D:64:1F:0E:D4:24:3A:D4:D8:4E:60:32:2F
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a313a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:48:fd:9b:f2:58:43:6e:28:d3:d9:be:32:b2:14:2e:ef:5b:
         fa:28:42:05:cb:2c:20:1c:14:88:e0:b9:f7:57:f6:e1:a3:a6:
         93:0b:7a:dc:ae:70:41:87:db:38:ab:5d:93:40:44:04:3a:70:
         29:d6:1b:88:49:d9:c8:07:e6:91:c7:cd:3e:6b:3f:9c:c4:85:
         f5:cb:06:47:1a:a8:40:eb:80:c5:77:60:9c:38:b8:65:ab:00:
         c3:1a:d9:43:50:ea:c3:4b:e6:4c:55:e3:d8:a5:e3:c5:52:bb:
         d4:36:4b:bc:0f:5c:35:5b:3a:08:8d:39:89:3d:f0:55:84:c4:
         ec:9c:23:95:44:d5:71:bf:a0:03:01:5b:30:1e:70:3d:6f:44:
         cc:0f:b9:99:71:9c:21:90:5a:e5:5a:a2:07:a8:09:78:6a:21:
         c6:29:8b:99:d5:b7:3a:95:fa:83:58:5a:a4:76:40:55:ac:34:
         39:60:f9:08:5f:d8:bc:67:c1:31:c5:ab:9f:80:98:86:88:88:
         69:db:65:24:fb:8a:da:4b:56:88:54:af:fe:28:a2:54:a4:af:
         4f:bf:40:20:31:1d:ac:4f:74:a9:be:a2:cd:e2:80:18:e0:83:
         86:f2:e9:af:c7:d1:10:69:16:e1:47:48:b3:44:b2:51:34:be:
         80:7c:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org