Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          Tx8xxddbdlVb0t80n3cFg6XqtIQmz53fFWpYNASaALM=
Subject key identifier:   A8:A7:2A:7C:5D:B7:22:94:5C:1C:81:8F:AA:37:32:FF:87:4F:92:4C
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       376EDBCEAF2D38EB1A438EC3B83277B3BEF23DBB
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 05 Mar 2024 18:09:13 +0000
ROA not before:           Tue 05 Mar 2024 18:04:13 +0000
ROA not after:            Tue 04 Mar 2025 18:09:13 +0000
asID:                     273113
IP address blocks:        2803:6850:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6e:db:ce:af:2d:38:eb:1a:43:8e:c3:b8:32:77:b3:be:f2:3d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Mar  5 18:04:13 2024 GMT
            Not After : Mar  4 18:09:13 2025 GMT
        Subject: CN=A8A72A7C5DB722945C1C818FAA3732FF874F924C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5f:f0:ed:81:e0:9a:ea:ed:f3:7a:16:25:8d:
                    c4:7f:1e:be:03:3e:be:49:c6:56:a5:b1:36:7c:11:
                    66:57:1d:81:65:5f:83:72:28:01:d7:4e:3f:87:2b:
                    16:51:a5:5d:b9:bb:9d:45:78:a7:92:08:e1:3b:fc:
                    86:0c:ce:ba:3d:46:75:fe:39:83:c3:f6:b2:1a:23:
                    75:2b:c4:44:c3:b0:dc:18:96:09:e5:d8:1b:45:94:
                    6b:ec:00:e2:10:44:c2:9a:38:9c:2e:75:3b:59:f0:
                    6b:1c:84:ca:d6:54:5c:c9:98:15:bc:de:95:fe:61:
                    18:32:cb:a1:18:43:d9:70:3d:98:30:77:ac:8f:62:
                    d0:a2:a2:c0:95:09:6e:58:92:52:aa:ef:86:51:06:
                    5c:5c:18:c3:9a:18:22:0a:19:15:69:5a:98:63:1e:
                    fd:6d:34:76:62:41:68:92:ef:b8:f2:f7:f3:b9:39:
                    40:03:5d:10:b0:57:d1:94:d0:a9:b8:58:15:a0:60:
                    7f:8e:56:e5:7a:db:7a:ac:a1:13:b9:31:5b:c0:ac:
                    d8:fd:71:dc:b4:10:a0:75:5d:44:c1:f3:9b:64:4e:
                    00:0a:10:c5:46:b6:a2:cb:cb:3c:65:a9:82:d2:0c:
                    f2:24:00:29:ae:be:2f:9e:ae:0e:73:ec:97:ca:3d:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:2A:7C:5D:B7:22:94:5C:1C:81:8F:AA:37:32:FF:87:4F:92:4C
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:92:a2:5e:41:19:7e:5d:15:98:25:10:8d:dc:b8:c0:df:
         63:ed:06:49:8a:90:d6:21:50:4e:1e:23:48:f8:be:77:e1:69:
         a5:47:b2:6b:7b:2f:81:05:d7:a3:bc:5c:3d:c2:bd:16:2f:51:
         15:74:f6:84:1f:5a:4d:d3:8a:1e:b0:75:51:12:6b:8d:16:6a:
         20:5f:7d:1b:02:de:b2:8f:d8:08:6a:49:33:ef:a8:bf:9b:51:
         19:b6:f8:cc:5b:04:61:c7:e6:d2:e8:55:e8:86:80:e0:2d:01:
         1b:60:91:97:cb:4d:44:8b:c6:98:52:71:5a:e8:db:23:43:69:
         7e:67:cb:f5:d7:f6:37:cd:0d:52:33:0c:0f:eb:78:98:a0:05:
         8c:99:e9:89:05:e9:74:7f:ec:43:32:5e:9c:83:da:e0:1a:fd:
         f3:4d:6f:71:4f:26:0e:a8:de:25:a1:72:ee:d1:b1:5c:ae:80:
         1a:96:14:a1:2f:00:e3:69:e0:b9:27:4f:b6:76:aa:5c:db:f6:
         1f:cf:f8:f0:af:f1:c4:b7:b7:78:f4:02:bf:d5:68:24:fa:43:
         9a:a9:0c:41:8e:de:eb:ae:a0:24:28:e8:4e:80:b5:cb:18:20:
         6d:06:09:85:f3:f4:43:42:aa:2c:c0:63:d7:31:31:2a:63:76:
         d8:72:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org