Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/323830333a313265303a3a2f33322d3332203d3e20323639393234.roa
File:                     323830333a313265303a3a2f33322d3332203d3e20323639393234.roa (raw, json)
Hash identifier:          t8LJGQ69u1KfWDqwDNeP+zCIFbgdaHRit0QZqxmUCqQ=
Subject key identifier:   B8:2C:97:43:7C:59:DB:C1:96:67:06:90:C6:A5:68:81:54:11:B8:D6
Certificate issuer:       /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
Certificate serial:       2FCAEDA5C9EF9E714B2E9199AC950FFF6CC8A1D5
Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/323830333a313265303a3a2f33322d3332203d3e20323639393234.roa
Signing time:             Tue 05 Mar 2024 18:16:12 +0000
ROA not before:           Tue 05 Mar 2024 18:11:12 +0000
ROA not after:            Tue 04 Mar 2025 18:16:12 +0000
asID:                     269924
IP address blocks:        2803:12e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ca:ed:a5:c9:ef:9e:71:4b:2e:91:99:ac:95:0f:ff:6c:c8:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
        Validity
            Not Before: Mar  5 18:11:12 2024 GMT
            Not After : Mar  4 18:16:12 2025 GMT
        Subject: CN=B82C97437C59DBC196670690C6A568815411B8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:8c:60:4f:a9:05:29:46:1d:e5:c9:4d:69:
                    6a:ea:4b:ff:c7:f1:b8:56:f4:37:c9:5b:bb:7d:ae:
                    d5:61:42:80:0f:94:f5:85:8e:39:05:b1:26:1c:d2:
                    44:b5:35:de:b5:3c:00:cc:88:0c:7c:ef:4b:dc:c3:
                    8d:be:96:88:8d:ab:96:4a:15:f6:06:79:73:a0:67:
                    9d:d9:88:dd:bd:c8:c6:6e:b2:f9:d3:29:7c:5a:92:
                    54:1f:0e:47:aa:53:af:ce:dd:b2:d5:7d:e2:17:8a:
                    e9:2e:40:e4:17:8b:4b:9b:3f:2b:b6:fc:60:c1:45:
                    5a:25:2b:8e:c2:5d:5e:d7:af:20:b9:76:bf:6d:d2:
                    61:27:30:5c:d6:b5:1c:9a:58:b5:6a:67:d8:ff:0b:
                    56:90:fb:34:2b:df:d8:71:76:78:81:e3:21:63:bb:
                    72:0a:bc:b2:fc:7c:a0:3b:fc:9f:ee:5f:df:3b:39:
                    6e:ca:ab:f6:6a:66:e7:48:fa:40:b6:59:16:98:49:
                    55:36:53:bf:26:fd:f8:f9:71:eb:ac:60:f0:b6:8a:
                    3a:4c:54:cc:90:e4:8f:e7:46:7b:5f:8c:4a:ec:68:
                    49:e1:9e:70:8d:00:cd:33:c7:97:16:e9:cb:5c:02:
                    25:44:98:7f:d7:58:6e:23:ae:4f:d3:89:83:ba:05:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2C:97:43:7C:59:DB:C1:96:67:06:90:C6:A5:68:81:54:11:B8:D6
            X509v3 Authority Key Identifier:
                keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/323830333a313265303a3a2f33322d3332203d3e20323639393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:12e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:73:84:1c:16:a6:1f:59:28:b0:4d:9c:d9:98:96:38:ef:9e:
         33:a1:a6:da:e3:df:71:64:1f:5e:c3:df:34:47:3e:2e:e9:de:
         c9:1e:2b:00:57:08:0d:45:a1:26:54:4e:20:2f:a2:4b:2f:1e:
         7e:bf:da:5d:55:99:9f:9c:30:bf:81:ed:4d:51:d0:fb:88:c4:
         19:fc:b3:39:8a:4c:2d:22:42:1f:42:a1:4c:be:35:db:08:7c:
         e8:41:42:9f:58:25:51:55:6e:e1:b9:7d:25:eb:87:2c:b5:27:
         9e:fd:c0:d7:ce:3d:7a:65:1d:37:af:69:d9:c1:f5:5b:44:e3:
         e7:2f:3c:6d:2e:d6:50:3a:1b:c2:4f:4b:21:78:7a:4d:14:fc:
         9b:00:02:c1:7c:dd:9b:b8:4c:ff:e5:30:b4:91:e6:77:0d:e4:
         e5:fc:75:98:76:68:30:d4:f1:66:d4:37:23:6b:68:3a:fb:0b:
         60:e9:ab:a1:df:93:46:7f:ab:2c:ab:99:e2:d2:53:6f:5c:9d:
         c0:3e:17:86:29:57:ba:2b:e1:98:fd:dd:f9:70:ef:4d:f5:8b:
         b6:81:8b:3b:ff:13:5e:e9:2f:c4:1c:e2:e1:84:e3:36:41:4a:
         94:c4:8e:7f:d1:a4:57:5d:d6:99:84:f7:9d:33:2e:99:fa:10:
         47:58:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org