Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa
File:                     323830333a356531303a3a2f33322d3438203d3e20323731393737.roa (raw, json)
Hash identifier:          Cwin3VPtM9J5fAYJubX0eSKZ8o3+Xg7UXJoNQEvxiT0=
Subject key identifier:   A0:A9:D2:88:47:1A:63:05:9A:67:11:47:5A:B3:DB:AE:B9:82:77:88
Certificate issuer:       /CN=12A0DE8A4244131397DB58771A7DFF385EAA5549
Certificate serial:       5671B18EB461008E3919DE3A44ACEA948533C8
Authority key identifier: 12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa
Signing time:             Tue 05 Mar 2024 17:50:42 +0000
ROA not before:           Tue 05 Mar 2024 17:45:42 +0000
ROA not after:            Tue 04 Mar 2025 17:50:42 +0000
asID:                     271977
IP address blocks:        2803:5e10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:71:b1:8e:b4:61:00:8e:39:19:de:3a:44:ac:ea:94:85:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A0DE8A4244131397DB58771A7DFF385EAA5549
        Validity
            Not Before: Mar  5 17:45:42 2024 GMT
            Not After : Mar  4 17:50:42 2025 GMT
        Subject: CN=A0A9D288471A63059A6711475AB3DBAEB9827788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:e0:fa:d0:71:22:94:e4:f2:24:b2:25:11:
                    c4:d1:cf:45:98:b7:c5:6d:0b:e9:d0:21:9a:9b:15:
                    7a:10:35:d5:df:e2:eb:cc:f0:47:a0:08:c2:93:82:
                    37:64:86:97:c9:da:13:bd:e6:d2:f5:01:cb:73:fa:
                    87:8c:e6:21:98:02:2a:a7:8b:23:ad:84:f3:02:c9:
                    42:31:4d:23:cf:88:38:9a:75:33:95:d0:61:47:74:
                    08:a2:c4:d0:5e:3c:29:d1:43:d2:96:ee:49:fa:aa:
                    bb:3f:04:c9:e1:21:96:09:d4:00:55:4a:4a:75:1f:
                    94:5a:33:ab:17:24:bd:4b:27:de:34:92:03:e7:31:
                    e4:66:a0:da:4c:a0:3f:76:cb:57:1c:82:96:cc:47:
                    fc:e3:af:13:2c:13:32:94:e8:44:13:6d:e4:f8:c2:
                    3a:68:9f:bc:8f:ba:d7:66:eb:f8:8a:79:e7:64:20:
                    73:b1:e8:dc:8b:23:af:fb:e7:0f:bd:43:34:f3:0e:
                    bd:fd:30:01:0f:6d:64:22:ee:f5:ee:cb:21:70:92:
                    0b:5d:b7:ea:b8:f3:d3:75:5f:76:bf:a0:40:3f:05:
                    e1:ef:7d:89:f5:88:75:ce:42:7a:54:84:8a:67:3e:
                    03:9d:76:4c:da:bf:17:b4:fa:49:f7:f8:f7:f6:42:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A9:D2:88:47:1A:63:05:9A:67:11:47:5A:B3:DB:AE:B9:82:77:88
            X509v3 Authority Key Identifier:
                keyid:12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/323830333a356531303a3a2f33322d3438203d3e20323731393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:49:dd:0d:4c:64:7b:26:47:76:25:bc:44:37:2b:e9:ec:
         a3:df:31:73:94:01:88:c7:44:40:ce:3b:7d:5e:1d:be:63:e6:
         be:39:ea:18:30:36:61:26:6c:82:e7:29:12:f3:05:fc:79:90:
         43:a4:23:6a:34:c7:ae:8c:55:5e:9a:56:b7:11:80:37:d3:0e:
         9e:d6:d2:a5:1f:56:9a:4f:41:d1:07:eb:ae:02:56:6a:b6:3b:
         9f:d6:56:78:9e:6d:d8:a7:c8:2d:05:2d:f8:91:0c:7f:6f:49:
         59:5c:4f:e4:ee:07:c8:03:99:af:6e:34:6e:4b:1d:e3:87:e6:
         3a:b8:32:6d:49:bc:0e:91:fe:23:fd:a8:be:b2:97:52:a5:60:
         a0:33:d1:ca:a2:a9:60:5e:2d:b2:91:bd:1d:fa:bc:e4:f7:0e:
         84:bc:cd:1c:b6:69:8d:b6:c1:c8:c9:5b:af:e0:b8:bb:6f:47:
         4e:11:ac:dd:73:2d:3a:04:88:4a:8f:24:8c:d7:d7:29:88:37:
         97:e7:53:d3:04:5f:4d:1f:a9:77:d2:46:4b:89:3c:47:87:26:
         35:e9:46:a6:ce:bf:62:c0:5f:b9:4d:bd:f4:c7:1e:df:d9:6e:
         b7:c4:a9:d0:60:d1:31:e7:43:72:80:bc:f7:72:d2:da:9c:f9:
         68:70:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org