Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3333203d3e20323733393733.roa
File:                     323830333a333064303a3a2f33322d3333203d3e20323733393733.roa (raw, json)
Hash identifier:          fgtJq6I4InwjnWnoIxZPUotSA2bcbQ/qgKqxmk3zMO4=
Subject key identifier:   95:35:FB:C6:EB:F3:9C:22:68:BF:E8:66:E8:45:53:20:89:00:FD:A7
Certificate issuer:       /CN=E54A2EEF6241629453F18B90C6B3027DCD1714B0
Certificate serial:       441EFB73F13AE26C6A5B095971F439F675D62AA6
Authority key identifier: E5:4A:2E:EF:62:41:62:94:53:F1:8B:90:C6:B3:02:7D:CD:17:14:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3333203d3e20323733393733.roa
Signing time:             Wed 06 Nov 2024 12:50:00 +0000
ROA not before:           Wed 06 Nov 2024 12:45:00 +0000
ROA not after:            Wed 05 Nov 2025 12:50:00 +0000
asID:                     273973
IP address blocks:        2803:30d0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:fb:73:f1:3a:e2:6c:6a:5b:09:59:71:f4:39:f6:75:d6:2a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54A2EEF6241629453F18B90C6B3027DCD1714B0
        Validity
            Not Before: Nov  6 12:45:00 2024 GMT
            Not After : Nov  5 12:50:00 2025 GMT
        Subject: CN=9535FBC6EBF39C2268BFE866E84553208900FDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:61:a2:c7:a9:cd:fe:a8:26:80:59:38:d8:
                    88:52:b0:43:dc:07:99:0d:cd:be:0b:2c:c4:6a:1f:
                    67:bb:de:66:b1:ca:03:8e:9b:31:57:2e:68:32:89:
                    7f:37:24:b6:cb:fc:25:10:a1:3e:33:fb:00:e2:e8:
                    c2:b7:d4:4f:d8:9b:f0:d4:c2:26:ba:99:13:34:7e:
                    d4:3c:f0:b4:d6:53:c2:4e:96:28:5d:55:1b:f6:1d:
                    2b:7a:2d:2d:66:43:59:e0:8a:8f:73:41:d7:5e:b3:
                    a0:4a:65:ef:43:b5:fe:e0:72:15:a1:c5:f7:e5:0d:
                    f4:f5:02:b6:c3:c2:99:d0:27:80:66:27:07:c2:7c:
                    e9:a4:c7:c6:62:e0:8f:85:92:24:18:e7:41:d8:42:
                    1d:c5:80:9b:78:97:a9:30:57:07:99:7a:4a:3e:36:
                    b6:54:7f:21:67:cc:c4:12:7c:5e:c7:0f:ab:96:ae:
                    d1:62:19:cb:10:70:00:c6:5c:d9:cb:1f:aa:31:d0:
                    2c:e4:84:ed:30:3f:96:25:11:eb:89:fb:3c:80:e0:
                    83:dd:55:ec:38:c2:22:5e:29:1d:ed:38:6e:eb:fd:
                    13:1e:99:be:2b:da:dd:c5:fd:c9:36:9a:dc:c8:9f:
                    61:94:9a:91:1f:ee:f4:d3:6d:e2:57:c6:cd:c6:a0:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:FB:C6:EB:F3:9C:22:68:BF:E8:66:E8:45:53:20:89:00:FD:A7
            X509v3 Authority Key Identifier:
                keyid:E5:4A:2E:EF:62:41:62:94:53:F1:8B:90:C6:B3:02:7D:CD:17:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3333203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:30d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:db:f3:f8:cd:60:0f:5a:ae:98:e4:90:50:5c:d5:7c:85:
         da:ec:78:42:cb:f8:43:9e:ab:40:24:e9:f2:a0:3c:f3:0e:5d:
         6e:43:23:90:b1:62:9d:e9:19:1d:cb:07:b5:be:cb:aa:33:c3:
         9f:b9:63:28:ca:e2:89:9c:81:3c:e8:a5:32:fc:d2:7a:8c:a2:
         47:fa:91:a7:57:80:20:e0:ff:bf:a3:ee:a3:b5:7a:6e:32:26:
         47:cd:36:b6:4d:1e:16:52:e4:d1:14:90:a0:e8:d5:4f:5c:a2:
         c0:49:a6:e2:6b:17:ba:d8:27:44:6c:1d:ab:42:12:0e:3e:15:
         70:de:2d:d1:20:7e:f4:da:07:7d:27:57:99:b5:6b:e1:b6:0d:
         32:b6:3b:c5:1d:04:a5:6a:00:14:32:53:0e:01:03:ae:2c:df:
         61:90:5a:ee:cb:44:96:16:09:37:c2:12:be:86:fd:88:d7:f8:
         16:e0:9f:bb:65:96:62:5d:6b:12:0f:7b:76:b8:d3:32:61:4e:
         00:e7:52:f9:3e:05:6d:05:3b:fd:21:6c:98:c0:fb:8c:0f:c1:
         ec:48:db:fe:cd:be:cd:7c:6a:ea:8a:0f:dc:af:36:91:f5:d3:
         2a:60:31:85:f7:9f:03:64:cd:11:22:98:7d:94:ea:c4:ed:27:
         e3:49:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org