Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3332203d3e20323732313334.roa
File:                     323830333a633039303a3a2f33322d3332203d3e20323732313334.roa (raw, json)
Hash identifier:          LuEEoLoVe01Yz+a3JEbdiCvMbLjReYUi7IMOzPUWWL4=
Subject key identifier:   CA:EC:41:38:7C:32:D8:5B:75:83:B9:F7:2C:0E:BD:8E:09:E8:76:72
Certificate issuer:       /CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
Certificate serial:       67791C58B6E415E62F8B211402F06260BF17D684
Authority key identifier: B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3332203d3e20323732313334.roa
Signing time:             Tue 05 Mar 2024 17:50:05 +0000
ROA not before:           Tue 05 Mar 2024 17:45:05 +0000
ROA not after:            Tue 04 Mar 2025 17:50:05 +0000
asID:                     272134
IP address blocks:        2803:c090::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:79:1c:58:b6:e4:15:e6:2f:8b:21:14:02:f0:62:60:bf:17:d6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
        Validity
            Not Before: Mar  5 17:45:05 2024 GMT
            Not After : Mar  4 17:50:05 2025 GMT
        Subject: CN=CAEC41387C32D85B7583B9F72C0EBD8E09E87672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:b1:f1:92:92:8c:ac:66:95:2d:ab:2c:34:
                    5d:e5:d1:bb:a0:ce:b7:5e:65:34:d5:f8:09:20:a2:
                    83:15:58:2f:6d:c2:36:b4:a1:df:43:b7:94:1d:5f:
                    3b:0c:91:ff:80:8d:11:65:24:88:3f:f0:20:73:47:
                    ba:05:9f:3f:db:b9:6f:f4:18:d7:d2:3a:23:a2:d3:
                    12:bf:a4:d8:e0:2f:0a:9a:08:24:11:bf:30:02:30:
                    ac:1b:83:d2:b5:ba:21:11:7a:ec:60:c0:ae:92:38:
                    f9:4a:92:56:7e:27:50:05:77:6e:ac:af:ec:ea:2e:
                    49:97:80:49:47:41:b0:5d:f6:3d:70:e8:82:64:93:
                    24:cf:60:87:86:32:10:7d:04:d3:af:11:63:e9:29:
                    a0:bb:26:4f:89:a9:34:d9:0e:76:4f:4e:3b:10:59:
                    0a:4c:88:90:81:cb:1d:53:96:67:fd:e4:4d:39:11:
                    35:ac:96:46:36:da:ab:f4:b2:b9:60:69:7d:29:c9:
                    9f:12:3f:8f:83:e3:1c:ea:6f:5c:67:e6:3a:4b:bc:
                    59:c6:5d:d7:2a:55:7d:37:46:59:bf:2a:5a:4f:5b:
                    2a:24:a6:76:bb:46:a5:30:05:ac:e7:ba:de:ca:34:
                    1c:d3:ac:e5:a1:0b:78:16:66:c3:f7:82:75:25:00:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EC:41:38:7C:32:D8:5B:75:83:B9:F7:2C:0E:BD:8E:09:E8:76:72
            X509v3 Authority Key Identifier:
                keyid:B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3332203d3e20323732313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c090::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:f0:77:a1:e0:e4:54:27:9c:be:45:f2:19:29:8b:98:72:9f:
         db:a7:3e:7e:47:9a:eb:e1:7b:5b:a5:21:50:84:8f:41:9e:8e:
         1d:d0:66:fb:55:18:ab:79:2b:56:2e:69:40:72:df:07:04:bf:
         a5:91:bc:bb:27:98:6d:93:11:16:c1:f9:21:69:76:44:27:18:
         0e:e4:6e:eb:bd:1a:ab:32:97:ca:7f:d5:cd:28:3b:e6:ba:37:
         31:c2:d1:1a:d7:65:84:05:15:30:6a:d9:45:81:bd:66:44:8b:
         98:5a:f6:04:7f:f7:c9:b5:b1:da:9e:9f:5d:9a:e6:a0:1d:10:
         70:51:27:20:81:36:ad:02:8d:d8:ff:68:a0:90:44:e5:fd:95:
         db:8d:73:fd:c6:6d:15:8d:bf:ed:b4:7a:82:e4:47:12:b7:3a:
         16:83:b6:f5:b8:08:9a:3d:d1:36:4d:db:ec:6b:3a:50:4f:87:
         a4:33:68:14:46:da:ed:c0:d5:f6:cb:02:51:cd:0a:e5:3b:1d:
         91:5c:c2:eb:10:59:db:a0:e9:6b:21:67:ea:b8:51:b2:62:5c:
         7a:c5:d1:91:56:6b:86:54:7c:39:4b:77:16:a2:f8:45:d7:14:
         23:f5:dd:c1:41:c3:20:65:7b:82:b0:cb:bd:b3:48:a3:4c:ba:
         28:14:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org