Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/323830333a613331303a3a2f33322d3438203d3e20323732303632.roa
File:                     323830333a613331303a3a2f33322d3438203d3e20323732303632.roa (raw, json)
Hash identifier:          dPfReX+Fv+kfNZ/72oCj/iPBZkgt0i61cdYxowCJh5o=
Subject key identifier:   C9:95:5F:29:81:F8:AD:20:42:A7:AF:4A:E4:5F:A8:48:04:4B:F5:E2
Certificate issuer:       /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial:       519A7DA0912E6C4F5A44CDC6A99805BD2EB76600
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/323830333a613331303a3a2f33322d3438203d3e20323732303632.roa
Signing time:             Tue 05 Mar 2024 18:12:56 +0000
ROA not before:           Tue 05 Mar 2024 18:07:56 +0000
ROA not after:            Tue 04 Mar 2025 18:12:56 +0000
asID:                     272062
IP address blocks:        2803:a310::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9a:7d:a0:91:2e:6c:4f:5a:44:cd:c6:a9:98:05:bd:2e:b7:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
        Validity
            Not Before: Mar  5 18:07:56 2024 GMT
            Not After : Mar  4 18:12:56 2025 GMT
        Subject: CN=C9955F2981F8AD2042A7AF4AE45FA848044BF5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:ce:69:c7:be:92:d2:7a:bb:1b:e6:90:bd:
                    6b:83:99:71:39:14:c8:54:dd:33:dd:5b:40:95:af:
                    98:95:ce:34:f0:0c:65:e9:b9:eb:6d:24:86:b3:5a:
                    8d:59:c4:9d:46:59:3c:cc:67:bd:3c:4d:a1:f8:8e:
                    61:dc:65:9e:7f:bc:f2:da:3c:2c:06:f2:da:be:e6:
                    56:ee:c2:32:bf:d0:5d:4e:8b:e2:9d:98:d3:99:59:
                    b2:98:94:88:1f:8e:11:10:44:f0:39:31:0e:17:96:
                    d5:8e:1d:54:89:6c:33:08:34:c2:a7:09:13:94:72:
                    fa:bc:dd:b9:a7:f8:6c:73:ee:c0:da:36:20:02:e4:
                    20:cf:29:2a:21:b3:1b:a4:c1:ba:21:f1:49:50:8c:
                    35:41:9b:d6:48:af:f3:45:10:f2:b0:f4:b6:92:de:
                    7a:c4:90:02:c2:23:d5:0e:5c:19:a4:8f:4a:fe:9f:
                    94:73:35:1e:fc:65:d9:19:d7:9e:b1:e2:df:c9:fd:
                    30:e1:b4:b2:bb:ea:c9:1b:50:2a:6e:f5:47:52:3b:
                    7d:95:95:37:94:61:cc:2c:fa:31:c9:3a:9e:0f:79:
                    de:a2:78:d0:27:c1:ac:d4:60:10:47:13:31:27:54:
                    f4:7a:f7:99:77:d1:25:59:11:3e:a7:c8:df:68:65:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:5F:29:81:F8:AD:20:42:A7:AF:4A:E4:5F:A8:48:04:4B:F5:E2
            X509v3 Authority Key Identifier:
                keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/323830333a613331303a3a2f33322d3438203d3e20323732303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a310::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:48:3e:d9:81:81:b4:f4:da:ad:f9:de:8b:90:f1:4e:f1:
         ed:2b:9d:bf:01:4e:de:e2:6e:f8:2e:b2:ae:8e:2f:8e:23:c3:
         29:ab:15:38:28:91:38:83:62:ea:19:12:10:cb:d0:e6:dd:3f:
         b4:34:37:4a:81:23:d4:2c:1c:0b:d8:3f:b4:c9:d9:f1:a1:0f:
         15:d7:a4:92:77:ff:d6:5a:3a:d4:36:82:a6:ca:66:a2:d4:9b:
         9f:1e:8f:45:b6:fb:e7:72:49:f6:e8:f5:43:d6:9c:63:a7:9d:
         b6:c8:4d:eb:8f:c5:66:7c:02:0e:32:e8:cb:8e:db:c3:45:17:
         72:e2:a8:81:df:1b:06:1d:f2:0b:8d:0d:de:a2:74:2f:d3:54:
         26:84:62:6e:f2:07:4c:fc:91:f7:b0:ef:65:a5:41:73:1a:23:
         b8:38:ac:37:2b:42:4a:67:95:78:e1:80:ad:de:16:8c:e3:dc:
         71:ff:42:3c:3b:41:88:7a:b9:aa:ad:7f:35:ea:6f:48:84:f7:
         c5:11:bb:5f:2c:da:54:b9:da:b8:b4:f0:4f:a6:fe:0c:8d:37:
         59:71:c7:02:9f:a9:ad:4a:71:b0:23:63:74:27:51:a0:21:3b:
         3d:ae:ab:f4:53:f4:c3:13:35:ef:70:ee:5c:15:3d:0d:be:4b:
         87:48:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:36 2024 by rpki-client on console-ams.rpki-client.org