Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa
File:                     323830333a633563303a3a2f33322d3438203d3e20323635373131.roa (raw, json)
Hash identifier:          81DZMDnCc0+IrpkVGy9OWF6cCx0dcvM8NMuE8gvnjP4=
Subject key identifier:   8D:DB:B8:CD:1A:F1:69:EE:02:DE:9E:4B:33:A8:AF:F3:AC:F9:14:B9
Certificate issuer:       /CN=12A120543D4989758BFB0561CAF5C57A23A55B08
Certificate serial:       7FE60D37F519E7E9FE349C731C126D9BC66850FE
Authority key identifier: 12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa
Signing time:             Tue 05 Mar 2024 17:45:08 +0000
ROA not before:           Tue 05 Mar 2024 17:40:08 +0000
ROA not after:            Tue 04 Mar 2025 17:45:08 +0000
asID:                     265711
IP address blocks:        2803:c5c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:0d:37:f5:19:e7:e9:fe:34:9c:73:1c:12:6d:9b:c6:68:50:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A120543D4989758BFB0561CAF5C57A23A55B08
        Validity
            Not Before: Mar  5 17:40:08 2024 GMT
            Not After : Mar  4 17:45:08 2025 GMT
        Subject: CN=8DDBB8CD1AF169EE02DE9E4B33A8AFF3ACF914B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:86:08:53:3c:21:f5:8f:10:4d:6c:d4:5a:
                    ad:ec:eb:0a:5d:58:83:17:42:3c:50:ec:86:d5:f1:
                    70:03:44:92:b2:e3:7e:02:21:79:05:3f:37:31:a4:
                    b7:db:72:ed:5a:f3:a3:3b:0e:da:cf:67:0a:33:ba:
                    40:bd:aa:bb:7b:db:23:f8:90:9d:a3:b5:93:2e:50:
                    5d:56:18:46:b0:fa:d2:74:f0:a8:8c:1a:93:0a:28:
                    db:49:4a:4f:84:a6:75:6b:0a:76:ba:5c:27:18:2b:
                    27:a4:cd:92:ea:e4:d0:5a:d8:4b:7c:98:c7:58:7a:
                    93:96:f1:0f:35:43:c1:10:15:97:87:b5:ba:a1:33:
                    37:a7:08:be:30:f4:1e:18:a9:85:eb:58:29:a9:f9:
                    6f:80:10:a2:bd:08:4a:8b:be:38:01:d6:bb:e7:c2:
                    55:22:6d:1a:fe:45:42:98:04:79:10:9b:54:a6:fc:
                    60:ef:ea:ec:d2:e9:e2:ed:da:0d:49:9e:74:b1:2c:
                    5d:48:fc:cb:74:ba:51:01:cd:f2:52:6d:1a:aa:0f:
                    7f:10:2b:ca:5d:1d:2b:75:0f:2b:92:2b:5e:b9:b3:
                    2f:ec:02:a5:de:84:31:22:48:4a:f4:77:77:59:76:
                    14:f4:9b:cd:0d:78:96:f9:9c:28:40:90:d2:be:a4:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:B8:CD:1A:F1:69:EE:02:DE:9E:4B:33:A8:AF:F3:AC:F9:14:B9
            X509v3 Authority Key Identifier:
                keyid:12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/323830333a633563303a3a2f33322d3438203d3e20323635373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:0b:c8:4a:65:93:49:04:07:11:23:d8:62:a7:e3:ae:41:
         c1:5c:13:b0:72:07:f7:92:c0:22:15:25:e2:bb:00:5c:66:ab:
         85:37:33:c0:2a:17:c3:bd:a6:2a:59:9b:fe:9f:3a:7d:66:79:
         7c:bd:89:a3:56:45:5a:d0:21:05:77:dd:45:37:f0:8d:11:fe:
         38:b4:fd:cf:b3:94:49:a8:50:7f:59:c3:dc:68:9f:52:ac:de:
         69:f4:f5:41:a7:fa:41:1d:18:33:43:f1:98:d3:49:1d:09:9b:
         59:64:c6:9f:ce:e8:03:94:9f:e2:ac:f2:75:44:a2:2c:e6:e4:
         5b:04:81:3e:38:e6:50:ec:56:e0:e9:46:ce:45:da:57:32:b0:
         12:cd:02:cd:79:c9:e5:49:fc:aa:41:35:21:e2:e6:3a:9a:06:
         24:eb:2f:95:d0:64:57:0b:cf:e3:6a:26:19:a1:a6:0e:03:ae:
         c1:8b:1c:41:d3:fe:37:09:59:52:4e:49:56:41:54:0f:1f:9a:
         77:f6:25:57:e0:1b:08:06:a5:ae:e2:25:ed:60:d9:b6:3e:3c:
         53:9a:ca:62:1d:9c:e7:0f:a9:f6:10:e4:62:2a:25:09:28:88:
         0c:4f:22:89:0f:17:22:8c:f0:14:45:5e:b2:37:26:79:8a:b8:
         d7:c8:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org