Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/323830333a323831303a3a2f33322d3438203d3e20323633323338.roa
File:                     323830333a323831303a3a2f33322d3438203d3e20323633323338.roa (raw, json)
Hash identifier:          vxc+ha4VuBYr/V5uB/giJ6zXj1wVXD6GBN2W3SFaE08=
Subject key identifier:   9D:87:1B:B2:FD:40:20:85:07:D2:E2:6C:84:5B:1F:BC:00:73:DB:BC
Certificate issuer:       /CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
Certificate serial:       5EA9AF989B26577D817F652C56E129FB65916C62
Authority key identifier: 82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/323830333a323831303a3a2f33322d3438203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 17:58:22 +0000
ROA not before:           Tue 05 Mar 2024 17:53:22 +0000
ROA not after:            Tue 04 Mar 2025 17:58:22 +0000
asID:                     263238
IP address blocks:        2803:2810::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a9:af:98:9b:26:57:7d:81:7f:65:2c:56:e1:29:fb:65:91:6c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82820FBD294C9FDD6A3105442F6C7F1A7573F8AF
        Validity
            Not Before: Mar  5 17:53:22 2024 GMT
            Not After : Mar  4 17:58:22 2025 GMT
        Subject: CN=9D871BB2FD40208507D2E26C845B1FBC0073DBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:85:31:f8:ae:22:ca:d9:fb:17:01:a1:c1:
                    84:70:39:2a:65:21:60:52:f9:fe:f8:cc:89:3d:b1:
                    6a:b8:9b:b3:d3:70:73:fe:b8:d1:73:a0:3c:f5:d2:
                    b0:61:4b:fa:f9:9e:c3:f7:ec:52:49:6e:cc:4f:e2:
                    45:80:d3:58:0d:ff:15:20:f3:80:00:11:0a:5a:b1:
                    13:6f:20:ff:22:a8:80:ee:45:8c:44:ec:d5:b1:da:
                    ba:44:ae:59:35:36:59:ed:db:48:38:73:ae:03:49:
                    3c:39:4c:7b:71:a1:73:2f:9c:68:ce:1b:6e:46:59:
                    9e:c6:55:37:2b:f9:9b:d7:63:ee:84:ea:f2:34:6d:
                    78:72:d6:68:4b:d8:bb:36:d3:b9:3a:59:5f:fc:d1:
                    15:21:d4:6d:7b:85:62:ea:51:3f:d3:c3:db:d5:87:
                    36:06:03:b7:8e:de:13:26:94:10:7c:96:87:50:46:
                    e0:2e:a6:ab:9d:5f:f2:80:35:db:8f:1d:06:a3:b5:
                    fa:7d:32:e5:dc:fc:6a:95:b5:75:17:fd:8a:48:06:
                    af:6b:91:5a:64:ed:cf:2a:51:ea:b0:af:1d:10:bb:
                    8d:82:92:88:3a:24:9b:c0:15:a2:42:ff:e3:3d:04:
                    07:2d:1f:57:2d:c4:5f:d2:1d:74:06:c6:5d:1a:b7:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:1B:B2:FD:40:20:85:07:D2:E2:6C:84:5B:1F:BC:00:73:DB:BC
            X509v3 Authority Key Identifier:
                keyid:82:82:0F:BD:29:4C:9F:DD:6A:31:05:44:2F:6C:7F:1A:75:73:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82820FBD294C9FDD6A3105442F6C7F1A7573F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACFAC9FA210B30E1ECDD0193071BDB4D415275DB99D7CFB9BFCD1A2DA4901C81/0/323830333a323831303a3a2f33322d3438203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2810::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:13:b6:d7:66:0b:57:92:76:df:a4:01:10:9a:5d:85:bb:af:
         46:f1:05:84:bf:2c:e8:7e:28:f5:8e:b7:67:2b:04:43:92:ce:
         c5:93:0b:e6:72:b4:7b:0d:c9:64:1a:e9:31:54:32:0a:16:3b:
         f4:ae:b1:13:ab:da:94:a4:75:88:11:0f:72:64:ce:16:fe:0c:
         a6:d9:94:77:24:71:3e:8d:67:6d:71:52:83:9b:00:07:e4:bc:
         2f:bb:49:0a:ad:c6:fc:ef:cf:63:f3:d1:66:51:3b:37:b6:dc:
         8c:3e:85:f2:a8:3c:9d:5d:0b:14:dd:e2:42:de:22:b0:62:3b:
         c7:a9:f0:f5:50:38:7d:89:6d:62:12:6f:56:f3:e3:b5:fe:ad:
         c0:32:80:fe:9f:bc:e1:1e:ba:45:78:04:1a:d2:65:4c:72:dc:
         5f:97:78:6f:5b:56:08:8f:af:6f:17:3a:6e:6c:0f:d4:c8:af:
         b4:13:ca:c2:51:d0:d2:6a:11:d1:95:4f:f4:54:5f:16:45:9a:
         4e:04:82:85:2c:dc:52:a3:98:b9:c3:60:ad:9c:f2:81:6d:e6:
         01:a2:2b:e3:77:f1:a2:ba:ba:23:1c:12:59:57:e0:d8:1d:46:
         a5:11:d6:3e:e9:1d:08:2b:53:77:cb:09:d7:fd:c3:b5:a8:bc:
         15:06:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org