Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa
File:                     323830333a393230303a3a2f33322d3438203d3e203136353932.roa (raw, json)
Hash identifier:          1+2NpsEcpml/1PSISG4mrANJ6QKCtFQZff07JjO0mwU=
Subject key identifier:   C5:F3:5A:83:7E:2D:3D:E1:75:9E:8B:EC:EF:ED:13:85:57:98:63:15
Certificate issuer:       /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial:       6A802E5B8389E42254BA135BA524F1E6155FB6EE
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa
Signing time:             Tue 05 Mar 2024 17:45:05 +0000
ROA not before:           Tue 05 Mar 2024 17:40:05 +0000
ROA not after:            Tue 04 Mar 2025 17:45:05 +0000
asID:                     16592
IP address blocks:        2803:9200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:80:2e:5b:83:89:e4:22:54:ba:13:5b:a5:24:f1:e6:15:5f:b6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
        Validity
            Not Before: Mar  5 17:40:05 2024 GMT
            Not After : Mar  4 17:45:05 2025 GMT
        Subject: CN=C5F35A837E2D3DE1759E8BECEFED138557986315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:c8:35:e1:b2:f4:9c:ac:a6:67:0d:18:62:
                    ca:ba:d2:01:69:e8:b8:9f:e7:7a:35:61:69:62:15:
                    bf:de:a5:ad:f5:ea:6d:80:34:6d:e4:8a:e3:00:2f:
                    10:95:75:9c:a9:7e:41:c6:d4:bf:3b:ec:e7:03:d7:
                    bd:29:a5:32:49:b2:83:95:4e:54:d5:35:0f:3e:96:
                    41:66:4f:02:dc:0c:4d:0f:40:fb:3f:47:9f:03:84:
                    86:49:9b:e0:d7:d7:94:b6:da:d8:88:8e:7e:95:da:
                    af:0b:93:ce:c6:02:6c:7b:94:97:1c:22:11:e1:d7:
                    4e:85:ea:1f:cd:07:9a:9b:e1:78:93:7b:08:fc:20:
                    18:fb:10:2f:ac:c9:fe:77:58:85:3b:fa:c8:b7:26:
                    84:a7:28:eb:91:41:ca:d6:32:bf:a9:18:fe:25:8b:
                    cf:df:54:ea:2f:5a:d3:40:62:d8:ae:b8:80:d1:46:
                    9f:e0:3d:c2:76:49:bd:19:76:64:b2:8f:dc:48:2f:
                    0c:9e:ae:73:43:90:44:32:88:f6:7d:2f:91:2b:92:
                    19:c8:fe:80:ae:53:a6:22:6c:ee:5a:28:d4:41:8d:
                    3d:ef:2d:22:5c:19:f2:17:0f:84:e3:7b:57:bc:83:
                    e3:28:82:20:e7:1c:19:af:9a:32:8f:5d:fa:df:e7:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:5A:83:7E:2D:3D:E1:75:9E:8B:EC:EF:ED:13:85:57:98:63:15
            X509v3 Authority Key Identifier:
                keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/323830333a393230303a3a2f33322d3438203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:06:a3:ba:8d:d9:27:6d:0e:6f:c7:33:2f:c1:42:85:2e:30:
         c5:2c:51:8c:34:5a:ec:7d:4f:fb:fd:93:98:a2:d1:55:2f:95:
         cd:4c:68:ea:90:ac:1b:56:ea:42:00:a6:e8:f4:00:a1:85:a2:
         e3:02:8c:53:ca:ff:aa:bb:1a:bd:72:fd:52:1b:0a:79:3b:83:
         ff:d0:c3:70:fb:b7:29:6d:f2:ab:19:cf:86:d6:c0:f9:0c:58:
         f9:74:89:6a:82:4c:8f:1e:f6:49:84:fc:5d:92:c6:00:63:9e:
         e3:9f:c6:87:b3:58:72:11:70:48:a1:86:33:96:d8:f9:76:d7:
         c4:73:7a:28:74:9d:1f:3c:0b:1e:7f:3a:3f:51:59:a5:28:8b:
         0c:98:cc:e2:56:18:3f:26:04:64:0d:8f:c3:40:8b:7f:b6:28:
         f5:3a:4d:88:a3:98:de:d2:ba:3e:45:88:71:4d:ca:96:82:88:
         ae:10:e2:06:da:e5:e0:9e:ca:51:d3:f0:95:ad:00:9b:a4:45:
         0a:49:fc:8a:e5:a0:82:cf:ad:1a:d3:0f:b7:97:dd:56:ee:fc:
         3a:0f:23:d0:f3:f4:db:3a:5c:f5:1a:13:f2:15:be:1d:3e:e3:
         56:2b:4e:66:ad:7d:fc:27:0a:72:fc:da:7a:16:20:fc:bf:a2:
         44:a9:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org