Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
File:                     323830333a353035303a3a2f33322d3438203d3e20323733303939.roa (raw, json)
Hash identifier:          93WJuXa0+dhG+gloWRqqjo0oS/0/j2blCSLCn/6vS4s=
Subject key identifier:   17:F4:95:B0:67:6C:7F:31:14:E4:51:50:50:EE:6E:65:9E:AF:F9:F9
Certificate issuer:       /CN=16C7C8578107D6479F39A5ED67AD600E679CB254
Certificate serial:       2DDDEF5CE0D64D84ADA91D340E964DBAB21967B7
Authority key identifier: 16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa
Signing time:             Tue 05 Mar 2024 18:09:26 +0000
ROA not before:           Tue 05 Mar 2024 18:04:26 +0000
ROA not after:            Tue 04 Mar 2025 18:09:26 +0000
asID:                     273099
IP address blocks:        2803:5050::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dd:ef:5c:e0:d6:4d:84:ad:a9:1d:34:0e:96:4d:ba:b2:19:67:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C7C8578107D6479F39A5ED67AD600E679CB254
        Validity
            Not Before: Mar  5 18:04:26 2024 GMT
            Not After : Mar  4 18:09:26 2025 GMT
        Subject: CN=17F495B0676C7F3114E4515050EE6E659EAFF9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:09:34:58:59:6d:bb:9b:64:35:2a:5b:24:
                    e5:af:0b:5a:a2:40:b5:84:01:50:b9:ad:a0:f1:ce:
                    38:63:ab:86:3b:c3:67:73:82:a4:90:22:14:d1:f3:
                    91:6d:88:21:5f:2f:89:7c:d1:60:0e:88:f5:cb:ec:
                    32:56:fa:c6:34:53:94:b1:65:fa:16:9e:98:89:3c:
                    58:64:f1:e7:49:db:03:98:36:16:8c:d5:f9:7b:cc:
                    64:03:84:d5:ee:26:3d:1e:c2:ab:d6:b6:47:65:ac:
                    c0:3b:43:5c:3a:80:b3:71:e3:3e:3e:30:58:7b:ea:
                    b9:6d:0a:b6:e6:62:01:78:97:83:a5:7a:01:c8:b7:
                    68:21:44:63:54:dc:ba:38:e5:7e:24:c5:02:29:15:
                    67:42:a7:47:d2:2e:3c:6e:35:40:d9:27:5f:72:66:
                    f7:0e:2a:b3:1b:31:92:3d:bd:5b:e2:c4:3c:84:72:
                    0c:1d:db:5f:bc:a2:7e:a8:02:56:49:3f:83:08:06:
                    95:7b:5d:d0:d0:d2:65:37:ba:5c:9a:63:4a:a9:01:
                    68:1b:a2:d9:42:f5:43:93:09:5c:be:e2:15:8b:33:
                    df:1b:98:ed:2c:9e:c4:c9:fa:1a:be:9e:d6:21:06:
                    69:40:d9:ec:06:1b:31:7b:86:24:1d:7c:17:50:d6:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:95:B0:67:6C:7F:31:14:E4:51:50:50:EE:6E:65:9E:AF:F9:F9
            X509v3 Authority Key Identifier:
                keyid:16:C7:C8:57:81:07:D6:47:9F:39:A5:ED:67:AD:60:0E:67:9C:B2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/16C7C8578107D6479F39A5ED67AD600E679CB254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16C7C8578107D6479F39A5ED67AD600E679CB254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2AD650D650357E8F73DE0796EE41A0EF32BB6457E6CFC1340EE5F0C46BAE363/0/323830333a353035303a3a2f33322d3438203d3e20323733303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5050::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:cb:66:04:44:99:5a:87:52:95:bb:ae:55:b2:3f:85:65:
         99:2b:b4:15:0a:dc:64:6b:04:d4:87:1b:4f:7e:0b:40:60:51:
         8a:16:fe:67:e4:82:de:40:bc:36:68:17:db:25:22:cf:4f:86:
         5e:d4:06:30:ab:04:63:1e:29:7c:da:27:32:ca:00:72:91:a8:
         cb:71:00:2d:c4:b4:0c:71:84:58:64:d6:e2:b8:0f:32:e3:f3:
         4e:e4:5a:02:d4:dc:b2:97:4f:62:36:b2:13:35:56:a7:92:0e:
         41:64:66:9a:f2:79:ff:b6:0f:c5:c3:3c:f0:f9:ca:ea:26:33:
         d7:4d:52:d3:d2:f1:ef:a9:22:70:56:56:e9:7d:f6:1b:f8:4c:
         55:0f:71:70:55:95:e6:17:e7:31:f2:09:02:bf:59:45:01:ed:
         dc:78:a1:a9:54:20:43:95:f3:2d:8b:e8:69:fe:3b:37:d4:57:
         bb:c9:95:c6:65:98:cd:a9:a2:a5:9a:53:41:05:64:d3:1e:0d:
         34:a9:ec:39:73:cc:9a:0e:01:4e:21:b6:5d:25:1d:65:1c:75:
         c4:40:c5:15:02:d9:f3:a0:9f:05:06:48:7d:d9:ff:85:19:59:
         f3:4d:41:3a:28:d1:b3:39:58:c1:4e:3b:4f:4a:9e:7c:ed:45:
         96:32:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:27:49 2024 by rpki-client on console-fra.rpki-client.org