Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/323830333a616134303a3a2f33322d3332203d3e203237383236.roa
File:                     323830333a616134303a3a2f33322d3332203d3e203237383236.roa (raw, json)
Hash identifier:          9qlSvfrRrpoAaclthUiFJWDxG3itM/usbdyISsNpTVk=
Subject key identifier:   63:4A:10:4C:F6:E6:16:47:1F:55:93:5B:4E:CF:82:E9:56:2D:27:6A
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       434C7F8D96B9508C5FE055DE3068FBEB92B96100
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/323830333a616134303a3a2f33322d3332203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     27826
IP address blocks:        2803:aa40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4c:7f:8d:96:b9:50:8c:5f:e0:55:de:30:68:fb:eb:92:b9:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=634A104CF6E616471F55935B4ECF82E9562D276A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9c:41:82:03:36:d8:32:f0:03:c4:dc:fe:a5:
                    18:83:62:dc:8b:55:ad:fd:91:d2:04:ef:6a:ae:52:
                    a7:34:da:a0:2f:48:7a:e0:44:a0:c8:ee:c5:ee:9f:
                    69:a0:09:f5:5d:31:36:39:b5:b6:d9:47:b7:30:cd:
                    f2:75:d1:16:02:96:65:38:c4:77:d1:0a:69:80:db:
                    3f:cc:96:73:49:d3:52:71:f3:cb:f3:6f:16:7d:87:
                    91:cc:0f:b9:f5:7f:46:4e:df:21:ba:20:18:92:1e:
                    1c:3a:49:ca:57:7c:d7:68:a2:7e:29:d5:94:a7:a5:
                    c1:33:b9:6a:e9:cc:2c:8c:e5:1e:ed:10:91:a7:05:
                    ca:ef:b4:b7:44:4c:81:0c:0e:dc:50:04:d3:41:1b:
                    1b:1a:c2:13:14:9a:e7:f8:c6:33:4f:13:91:78:71:
                    f0:72:d7:33:c2:8e:c3:04:15:98:c3:e6:53:50:d5:
                    dd:3a:ff:88:33:60:d2:c4:c7:00:77:7d:d0:3c:88:
                    a3:bd:28:a7:6f:ff:7b:51:53:ab:6c:d0:01:cc:09:
                    99:2a:88:03:07:0a:f9:27:42:14:09:ce:cb:48:79:
                    b4:b2:3b:c9:5c:73:4d:55:7c:49:1c:e8:2e:20:4f:
                    e5:65:d9:df:9b:3d:b2:10:82:6c:a5:65:7e:51:8b:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:10:4C:F6:E6:16:47:1F:55:93:5B:4E:CF:82:E9:56:2D:27:6A
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/323830333a616134303a3a2f33322d3332203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:87:be:81:8b:0f:1b:cd:75:db:e8:5b:d8:e3:60:84:5e:1d:
         0e:4d:be:39:fc:e9:30:95:3d:68:8f:d3:fb:06:6a:27:8d:c8:
         21:47:be:89:c2:4d:ea:cd:2a:85:07:09:70:8a:ed:9e:ad:c3:
         dd:50:d1:94:03:ec:bd:9d:ce:4d:44:80:03:03:e9:43:34:f5:
         8c:74:8e:25:38:a2:5a:35:9b:c1:e7:7d:d9:41:44:29:f9:11:
         a4:f8:1c:bd:14:b4:53:b7:39:5b:52:f5:64:37:f5:d1:28:2a:
         41:4d:94:9f:04:46:90:86:2e:be:61:af:78:5f:bd:12:ae:0c:
         77:ce:d9:6a:26:c8:ec:bc:d9:d9:67:04:c8:62:b0:bf:e8:8d:
         1a:2b:26:88:3c:0b:68:dc:a8:93:b7:a8:35:d1:50:74:48:27:
         dc:ee:3d:45:4d:7d:d9:70:25:87:5b:a3:e5:9f:9f:2d:70:ab:
         ef:f0:b8:cb:67:34:6f:35:d2:93:1c:05:f1:a0:24:10:55:49:
         c5:76:4d:18:20:01:6f:6c:4a:83:cd:6b:6d:b7:5f:c2:54:e6:
         36:f8:d5:bc:74:c7:e7:69:2a:25:80:aa:ee:5a:3d:a1:09:15:
         b0:3f:b1:3f:29:23:76:3b:f2:e4:c7:3b:48:06:59:37:0d:c4:
         48:bc:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:23 2024 by rpki-client on console-fra.rpki-client.org