Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e20323733313132.roa
File:                     323830333a613835303a3a2f33322d3332203d3e20323733313132.roa (raw, json)
Hash identifier:          L5LiFRVzYElezuyeoj6IRxWJuxC9+FgctYpGR8k9gM8=
Subject key identifier:   70:6A:B9:B5:DE:5C:D9:D4:3C:CD:A9:B8:E8:BB:DA:33:97:D9:1B:A2
Certificate issuer:       /CN=56D44233415A00C655C5956535A315EB641D8195
Certificate serial:       2BDEB772C147D919DCEE4D3EC22121D61802BE6B
Authority key identifier: 56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e20323733313132.roa
Signing time:             Fri 16 Aug 2024 14:35:00 +0000
ROA not before:           Fri 16 Aug 2024 14:30:00 +0000
ROA not after:            Fri 15 Aug 2025 14:35:00 +0000
asID:                     273112
IP address blocks:        2803:a850::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:de:b7:72:c1:47:d9:19:dc:ee:4d:3e:c2:21:21:d6:18:02:be:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D44233415A00C655C5956535A315EB641D8195
        Validity
            Not Before: Aug 16 14:30:00 2024 GMT
            Not After : Aug 15 14:35:00 2025 GMT
        Subject: CN=706AB9B5DE5CD9D43CCDA9B8E8BBDA3397D91BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:e4:95:52:51:fb:d7:91:60:dd:4f:d5:72:
                    48:23:de:60:e2:1a:ae:52:a2:2b:0d:f2:04:c3:65:
                    af:2f:02:10:36:10:20:d4:53:de:b4:2c:59:c2:ab:
                    52:19:d8:7c:d4:1d:a0:40:87:18:d4:fd:60:42:0f:
                    a5:cd:3a:be:7a:b0:03:6b:b2:8e:e9:ba:46:66:c2:
                    ab:29:cb:01:a8:88:9e:a8:86:d2:89:5d:1e:bf:3a:
                    a5:c3:7a:69:83:2a:50:ed:07:56:43:1a:ce:99:d7:
                    72:c8:7f:0d:28:06:42:d8:c7:d6:8a:37:e9:38:5f:
                    5c:80:a6:45:06:9a:19:e5:b4:cb:92:31:7e:34:b4:
                    58:75:fa:90:64:bf:76:4e:f1:6b:1b:92:77:84:d2:
                    8c:ff:d4:9a:2e:88:a6:bf:3a:99:dc:4b:d7:dd:1e:
                    d2:71:04:42:11:3d:9a:e7:c8:2f:79:da:9c:82:67:
                    bf:a0:57:f5:62:cd:74:45:a8:fd:85:f4:b9:e4:0a:
                    32:a7:25:20:77:4e:80:b8:89:c7:29:07:6b:28:e2:
                    22:0a:fc:50:d4:21:d4:63:f0:34:f8:78:82:c5:58:
                    77:4b:6b:e3:77:b6:3c:62:ac:0a:0f:42:e6:62:52:
                    22:4b:56:a6:14:e6:c1:c7:36:f2:0c:27:83:38:5b:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:B9:B5:DE:5C:D9:D4:3C:CD:A9:B8:E8:BB:DA:33:97:D9:1B:A2
            X509v3 Authority Key Identifier:
                keyid:56:D4:42:33:41:5A:00:C6:55:C5:95:65:35:A3:15:EB:64:1D:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/56D44233415A00C655C5956535A315EB641D8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56D44233415A00C655C5956535A315EB641D8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C820E1F0C40F75D2F8AAAA146625D7C21A5934643028AAE8535E38DE967445/0/323830333a613835303a3a2f33322d3332203d3e20323733313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:1a:b1:68:4e:a2:8c:d5:7d:5b:85:4a:2b:f8:d3:60:ab:
         5e:39:c4:19:70:1e:34:b3:49:8e:8b:fc:97:f3:0b:73:45:0d:
         a1:a8:ef:bf:24:20:96:d1:cd:fe:98:a4:6f:69:c9:5e:a1:21:
         7c:0a:45:71:38:52:20:bc:06:c0:39:13:5f:f8:58:71:51:cb:
         d7:a9:a9:d6:de:ba:7e:da:71:3b:5f:10:d0:a3:1b:78:12:60:
         41:62:a5:de:f5:dc:8c:01:30:4a:cc:53:f2:3b:c1:a9:54:53:
         28:71:26:fe:fc:33:fd:60:87:3e:de:06:f9:d2:32:52:6d:42:
         48:85:18:44:d0:99:d4:be:a3:04:85:68:2f:67:c1:49:14:9f:
         be:dd:fa:20:47:97:53:d3:c6:c3:24:9c:b2:f6:d4:0e:33:c0:
         7e:10:5d:8c:a8:db:cb:b4:2c:e5:c6:8b:72:89:2c:80:e0:a6:
         56:38:bc:78:4e:bc:d6:a7:e1:11:c6:3b:3e:f2:69:60:c4:b9:
         d1:16:98:3b:f2:85:e8:66:f1:31:3d:a4:00:08:f6:ee:d7:bc:
         70:7a:1a:cc:a9:06:cc:b2:f9:f0:9b:e1:4c:43:ec:48:89:f5:
         d0:42:3e:f6:1d:c2:f1:92:f8:ad:b8:a4:08:10:bc:b1:83:57:
         c7:1c:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org