Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          EsgbJ6mppFk4tygGyRrM48pbXLU3r7UFirhbV7MhX88=
Subject key identifier:   79:CE:AE:B6:6F:2C:AE:8F:BC:EF:23:1D:A8:BA:D0:FF:E9:14:31:30
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       206E20E43D541EA143AD3CEDCE14874B1C5CF6AB
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:11 +0000
ROA not before:           Tue 05 Mar 2024 17:47:11 +0000
ROA not after:            Tue 04 Mar 2025 17:52:11 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:20:e4:3d:54:1e:a1:43:ad:3c:ed:ce:14:87:4b:1c:5c:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:11 2024 GMT
            Not After : Mar  4 17:52:11 2025 GMT
        Subject: CN=79CEAEB66F2CAE8FBCEF231DA8BAD0FFE9143130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:c8:35:3e:ee:bd:ca:7d:30:21:fa:b9:85:
                    4d:a2:1a:38:71:49:56:5d:65:e1:ff:58:8a:15:75:
                    a3:6c:07:80:06:18:0a:7a:c2:d4:e8:80:e8:e4:4d:
                    0d:79:18:63:f9:94:7c:ee:24:98:51:4e:42:f4:02:
                    73:56:af:c2:13:ed:20:12:c2:78:4c:9a:37:81:b1:
                    51:f2:74:63:1f:fe:5d:80:9b:48:5c:9e:a9:c1:ee:
                    ee:56:2f:df:c8:93:96:a5:b4:20:fa:26:00:ce:36:
                    1e:00:07:05:f1:a3:f1:51:87:e7:56:af:3d:b0:5a:
                    45:98:ae:9b:63:e7:db:45:b8:85:76:4c:f9:3f:c7:
                    73:60:e0:7a:18:5f:70:67:39:22:b5:4a:66:80:ba:
                    2f:9d:93:17:dd:d9:83:a1:ab:a9:6e:01:95:4f:1c:
                    ec:de:f9:2a:be:76:19:6c:04:c9:ef:6b:2c:c0:1b:
                    64:f4:a8:96:1f:03:93:b0:1d:8b:05:64:ed:b1:6e:
                    ff:af:ef:52:28:9b:02:88:df:3c:47:8d:82:cf:d8:
                    e0:8e:47:09:1a:30:4a:6f:1a:94:4e:b7:29:f3:19:
                    b2:07:a1:12:07:cb:26:83:4f:e1:51:f6:be:6f:e4:
                    63:12:be:7c:c2:cf:be:f6:82:5c:6e:fb:15:9d:9b:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:AE:B6:6F:2C:AE:8F:BC:EF:23:1D:A8:BA:D0:FF:E9:14:31:30
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:83:05:1c:7e:54:54:3d:40:97:75:b2:38:86:43:fb:04:
         0d:e7:dc:5a:2a:9e:6d:c2:d4:d3:94:7c:cc:3c:cf:0d:01:b6:
         48:d0:95:16:14:4b:ec:bd:ee:7d:ef:f9:db:18:c8:a3:b9:55:
         47:42:e5:22:7c:c8:de:a3:d7:eb:16:a3:3f:32:8d:84:7b:ce:
         6c:9c:45:df:c0:1c:94:9a:97:ac:0c:07:5c:a4:74:06:35:e0:
         73:12:35:94:1b:f6:05:7f:f8:f8:c7:64:9a:8c:27:4e:99:7e:
         9c:58:2f:1f:56:28:0a:df:bc:a8:43:3f:f1:bb:8f:1a:34:95:
         a6:1d:f0:1b:56:80:13:b0:9f:ff:96:13:5d:81:4c:97:81:e1:
         ef:6c:55:12:af:7c:b5:d0:dc:20:0c:9c:cc:e3:08:93:f9:e1:
         23:39:17:ce:de:a0:c6:c4:1e:a0:db:64:4d:21:aa:e8:ed:57:
         db:6e:39:61:46:80:d0:bb:6d:01:4b:1f:92:b4:37:dc:58:60:
         ea:0a:5d:e1:a3:88:16:d0:60:29:a0:4d:07:12:a3:a3:d5:3f:
         f9:ba:31:c8:2e:96:08:d5:05:22:ef:06:38:d7:ab:7c:70:f8:
         9d:f6:38:ee:e1:70:16:8c:70:d4:1e:ce:e8:df:6c:55:fc:f3:
         f0:65:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org