Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a623a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a623a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          Xz81BAph3w08CeQdzapC01Z4K+Z8Y+Jua2OrgkcLqW4=
Subject key identifier:   67:00:FF:00:0C:6B:A3:67:6D:8A:81:7F:02:64:BF:15:82:D9:CD:57
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       5CCB658C0BE13316DBEE9A3FBDA482EC76125138
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a623a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:11 +0000
ROA not before:           Tue 05 Mar 2024 17:47:11 +0000
ROA not after:            Tue 04 Mar 2025 17:52:11 +0000
asID:                     271927
IP address blocks:        2803:ea10:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cb:65:8c:0b:e1:33:16:db:ee:9a:3f:bd:a4:82:ec:76:12:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:11 2024 GMT
            Not After : Mar  4 17:52:11 2025 GMT
        Subject: CN=6700FF000C6BA3676D8A817F0264BF1582D9CD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:41:b6:5e:7c:8b:48:8e:49:b4:0a:4d:3c:
                    bb:76:35:34:fe:18:0f:bf:41:55:01:fb:25:87:b7:
                    b7:a1:99:04:60:d3:df:f1:02:b2:67:47:7a:7c:e5:
                    27:e7:21:ed:7c:69:05:1d:ef:19:0c:8c:fc:e2:e1:
                    ab:04:5a:ec:8a:93:0c:e2:86:0d:cf:76:8a:fe:0a:
                    cb:32:34:84:0a:c3:75:7c:5f:d4:c8:cd:b0:ba:7d:
                    7a:90:4c:fe:b8:5b:15:18:18:0f:be:88:bf:ac:f8:
                    14:b8:7c:32:70:c6:58:a1:0a:33:38:9f:e2:8a:f7:
                    e1:5a:b9:81:ea:ee:f8:1b:b5:97:83:21:bc:ff:25:
                    ee:21:ed:4a:99:46:24:fb:1c:ce:d2:2f:69:57:46:
                    52:90:37:31:23:9f:f2:52:2a:f8:c2:dc:0c:81:3d:
                    ca:5b:16:da:19:9e:a2:2f:ab:8a:19:79:22:70:3c:
                    4f:09:51:e1:ac:f8:22:25:a6:7e:d3:c0:34:7f:63:
                    21:01:a6:41:53:07:8b:58:09:4d:83:d2:cc:6a:0c:
                    7b:9a:9a:f1:07:9a:1b:af:b6:aa:de:f9:60:e6:f4:
                    1e:79:20:b6:f9:81:04:a0:55:9a:06:7a:56:60:7b:
                    65:d7:ee:3e:ea:49:dc:76:1a:b3:c9:34:db:07:c6:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:00:FF:00:0C:6B:A3:67:6D:8A:81:7F:02:64:BF:15:82:D9:CD:57
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a623a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:f0:e8:d1:72:4f:78:ee:a0:09:46:36:fe:c6:94:ad:41:
         59:ad:ee:ed:ff:b0:e7:c2:20:c6:b4:68:5f:2a:91:d5:48:35:
         b2:62:46:59:51:e5:7a:b5:d5:33:d7:5a:8b:92:c3:a4:21:b0:
         68:79:33:df:a6:76:b3:60:2c:52:e8:b9:41:ae:d0:ae:c9:72:
         40:b1:7a:b1:fd:01:a9:b8:e1:06:ea:c9:3d:a2:df:84:95:94:
         b9:27:cc:ac:de:09:bf:98:44:5d:91:60:e1:be:45:03:18:43:
         81:52:35:6c:e5:75:62:f6:fe:61:22:b5:bf:62:79:c1:c5:de:
         17:0b:b9:47:6d:da:5c:8d:61:5d:64:a2:c5:d5:7d:98:74:20:
         6a:f8:5a:c4:21:81:70:9e:0b:9a:16:b9:0c:70:18:7f:f1:45:
         a6:81:00:e3:63:d2:5c:04:4b:9a:33:f7:4f:a0:82:63:6d:cf:
         da:33:6c:c0:2d:65:db:25:b7:6b:36:bf:e0:de:6f:cf:f9:d4:
         9d:c5:9c:18:d4:ba:9d:88:47:20:3f:cb:43:81:88:eb:18:4e:
         c5:5e:7b:f6:da:3f:62:a3:09:2f:9a:5f:4f:a1:7d:e0:e0:b8:
         bc:63:0b:de:5c:a0:03:5b:f9:95:a5:68:43:c0:17:11:54:43:
         71:cb:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org