Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a63383a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a63383a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          Qri8iB34m2bzpgVuD9CXs7vPf1G4zhvRc7ILFVACKvU=
Subject key identifier:   51:07:85:50:11:47:DA:EF:9D:22:AB:D0:D3:1D:3C:3A:8D:0D:87:45
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       5077A841AD12EA6816918BE488049F79A5CF1D04
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a63383a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:12 +0000
ROA not before:           Tue 05 Mar 2024 17:47:12 +0000
ROA not after:            Tue 04 Mar 2025 17:52:12 +0000
asID:                     271927
IP address blocks:        2803:ea10:c8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:a8:41:ad:12:ea:68:16:91:8b:e4:88:04:9f:79:a5:cf:1d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:12 2024 GMT
            Not After : Mar  4 17:52:12 2025 GMT
        Subject: CN=510785501147DAEF9D22ABD0D31D3C3A8D0D8745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:52:08:51:5f:b1:8b:e8:4f:fa:6e:25:bc:
                    97:8b:b1:90:2b:a1:cd:6d:28:f6:2c:06:8a:d5:2a:
                    83:7d:ab:23:21:17:82:5f:33:2c:13:61:6f:68:6c:
                    b4:11:59:f6:ab:4d:2e:8d:bc:84:f0:ec:93:52:fd:
                    c1:f2:04:62:ca:8a:6a:97:5a:a5:31:67:f7:a9:b7:
                    42:ba:85:f2:04:45:42:94:76:79:97:85:43:00:5e:
                    72:6a:a8:f4:83:fc:55:66:f5:15:91:7b:40:b5:a6:
                    e8:61:86:ab:da:d3:1a:e7:9e:56:b6:c0:15:81:f0:
                    10:bf:ca:f1:4f:c5:43:e6:cd:5c:7f:54:d9:5c:0b:
                    35:93:9e:42:04:3e:15:d8:99:f7:e2:b2:3a:42:f3:
                    9f:33:df:fc:79:2e:d8:99:00:ed:c1:23:64:49:bb:
                    ac:07:77:52:d2:a1:f1:f8:b2:49:9a:bb:b4:83:32:
                    fa:f5:0c:77:ad:d7:d2:e2:99:d7:6f:83:db:00:b7:
                    3e:2a:5a:80:6c:27:c5:3d:c7:cb:55:c7:9e:03:e3:
                    eb:75:77:d7:81:28:69:a0:23:1d:74:a6:b9:73:8d:
                    2c:77:9f:db:a6:8d:66:7e:99:f5:e1:b6:67:e4:0b:
                    13:31:50:c8:ed:49:94:35:a3:34:13:61:01:2d:30:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:85:50:11:47:DA:EF:9D:22:AB:D0:D3:1D:3C:3A:8D:0D:87:45
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a63383a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:35:70:ee:29:20:a8:6f:f3:31:8b:ec:2d:a9:6f:7f:b6:a8:
         8d:70:a2:57:b9:9e:9d:96:45:66:ae:1c:28:9b:09:ea:15:ec:
         85:ca:02:f2:2e:4c:cf:02:9c:cb:3f:8b:00:a0:b4:a3:35:b4:
         2d:55:a0:27:52:33:d4:e7:1b:84:37:08:79:d0:7e:2c:b5:4f:
         7f:97:71:f2:c4:c7:a7:d1:b0:72:72:1d:24:98:13:09:75:e4:
         44:68:90:af:2c:a9:b7:5c:e0:32:a8:2c:31:d0:be:c2:20:da:
         76:ef:7d:76:9d:e8:5b:40:90:59:2d:d0:7b:20:e6:ff:20:75:
         83:5b:3d:2a:87:f2:30:5a:62:1b:94:cf:19:c5:45:6d:1d:10:
         56:a5:25:a3:1b:3a:13:41:3e:fb:c0:2a:77:73:ad:0a:e3:a4:
         1f:5a:64:47:92:30:9f:31:3c:5b:ce:b5:4f:b1:7a:cb:7a:5a:
         69:ca:79:1b:77:f3:cb:00:f4:1a:7c:40:61:64:d5:ca:53:34:
         48:81:7c:53:61:74:01:5a:e4:e5:fe:64:ec:d0:a6:52:04:20:
         a2:6f:ef:bc:c4:a9:4b:7c:20:78:08:a8:bc:a7:08:86:c7:45:
         5d:1d:fd:6b:6a:8c:b0:52:be:fc:f1:f1:36:03:21:48:38:cc:
         e4:6b:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:51:33 2024 by rpki-client on console-ams.rpki-client.org