Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a3a2f33322d3332203d3e20323732383232.roa
File:                     323830333a313439303a3a2f33322d3332203d3e20323732383232.roa (raw, json)
Hash identifier:          jzGa9F2iw/CNqPK3nm6AyQ5RopUAnU6CMH85xqdrBcU=
Subject key identifier:   C4:96:2D:B5:88:1E:F5:A7:F8:6E:8A:69:C9:1E:25:73:F8:6A:23:A9
Certificate issuer:       /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
Certificate serial:       532FEF0F540003EB1AA806EB609496C4668F5847
Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a3a2f33322d3332203d3e20323732383232.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     272822
IP address blocks:        2803:1490::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2f:ef:0f:54:00:03:eb:1a:a8:06:eb:60:94:96:c4:66:8f:58:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=C4962DB5881EF5A7F86E8A69C91E2573F86A23A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:ff:c1:ba:37:fa:69:b5:ee:15:06:b8:e3:
                    ee:27:26:a1:94:ef:30:d7:25:87:90:33:13:67:62:
                    ac:f0:64:78:5d:45:43:1e:b3:83:7c:9c:29:ab:1c:
                    d1:17:e9:ff:dd:0a:e6:82:ad:90:07:ff:63:c5:0c:
                    43:88:2b:2c:7b:fe:10:cf:3c:0b:b6:49:be:64:62:
                    1f:a1:9a:fc:a1:a3:38:3d:65:5e:d2:bd:c4:cc:7a:
                    1a:8e:bf:82:c1:9d:e8:b3:b0:0e:a3:6c:0d:db:1d:
                    6d:ea:58:3d:98:f3:d7:29:3c:a0:4c:87:94:15:da:
                    c0:72:03:df:ff:a0:5e:13:6e:ed:8f:1c:82:75:fb:
                    10:55:2a:df:82:8d:d3:c2:09:89:55:41:28:36:63:
                    e6:b2:56:c3:ab:ef:25:19:a2:11:36:2c:6f:83:10:
                    a4:4c:7b:62:7d:ea:66:eb:6f:76:bf:61:a0:bb:27:
                    d1:ff:43:96:a3:d8:69:7c:5d:61:e5:00:c7:70:99:
                    5a:6e:5a:37:03:82:bc:7f:a7:bd:4c:95:af:ca:ab:
                    c7:b7:a9:a6:91:73:6f:84:c1:bb:7b:80:29:cc:1b:
                    c8:d9:28:1a:0b:a7:a1:3a:cd:5b:82:d1:d2:1e:1e:
                    44:e8:f7:d0:27:a9:e3:3b:87:8d:b2:f9:2d:79:7d:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:2D:B5:88:1E:F5:A7:F8:6E:8A:69:C9:1E:25:73:F8:6A:23:A9
            X509v3 Authority Key Identifier:
                keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a3a2f33322d3332203d3e20323732383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:d4:df:67:79:14:f2:2d:6a:23:1c:6b:bf:85:3e:f0:10:
         8d:52:07:ec:e2:60:45:1a:21:eb:8c:e3:49:38:08:a8:56:8d:
         9d:ce:e8:36:45:4b:af:b3:7d:ed:95:00:85:90:8e:19:19:57:
         cb:f3:39:31:7a:45:d2:7e:7c:78:81:71:a9:58:79:48:92:83:
         2d:af:3a:7e:0a:75:60:47:39:20:43:3f:df:60:22:00:27:e6:
         fe:ac:fa:c7:8f:43:23:f6:00:b0:e7:78:5e:e5:64:ac:35:24:
         95:24:65:ea:c9:04:37:f8:32:65:c2:0e:e2:ba:7b:59:64:1c:
         f9:9e:fe:96:cb:4e:51:06:31:f6:51:6e:99:6f:49:1c:e5:38:
         39:79:db:2e:44:9e:37:6c:6c:a4:c7:1b:b0:2a:4a:9e:90:0b:
         73:87:36:ca:5e:29:2e:d9:79:38:60:16:e7:a4:f9:de:f5:a3:
         ed:bc:32:1c:64:84:98:bf:3d:a1:f3:22:0b:79:49:b2:e0:e2:
         ee:8e:92:08:39:fe:dd:59:3d:a6:3d:49:d5:d3:26:6d:8c:ab:
         02:6b:46:11:d1:6c:96:39:74:1a:ef:f6:16:f2:34:82:f1:31:
         7a:4f:73:07:2f:30:98:e9:43:77:7a:ce:66:c8:b6:5d:73:f5:
         b5:11:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:49 2024 by rpki-client on console-ams.rpki-client.org