Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa
File:                     323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (raw, json)
Hash identifier:          Tc3tFTIEJ89kYE9BA23ocufs+zVOZptI7CF4mn5WvUM=
Subject key identifier:   78:60:E5:6B:60:8B:25:7C:DB:BC:CA:8E:2B:A6:9F:2D:31:C8:35:7C
Certificate issuer:       /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
Certificate serial:       550A730418473884AE04E1F0937321B61962BB50
Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa
Signing time:             Mon 07 Oct 2024 15:35:00 +0000
ROA not before:           Mon 07 Oct 2024 15:30:00 +0000
ROA not after:            Mon 06 Oct 2025 15:35:00 +0000
asID:                     273884
IP address blocks:        2803:c350::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0a:73:04:18:47:38:84:ae:04:e1:f0:93:73:21:b6:19:62:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6
        Validity
            Not Before: Oct  7 15:30:00 2024 GMT
            Not After : Oct  6 15:35:00 2025 GMT
        Subject: CN=7860E56B608B257CDBBCCA8E2BA69F2D31C8357C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:a0:3f:8e:02:95:fa:9f:26:fc:e6:95:8b:
                    64:96:9f:ee:8c:bc:4f:5a:72:30:60:5a:92:87:ec:
                    dc:9a:19:88:de:82:95:11:ee:5e:58:7e:31:25:17:
                    ec:41:31:e4:9f:73:ee:01:c7:cb:5c:af:04:f0:30:
                    35:c6:b4:c6:20:fd:d5:8e:72:8f:7a:f3:46:87:10:
                    11:17:5e:ff:2f:43:b1:ce:b6:02:1d:92:56:91:28:
                    c7:df:d6:d6:a3:58:d4:b9:72:ef:07:19:58:3f:84:
                    52:c5:b9:45:8e:dc:b8:ac:0d:d6:92:74:10:9a:f6:
                    45:da:09:5b:5d:20:fd:1c:be:12:2f:79:ac:82:0f:
                    07:e1:42:cc:d0:9b:07:87:e6:fc:a6:54:a8:7b:fe:
                    a8:5f:41:5f:b2:b7:c9:61:f1:3f:df:db:6d:f1:a2:
                    66:b2:45:fc:d4:a7:bb:52:36:e1:78:fb:09:7d:59:
                    83:ec:20:dd:5c:10:b9:35:17:59:97:bb:73:7e:6d:
                    3f:4c:86:ad:fd:c0:75:4d:9e:ce:bf:ed:5f:eb:83:
                    4b:d0:2e:d5:61:af:5c:37:64:a9:a2:b6:6b:46:50:
                    7e:7f:40:db:c5:1f:c1:0f:a9:4b:24:ce:83:ce:5a:
                    39:25:76:06:42:2a:75:53:ae:ff:13:a7:6f:b0:90:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:E5:6B:60:8B:25:7C:DB:BC:CA:8E:2B:A6:9F:2D:31:C8:35:7C
            X509v3 Authority Key Identifier:
                keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/323830333a633335303a3a2f33322d3332203d3e20323733383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c350::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:68:3b:fe:cf:26:7c:13:b0:c4:5f:10:f1:7a:01:62:8b:
         e8:fd:84:6b:73:06:9b:41:52:1b:b8:ca:04:bc:ef:d1:85:4a:
         7e:ae:64:8b:1b:23:e0:d7:71:65:45:ce:a7:86:4e:e4:00:d3:
         7f:6d:78:64:5a:56:a8:3c:aa:52:cb:c2:3b:18:33:e5:e8:cf:
         7f:a7:cc:e4:b7:9c:4c:ea:08:8e:bf:5c:50:41:c7:21:45:77:
         0e:d0:f5:03:ca:12:36:18:ff:26:0e:4f:40:4d:cd:a6:ab:80:
         c0:17:4e:f4:3a:9b:cc:84:71:63:ba:12:49:a5:e8:59:4c:e0:
         4e:b1:59:d7:ee:88:8e:97:25:8a:b6:1e:6d:ef:e5:3b:43:44:
         28:d9:ba:3c:4b:16:fd:ff:ab:60:53:e6:cd:00:9d:b7:2e:f2:
         51:da:bb:d4:e0:91:11:27:43:41:1a:5f:08:f8:ba:30:07:30:
         0d:81:f9:cc:0d:31:b9:6d:23:b6:df:d1:bf:f3:c7:ea:1e:ba:
         15:8b:ab:25:3d:12:d1:54:b8:78:65:6f:2f:d1:4b:c9:c9:85:
         d6:b5:4e:e0:a5:a1:f6:7b:d7:39:cb:4c:07:e3:aa:a1:50:b5:
         af:ca:3c:f0:c8:d8:d2:24:92:d3:ed:83:72:c1:dd:11:70:d0:
         e7:2d:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:57:20 2024 by rpki-client on console-fra.rpki-client.org