Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa
File:                     323830333a623435303a3a2f33322d3438203d3e20323733313337.roa (raw, json)
Hash identifier:          8xGGXbKc0tySIv930/kBxTV9i986z5mocHrJgysLOJs=
Subject key identifier:   31:52:2C:D3:90:62:C1:63:E6:9F:0D:0F:A9:3C:A9:43:29:04:F6:C3
Certificate issuer:       /CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
Certificate serial:       1AF53651CE54578CAC8C4D1B8C165B66506AFE4E
Authority key identifier: 39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa
Signing time:             Tue 05 Mar 2024 18:16:31 +0000
ROA not before:           Tue 05 Mar 2024 18:11:31 +0000
ROA not after:            Tue 04 Mar 2025 18:16:31 +0000
asID:                     273137
IP address blocks:        2803:b450::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f5:36:51:ce:54:57:8c:ac:8c:4d:1b:8c:16:5b:66:50:6a:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
        Validity
            Not Before: Mar  5 18:11:31 2024 GMT
            Not After : Mar  4 18:16:31 2025 GMT
        Subject: CN=31522CD39062C163E69F0D0FA93CA9432904F6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:9b:c5:e2:d9:a0:40:da:c2:6f:aa:d8:9c:
                    c9:2d:58:57:0e:80:14:80:69:ea:ff:aa:b2:c8:9b:
                    e1:97:87:d0:44:47:5f:5e:03:59:b2:be:c0:6d:77:
                    cf:3b:66:9b:b8:af:36:0c:9e:60:04:5e:5f:54:5c:
                    04:7d:a9:d2:5a:9a:c7:24:8a:cb:cb:a0:88:d2:66:
                    75:84:62:b5:fb:61:49:18:0e:88:92:f4:90:5d:e5:
                    f2:a3:0e:5b:67:8b:47:ac:43:2f:4b:4c:08:41:00:
                    6d:4a:64:d9:27:4a:c0:10:03:0b:fb:3e:96:d0:be:
                    1a:59:ec:9f:f0:93:ac:c4:3d:5c:ff:1c:b0:94:c3:
                    45:46:cf:f5:50:8b:f7:c4:46:dc:ce:88:e1:9c:9f:
                    14:f9:a7:47:aa:20:73:c7:ec:60:9e:be:fb:ee:83:
                    45:dd:97:bd:d6:73:a1:a7:dc:49:77:b6:44:59:df:
                    b5:62:c0:38:1b:53:d7:61:54:80:63:13:aa:e1:d1:
                    0e:52:88:f0:8f:d8:b6:35:7a:1a:ed:fc:39:5d:49:
                    0d:e1:4d:aa:48:77:44:76:ec:ce:52:94:b3:c0:bd:
                    19:ce:2d:57:f4:96:b4:af:ac:7d:ae:3d:1c:6d:f5:
                    5c:12:b6:ea:c5:16:56:1f:e5:23:b9:c1:b5:77:0a:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:2C:D3:90:62:C1:63:E6:9F:0D:0F:A9:3C:A9:43:29:04:F6:C3
            X509v3 Authority Key Identifier:
                keyid:39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b450::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:21:d3:df:a7:b3:8d:0e:5c:4c:f5:f9:48:79:7a:2f:b8:cb:
         e1:42:46:fa:7d:d7:22:c2:f3:89:46:e0:d5:bc:68:20:f2:b2:
         97:c4:26:ee:c2:11:6b:40:ed:d4:6f:16:86:9b:48:08:3d:d0:
         22:34:88:db:1d:e5:87:95:af:ea:a3:ee:fa:f4:20:59:57:4e:
         9d:b0:8c:09:a7:7e:4d:71:9c:91:a9:fa:31:6a:36:fd:d4:a0:
         35:51:90:52:5e:20:fa:44:53:13:ef:ba:8d:a6:5b:39:7f:ff:
         53:14:20:38:2d:fc:11:71:f8:87:c7:00:15:5f:86:9c:62:9f:
         fe:2e:e0:e2:0a:5a:9b:b8:d2:42:7d:f6:07:18:03:81:ea:6f:
         15:d4:6e:5a:4f:c3:07:ca:ab:a8:13:d9:5f:d5:fe:38:2e:f9:
         af:eb:4f:69:cc:93:1c:99:16:49:d2:d1:33:6c:ab:ea:81:53:
         d9:93:6e:8e:07:4e:9f:ea:66:5c:3f:07:c8:d5:89:5d:2f:f1:
         da:21:b7:d7:35:c9:23:00:08:91:e2:40:5f:93:c6:15:19:d9:
         3e:50:6e:5c:b8:7d:4d:e3:f2:c2:61:c0:a2:e5:55:20:c8:21:
         7e:b7:2f:51:91:21:f3:78:20:d6:7e:17:5b:e0:36:b8:2c:46:
         f8:16:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:28 2024 by rpki-client on console-ams.rpki-client.org