Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a363432303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          TBqMFQoLg0GdaWwW1xgPP9LaiZ7dOEG3dM8rR2hj5M4=
Subject key identifier:   10:4A:A0:AC:C9:ED:A2:7C:82:EB:07:53:18:09:04:8F:5B:2A:30:3C
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       427DD2031BB32C20CB9466EDFA3084929C85E670
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:51:06 +0000
ROA not before:           Tue 05 Mar 2024 17:46:06 +0000
ROA not after:            Tue 04 Mar 2025 17:51:06 +0000
asID:                     264668
IP address blocks:        2803:6420::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:d2:03:1b:b3:2c:20:cb:94:66:ed:fa:30:84:92:9c:85:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Mar  5 17:46:06 2024 GMT
            Not After : Mar  4 17:51:06 2025 GMT
        Subject: CN=104AA0ACC9EDA27C82EB07531809048F5B2A303C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:73:7e:ef:19:e1:8d:c9:8e:90:fb:ca:8d:
                    3f:aa:da:60:9d:0a:91:0e:e5:1c:3d:a5:96:a9:b1:
                    d8:dc:a4:0b:67:d6:2c:62:a0:a5:18:5b:24:80:76:
                    a9:4b:fc:61:eb:1e:12:3e:8f:07:ce:5e:e5:eb:81:
                    45:19:40:d1:2e:5c:31:13:6f:bc:86:fa:2d:99:18:
                    4f:9e:36:d3:34:8f:ed:aa:25:37:cf:76:ac:01:df:
                    d9:70:08:a8:d2:79:68:7a:18:b4:9a:b4:9f:03:b9:
                    fe:74:8c:2e:53:61:70:6e:60:01:ec:8c:08:10:30:
                    37:32:f6:92:b7:c7:a1:5e:db:4b:23:3f:0b:d5:39:
                    10:28:07:30:11:f4:9d:f1:1a:be:dc:a5:c5:d9:b9:
                    0f:b4:66:05:64:b9:84:a9:74:3a:c2:e7:45:e5:aa:
                    df:ed:d7:74:b5:bd:ea:29:74:40:4f:b7:9c:67:8c:
                    1f:a8:0a:08:fa:4e:fd:5b:9b:44:be:27:c6:3e:ad:
                    27:f7:84:38:24:17:bc:6c:f6:52:f7:04:a9:c4:d3:
                    f4:e2:a6:84:82:41:57:a9:36:07:69:e1:b6:ee:42:
                    70:45:91:33:5a:69:d5:ab:a8:62:9f:92:c5:a0:ff:
                    78:83:10:63:01:61:00:b7:8d:71:1a:8a:90:6c:7b:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:A0:AC:C9:ED:A2:7C:82:EB:07:53:18:09:04:8F:5B:2A:30:3C
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/323830333a363432303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6420::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:22:41:4f:5e:13:c2:6e:17:17:39:3f:ad:a5:4f:69:7b:a3:
         35:4e:04:bd:65:3b:26:cd:04:84:6e:7d:f2:6c:fc:b4:0b:92:
         ae:0e:c5:51:aa:1d:5c:c4:be:fc:57:36:c3:53:b2:fc:82:79:
         62:9b:35:07:98:33:e3:c0:8f:1b:2b:3b:e1:8a:f0:bb:d5:ef:
         b3:32:80:4f:83:ab:0b:8c:aa:33:58:7a:73:3c:df:22:23:d2:
         f6:10:63:b8:2e:dd:be:98:d8:4b:85:59:17:4b:1b:0f:45:fe:
         e6:71:0c:7c:8f:78:2a:c3:e5:6e:39:34:aa:e3:16:c8:53:dd:
         a5:a3:04:bc:b5:ed:aa:fe:f9:b0:1f:23:ee:ad:03:de:b0:e8:
         11:34:90:9c:0a:44:86:ed:ad:23:3c:cb:f1:6c:55:c0:bf:6d:
         90:00:3e:dc:c7:bf:73:9b:00:7e:73:5d:eb:4f:20:a1:ca:d9:
         c2:f2:84:cb:f0:5b:ec:e3:ce:55:59:c6:dc:92:6f:3c:f2:44:
         a9:ef:f6:5d:8d:ab:ec:c0:e4:e4:ce:c1:54:da:2a:ed:e7:8f:
         05:32:86:1b:4e:7e:48:b0:d7:5d:7a:7f:fe:69:56:f7:bb:6f:
         dc:da:7f:94:67:a9:f5:a3:8d:71:b5:04:2b:dd:32:e3:f5:4b:
         b4:33:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org