Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa
File:                     323830333a313131303a3a2f33322d3332203d3e20323731393931.roa (raw, json)
Hash identifier:          Fz3yYzhsmFZF92+8wJBpM2VpvcRJpfaW5O7i7pjXc0g=
Subject key identifier:   0F:62:31:B6:C6:B9:5E:2A:B4:94:54:B5:31:6B:CD:8B:70:5F:8B:5D
Certificate issuer:       /CN=5A49C6037E001719BFB9F4904E8C15D622CF0402
Certificate serial:       75307EC5954C9382BC1C025D7BC850CD4E4D1EA4
Authority key identifier: 5A:49:C6:03:7E:00:17:19:BF:B9:F4:90:4E:8C:15:D6:22:CF:04:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa
Signing time:             Tue 05 Mar 2024 17:50:37 +0000
ROA not before:           Tue 05 Mar 2024 17:45:37 +0000
ROA not after:            Tue 04 Mar 2025 17:50:37 +0000
asID:                     271991
IP address blocks:        2803:1110::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:30:7e:c5:95:4c:93:82:bc:1c:02:5d:7b:c8:50:cd:4e:4d:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A49C6037E001719BFB9F4904E8C15D622CF0402
        Validity
            Not Before: Mar  5 17:45:37 2024 GMT
            Not After : Mar  4 17:50:37 2025 GMT
        Subject: CN=0F6231B6C6B95E2AB49454B5316BCD8B705F8B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:eb:31:89:1e:85:7a:4e:9d:19:c9:bc:46:
                    9c:82:50:7d:53:88:ac:69:5d:5c:29:5f:2e:26:a6:
                    11:01:b0:eb:15:b7:d4:eb:7d:bc:aa:06:bd:30:59:
                    a7:28:4c:14:02:26:7c:07:01:d4:9b:99:90:c7:b1:
                    95:57:6c:73:91:f4:4e:6a:55:a4:1c:40:db:e3:bd:
                    26:89:82:3c:51:35:fb:c5:b3:71:72:3d:b7:53:d2:
                    53:ca:49:1e:b5:ba:9b:d6:02:59:c4:eb:b1:b9:f0:
                    36:a3:cb:55:a9:47:ab:06:48:f4:cd:2f:f8:3a:85:
                    33:4d:f0:53:01:10:ed:2a:1b:18:7f:4b:9a:19:31:
                    5a:20:6b:fd:a1:5b:60:0d:f6:65:98:99:b8:42:db:
                    9c:fd:b2:cb:93:7e:bd:8a:9b:54:7a:c5:c2:31:36:
                    06:06:d7:2e:5b:98:10:0f:92:a7:3f:90:ef:bf:5f:
                    60:48:bf:62:d1:05:75:75:81:d9:08:b3:8c:34:8a:
                    9b:64:42:e8:b7:af:42:f6:99:f5:81:f0:62:36:00:
                    25:4e:1a:85:c7:5c:dc:49:e2:26:e6:57:02:57:6e:
                    80:ca:71:cd:cb:a3:6d:fb:8a:bb:4a:02:2f:de:fd:
                    8c:7a:a0:27:87:a9:a9:34:87:bd:b2:19:43:27:92:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:62:31:B6:C6:B9:5E:2A:B4:94:54:B5:31:6B:CD:8B:70:5F:8B:5D
            X509v3 Authority Key Identifier:
                keyid:5A:49:C6:03:7E:00:17:19:BF:B9:F4:90:4E:8C:15:D6:22:CF:04:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A49C6037E001719BFB9F4904E8C15D622CF0402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6C728C472385302417E92E3B1F802FD46DA0D86959297AE3D1C8E7D122CF458/0/323830333a313131303a3a2f33322d3332203d3e20323731393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:2e:f1:6a:55:4b:f1:7a:82:50:a3:6d:b4:df:f2:d1:6b:
         79:e4:22:88:8e:f2:8e:1b:4d:b0:84:4e:9c:03:13:86:8e:4e:
         d8:21:26:ed:f0:b1:15:a6:31:20:7d:85:50:37:d6:a5:31:fe:
         09:3b:96:c9:d3:62:7c:82:c5:8a:74:ce:93:98:3b:0b:60:1b:
         51:96:b6:6f:1f:09:cd:f7:75:9f:a8:2f:d1:aa:c6:aa:cc:eb:
         5d:3a:c0:63:71:18:8a:5e:63:27:32:f8:eb:c2:66:79:94:e6:
         7f:b8:91:b3:37:91:68:fe:5e:06:f4:72:a7:dc:17:83:05:e2:
         95:74:be:70:4d:b4:42:56:31:f9:b7:66:a0:47:a3:5f:55:7a:
         d4:77:2e:46:b3:58:0d:24:e7:e7:9a:2e:c4:67:e7:3a:f4:c7:
         ee:b3:57:22:e3:57:ee:e1:41:fc:04:36:ec:a8:bd:f0:b3:bf:
         bd:c5:b5:16:67:d1:26:6b:81:99:0c:af:26:0e:c6:78:37:90:
         f3:91:47:27:8a:d6:a4:73:b1:50:9a:fe:3c:d2:20:e4:53:16:
         15:74:8d:ff:24:cf:ce:81:cf:79:ab:b6:de:19:ce:73:45:15:
         0c:b5:4d:c9:b1:49:3a:ef:eb:b3:45:dc:e2:95:c5:c8:0b:91:
         cb:ae:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org