Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa
File:                     323830333a313031303a3a2f33322d3332203d3e20323733303830.roa (raw, json)
Hash identifier:          EVqulLnQLxUQkS+fqB3TqYfqM6JF7GO5rFVugCXGn/I=
Subject key identifier:   72:F1:9C:3A:B7:38:26:97:3E:35:11:A3:A4:7A:DF:15:F3:75:E7:36
Certificate issuer:       /CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
Certificate serial:       1592FA8C259670187A6330C2D949029CE2F07CFF
Authority key identifier: F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa
Signing time:             Tue 05 Mar 2024 18:15:16 +0000
ROA not before:           Tue 05 Mar 2024 18:10:16 +0000
ROA not after:            Tue 04 Mar 2025 18:15:16 +0000
asID:                     273080
IP address blocks:        2803:1010::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:92:fa:8c:25:96:70:18:7a:63:30:c2:d9:49:02:9c:e2:f0:7c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
        Validity
            Not Before: Mar  5 18:10:16 2024 GMT
            Not After : Mar  4 18:15:16 2025 GMT
        Subject: CN=72F19C3AB73826973E3511A3A47ADF15F375E736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:a2:af:ba:75:7a:21:e7:68:69:86:a1:e5:
                    e4:93:0c:d9:31:fd:fe:91:bf:6d:2c:4f:46:cd:6f:
                    65:84:7c:02:4c:04:e2:c0:a4:44:11:93:e8:bd:3c:
                    9e:5d:4f:1d:b5:bd:ff:13:9c:65:44:a0:45:15:d7:
                    bc:f3:2d:97:ea:1d:3b:28:33:22:61:42:a4:8d:eb:
                    67:05:2d:e2:45:b2:9a:b5:7d:ed:4d:9e:e8:5f:53:
                    e9:c6:8e:ed:f9:06:c2:21:f0:3b:ae:ca:30:18:19:
                    07:f4:2d:5a:cf:86:f9:43:f6:2f:53:3d:2c:74:b4:
                    f7:79:d0:0b:7c:3d:02:65:28:75:36:60:20:7b:49:
                    b3:54:ff:48:48:6d:9d:5e:b9:1f:19:04:24:a6:a6:
                    08:3e:ba:a9:6f:22:8f:08:da:cb:65:d5:1d:49:f7:
                    d6:ff:d1:89:59:56:ee:97:ff:ff:e3:21:b5:5a:11:
                    1f:2d:1c:34:f0:fd:19:d0:45:5a:b6:e6:4c:80:ad:
                    90:31:c5:3c:ae:70:4b:25:57:f7:15:0f:f9:db:f3:
                    28:9a:7d:a5:91:73:f6:e2:d9:84:de:0c:74:df:32:
                    c0:31:24:60:48:ab:15:63:05:fb:25:a5:c8:95:c2:
                    bb:8a:9b:33:b5:38:52:a8:b7:b2:70:70:8a:b4:45:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F1:9C:3A:B7:38:26:97:3E:35:11:A3:A4:7A:DF:15:F3:75:E7:36
            X509v3 Authority Key Identifier:
                keyid:F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/323830333a313031303a3a2f33322d3332203d3e20323733303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:30:e5:ad:50:34:9b:f8:50:30:f1:77:5c:3b:38:90:d6:
         07:0d:5a:33:86:18:13:a1:ff:8d:a1:ac:91:96:5a:d0:ad:da:
         6a:9f:41:04:87:4b:b3:c3:b5:10:ed:68:08:46:92:47:85:0a:
         ff:f9:0b:2b:d1:f7:c6:d9:d7:af:1d:5e:02:5b:bb:67:ca:5d:
         3a:68:cf:6c:9c:4f:2a:62:12:6a:c0:94:2d:3d:b3:c9:61:3c:
         42:dc:80:66:7d:17:f4:d0:5a:85:20:b1:a7:63:91:dc:f5:3a:
         62:db:be:3b:46:03:90:c4:ed:39:05:c2:12:3c:c5:b6:87:c2:
         e8:80:3c:f9:35:ca:6f:54:d8:e5:4b:e0:b0:28:37:b3:32:f5:
         47:58:de:0e:df:74:c0:67:67:28:65:6a:a7:81:03:01:21:aa:
         54:79:d1:e4:1e:23:fb:90:be:17:9e:90:1b:35:83:73:be:97:
         3a:b6:a3:b5:e6:91:d2:6f:a9:86:f6:6e:cc:61:56:69:39:d9:
         3b:0f:6f:97:3e:9c:c1:1a:d1:65:08:27:b7:ee:73:ee:a6:63:
         2e:e2:53:f3:35:55:93:a3:9d:f4:52:a9:15:99:2f:47:48:c6:
         5c:31:d1:01:a2:1d:f5:d2:c1:47:2d:ba:79:92:10:d0:91:78:
         10:cc:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org