Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa
File:                     323830333a336435303a3a2f33322d3438203d3e20323733383736.roa (raw, json)
Hash identifier:          r+3i2ifjM2LHnmOCQJikeXJggnYzD2lY2kvJsKPH5xc=
Subject key identifier:   7C:05:D2:B2:45:7A:C7:67:91:6E:8D:79:54:E4:BC:00:F9:C9:FF:BC
Certificate issuer:       /CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6
Certificate serial:       262432ED3869FA2CE989D8C06253C5EE9D51330F
Authority key identifier: AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa
Signing time:             Mon 05 Aug 2024 12:50:00 +0000
ROA not before:           Mon 05 Aug 2024 12:45:00 +0000
ROA not after:            Mon 04 Aug 2025 12:50:00 +0000
asID:                     273876
IP address blocks:        2803:3d50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:24:32:ed:38:69:fa:2c:e9:89:d8:c0:62:53:c5:ee:9d:51:33:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6
        Validity
            Not Before: Aug  5 12:45:00 2024 GMT
            Not After : Aug  4 12:50:00 2025 GMT
        Subject: CN=7C05D2B2457AC767916E8D7954E4BC00F9C9FFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:b5:a8:8b:cd:65:4f:3b:d9:66:3c:d9:b4:
                    69:25:88:2e:a6:eb:b0:e2:ca:3a:0c:f9:fd:04:4c:
                    f6:f8:24:cf:21:df:0b:b3:53:e1:c2:de:63:37:b3:
                    bc:68:46:69:ab:c3:3b:ab:5b:6f:1f:d6:cd:59:f3:
                    4d:d1:1e:b4:35:43:34:2a:d0:d9:e5:c4:ae:cb:f2:
                    50:29:52:f4:26:4e:98:dd:3f:e9:7f:0f:60:79:2a:
                    e5:33:e7:1a:bf:a0:01:f6:90:22:8f:b0:89:12:5c:
                    5c:8f:58:ef:34:d5:95:e9:94:43:85:88:50:56:68:
                    90:55:74:2b:86:f5:62:1d:a2:eb:33:0b:86:cf:a6:
                    5d:dc:5a:74:f8:95:0f:ce:a1:ce:e4:cc:09:3e:c6:
                    60:c5:ef:f9:41:a1:87:8b:b4:e0:c2:fa:01:79:dc:
                    4d:8c:5e:14:12:83:aa:2b:24:fc:e3:df:c9:a9:5b:
                    78:48:16:22:ad:a4:b9:24:15:49:12:22:f8:bf:1a:
                    56:23:b9:35:ca:04:ab:94:c9:68:6d:e1:f0:34:3f:
                    e1:9b:e9:7e:7c:42:c3:99:ec:b4:8a:79:27:3f:e6:
                    9a:a5:05:7e:0b:60:1f:aa:ae:0c:1e:da:ec:19:96:
                    d4:29:25:0e:39:5c:92:69:72:99:7e:a3:31:24:1a:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:05:D2:B2:45:7A:C7:67:91:6E:8D:79:54:E4:BC:00:F9:C9:FF:BC
            X509v3 Authority Key Identifier:
                keyid:AA:0F:5D:9C:08:F3:12:D3:4F:4C:45:FB:76:4B:24:1B:3C:6C:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA0F5D9C08F312D34F4C45FB764B241B3C6C62A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF21FB1CA79551D4CD7621A572B07383E349D923543398C21F161FF8117F3A8A/0/323830333a336435303a3a2f33322d3438203d3e20323733383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:29:06:7b:02:99:3a:cf:b7:ed:27:72:bb:78:b5:c7:0f:
         c4:61:4e:6d:52:62:ff:61:98:79:bd:ea:4b:90:b6:a0:bd:15:
         e6:eb:86:a3:c4:d5:ea:e1:64:fc:3a:d3:d2:b8:a2:d0:d2:aa:
         f2:6d:85:73:55:40:a1:d8:46:82:29:d0:bf:8e:d0:b1:bc:a4:
         47:3c:46:ae:2b:f9:5e:01:6e:27:7f:af:9b:70:49:ad:2b:bb:
         95:eb:21:6d:47:3c:fc:7b:93:bf:63:6c:ec:01:56:c6:47:52:
         5a:b2:30:ca:e0:71:96:bf:d9:bd:2e:0f:e5:87:88:90:98:47:
         86:12:0f:9d:c2:4f:2d:13:05:fa:37:0f:e5:ee:8d:25:6c:84:
         47:75:46:94:75:ff:7f:fe:14:f1:39:6f:c9:f7:9c:6c:0c:83:
         f9:6f:17:32:61:ca:01:87:9c:06:72:95:8d:ae:9d:f7:79:aa:
         cb:15:14:55:0d:57:1e:f5:d3:38:0d:db:ad:bc:71:41:5e:29:
         51:77:54:a6:e1:6f:e7:b3:d2:3c:9a:14:31:00:a4:f9:f0:5f:
         e2:2b:27:c6:97:9e:ad:11:1a:c4:a0:1e:29:34:a5:95:47:8d:
         53:fb:d7:91:f8:9c:fc:35:bb:a8:aa:0a:08:d2:63:6d:a5:94:
         2e:30:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 09:16:39 2024 by rpki-client on console-fra.rpki-client.org