Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa
File:                     323830333a653238303a3a2f33322d3332203d3e20323633323133.roa (raw, json)
Hash identifier:          H3CGxuDiFCxRG24Uj6j5XyLrE1712ktPyFshxr7aooc=
Subject key identifier:   AC:03:0B:C0:C8:AC:84:2C:A5:5E:58:6A:B0:73:0E:2A:E6:AA:DE:A0
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       577385F9F27A10CEA1448D9B5E2FC5F3C3B6A26A
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa
Signing time:             Tue 05 Mar 2024 17:46:15 +0000
ROA not before:           Tue 05 Mar 2024 17:41:15 +0000
ROA not after:            Tue 04 Mar 2025 17:46:15 +0000
asID:                     263213
IP address blocks:        2803:e280::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:73:85:f9:f2:7a:10:ce:a1:44:8d:9b:5e:2f:c5:f3:c3:b6:a2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Mar  5 17:41:15 2024 GMT
            Not After : Mar  4 17:46:15 2025 GMT
        Subject: CN=AC030BC0C8AC842CA55E586AB0730E2AE6AADEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:49:ea:d7:6f:a4:44:c8:cc:9d:60:22:25:
                    90:ec:cb:53:a7:37:02:ca:da:43:ac:0e:68:16:63:
                    0d:41:7f:d0:15:ea:11:e6:2f:9f:bd:7f:15:82:7c:
                    9b:e5:64:6b:1c:1b:82:3a:b1:27:f6:2c:67:18:70:
                    fb:80:e7:e2:0a:c0:d9:6a:ce:2b:50:f1:a2:20:d3:
                    d2:8a:5f:e6:b7:a3:e7:09:d8:6d:f0:d4:fe:cf:49:
                    fc:65:cb:5e:30:dc:f3:a0:44:f5:c6:fe:18:04:88:
                    50:66:c2:dc:c0:d6:d7:31:13:e3:16:53:bd:79:5c:
                    a3:8a:08:9a:27:4c:7b:64:27:08:fc:cf:1f:92:67:
                    40:e8:f6:b5:ff:4c:ff:dc:16:ea:90:6c:93:ce:cf:
                    47:30:41:71:4c:88:89:46:d0:2b:0c:91:a7:f5:a2:
                    6c:12:27:fc:42:7b:48:9a:db:74:b6:bf:ca:13:1a:
                    70:37:39:68:0b:40:f2:e6:5b:54:5e:6b:85:d7:6a:
                    f1:73:5d:e5:fc:10:13:c5:91:da:04:bf:37:ad:dd:
                    21:70:c7:0a:13:c5:6c:8e:74:6c:78:20:3d:06:cc:
                    11:ab:5c:5f:59:e0:03:54:ca:aa:e1:f5:51:dd:36:
                    e7:cb:d6:af:86:a6:84:cb:4a:cb:08:53:62:19:7f:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:0B:C0:C8:AC:84:2C:A5:5E:58:6A:B0:73:0E:2A:E6:AA:DE:A0
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e280::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:97:8b:49:78:78:5e:77:9d:ee:38:ad:38:73:ef:bd:85:
         e3:e6:b0:8a:a0:b9:e5:59:e1:10:98:08:50:5c:2d:1b:40:f7:
         22:c7:6d:33:b4:2c:00:36:e4:01:48:63:09:54:84:16:69:78:
         fd:f5:24:38:33:ee:df:42:50:13:6c:ae:c6:94:11:cf:de:3d:
         1d:56:46:a7:70:fa:e8:fc:dd:b1:7b:15:ed:cb:e3:42:6e:e8:
         20:32:65:1d:f3:cf:72:90:a9:bf:37:8c:4d:19:e9:56:14:bc:
         2e:cb:5c:7b:5f:d2:50:8a:9b:15:ea:c4:9c:e7:a8:c8:14:28:
         2a:c1:3d:4d:1b:e8:90:a4:d2:98:fc:cb:e8:fd:cc:b9:cd:3b:
         e2:1e:25:ce:da:69:b3:bf:c4:86:8b:01:96:1d:9e:fa:85:a6:
         32:00:4b:e9:80:81:46:9c:fc:db:db:e3:3e:5d:ba:59:59:0d:
         35:74:68:26:36:9b:ff:50:f7:2a:87:2c:7d:5b:2d:68:b0:31:
         b5:d6:70:32:c7:e7:34:10:af:5d:22:98:ba:3c:fe:f9:dc:83:
         72:bd:a3:2a:c0:18:52:d2:2a:41:92:90:76:84:02:f0:d5:5a:
         01:9e:b7:2e:39:70:4d:b8:82:75:28:38:1b:43:3a:b6:15:e5:
         bb:25:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org