Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/323830333a376431303a3a2f33322d3438203d3e20323732303537.roa
File:                     323830333a376431303a3a2f33322d3438203d3e20323732303537.roa (raw, json)
Hash identifier:          SszTiuEZG3sLDI8p4mc+BcWQoe9+Nt9IHr1JifmTcZc=
Subject key identifier:   E5:20:97:62:84:55:36:7D:29:B2:F8:20:3C:24:A8:0C:00:82:31:96
Certificate issuer:       /CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54
Certificate serial:       56DC9EC11E514FE4F6DC407C5DB8D4660D943578
Authority key identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/323830333a376431303a3a2f33322d3438203d3e20323732303537.roa
Signing time:             Tue 05 Mar 2024 18:07:02 +0000
ROA not before:           Tue 05 Mar 2024 18:02:02 +0000
ROA not after:            Tue 04 Mar 2025 18:07:02 +0000
asID:                     272057
IP address blocks:        2803:7d10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dc:9e:c1:1e:51:4f:e4:f6:dc:40:7c:5d:b8:d4:66:0d:94:35:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54
        Validity
            Not Before: Mar  5 18:02:02 2024 GMT
            Not After : Mar  4 18:07:02 2025 GMT
        Subject: CN=E52097628455367D29B2F8203C24A80C00823196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:ea:33:f3:c1:a9:95:f4:79:7c:49:42:a9:
                    ff:67:d0:ae:11:f7:c2:40:a2:d5:95:2b:f8:fa:7d:
                    d8:d5:86:36:61:ce:9e:68:5c:80:32:79:9a:e0:45:
                    5f:7c:f0:80:28:0e:71:e1:0e:cd:c9:fa:a1:1f:e7:
                    a7:d9:4b:94:a5:71:1f:d4:d1:93:6b:a9:7c:9e:41:
                    2d:66:1e:7e:e5:64:c8:88:3d:70:2a:64:59:0d:e2:
                    6a:f6:4b:ae:29:91:d9:4a:58:7b:92:23:fa:cd:46:
                    2d:25:b8:8d:13:32:86:50:2c:87:54:c2:74:80:cb:
                    c4:63:c3:02:44:e9:db:d7:12:ac:c4:d2:7a:20:fc:
                    c5:93:42:e7:10:e7:15:9e:5d:8a:9a:8f:44:3b:02:
                    ff:50:92:5a:df:a0:a2:92:fc:7a:94:b4:cf:8e:df:
                    76:ea:7b:18:ef:19:66:d1:02:96:1e:ed:c6:e9:17:
                    1a:4f:82:1c:13:13:2a:60:ed:cb:e3:7f:23:8e:32:
                    02:91:5e:bf:aa:ba:74:50:56:ea:e7:25:c7:00:48:
                    16:e1:96:1e:ac:71:3c:45:7e:c1:08:ae:0c:01:7d:
                    2d:d1:f2:79:c0:65:a7:26:a8:47:27:29:4a:37:2b:
                    65:53:67:1a:c5:cb:f3:07:9c:07:b4:e3:6a:20:c6:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:97:62:84:55:36:7D:29:B2:F8:20:3C:24:A8:0C:00:82:31:96
            X509v3 Authority Key Identifier:
                keyid:92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/323830333a376431303a3a2f33322d3438203d3e20323732303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:4e:d8:7e:e8:b7:18:99:5a:cf:ca:c9:e2:15:59:8a:f3:3b:
         02:e3:1a:22:0c:8d:0c:34:95:55:d9:45:52:e8:03:e0:a7:28:
         28:0f:de:1b:9d:d5:33:84:b2:1b:a3:38:8d:a8:0a:17:d9:07:
         19:0a:10:82:c6:64:6d:bf:ca:32:ba:b7:27:b3:a7:bc:43:e6:
         4f:33:90:01:ba:3a:8a:68:84:c5:62:5c:57:61:68:e3:c8:b7:
         63:24:e5:ba:e4:70:4d:79:52:eb:92:ad:01:c7:7c:bd:a1:8c:
         b2:f3:b8:34:15:59:a2:aa:e9:f8:a0:7c:ad:7e:be:37:7f:1e:
         4b:d8:8c:e1:4a:dd:95:12:df:01:28:d5:93:15:2f:6d:d7:fd:
         c5:e4:70:47:c6:01:46:d5:c9:4f:ff:e9:28:52:8d:db:e7:ca:
         3b:10:ce:7f:29:04:be:b4:eb:cb:6a:30:85:57:fd:55:14:08:
         1d:82:58:a3:b1:95:4f:b5:cd:aa:26:11:c2:e0:63:74:9f:e7:
         e8:40:12:99:89:3f:db:03:ca:5a:2b:2e:43:9c:9f:2f:f6:14:
         0a:48:20:34:ee:f7:43:e8:ad:04:3a:22:da:28:5f:7f:8b:7e:
         41:67:3f:8f:07:63:bf:9e:90:2b:f4:e0:8d:f5:c7:80:80:c2:
         46:ab:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org