Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3332203d3e20323731373733.roa
File:                     323830333a6138303a3a2f33322d3332203d3e20323731373733.roa (raw, json)
Hash identifier:          SAzTyhTwdw3AL7egqjeflb6Ru8mEoTEFYDJzPq4F/ks=
Subject key identifier:   8F:A6:A5:C4:6E:7C:F1:C8:7A:04:28:51:5C:5B:CA:62:FB:20:FF:38
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       1312218415EAFA02611FB70E6F805D507CC7D141
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3332203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:18 +0000
ROA not before:           Tue 05 Mar 2024 17:36:18 +0000
ROA not after:            Tue 04 Mar 2025 17:41:18 +0000
asID:                     271773
IP address blocks:        2803:a80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:12:21:84:15:ea:fa:02:61:1f:b7:0e:6f:80:5d:50:7c:c7:d1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:18 2024 GMT
            Not After : Mar  4 17:41:18 2025 GMT
        Subject: CN=8FA6A5C46E7CF1C87A0428515C5BCA62FB20FF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:b2:aa:bb:ee:d1:fe:2b:8e:6b:65:4e:d1:
                    64:08:1b:86:3b:1f:12:b4:9b:26:23:b4:fa:8c:84:
                    43:40:90:cd:d5:e8:63:61:2d:55:f3:cd:7d:97:b4:
                    46:02:a3:c8:f8:0c:d4:ed:1a:79:6c:e5:3f:9a:70:
                    74:bf:ea:e4:10:e5:a3:fc:f9:ed:fe:72:f6:6a:31:
                    28:c6:c8:12:25:2f:8b:09:fe:69:22:c5:98:f6:53:
                    7f:61:56:fb:41:0e:87:09:68:8d:50:81:6a:d1:cd:
                    ff:45:9b:ed:56:98:fe:c0:9c:29:6c:44:69:62:9c:
                    a2:33:4a:e0:cb:5b:fb:82:7c:d0:c1:f4:20:60:b6:
                    ae:01:a6:e8:2d:d4:cf:22:4c:00:b6:0f:2e:f2:12:
                    c7:44:4e:39:66:9b:c4:ac:88:7a:d0:57:97:05:05:
                    21:65:61:e9:63:e7:25:ea:62:9f:0e:59:e6:bd:d1:
                    26:22:e1:3f:32:6a:f9:34:71:ed:14:e9:1f:ec:b7:
                    ff:20:e2:46:c6:bb:54:81:2e:13:c5:1d:a5:54:fb:
                    23:e7:2a:6a:8e:92:d5:5e:5a:16:9c:be:5c:fd:51:
                    1a:6d:47:8d:5d:4c:0d:c7:e3:33:3e:8f:6f:1c:79:
                    c6:a7:cf:cb:be:63:f0:35:ec:01:6f:54:07:3b:32:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A6:A5:C4:6E:7C:F1:C8:7A:04:28:51:5C:5B:CA:62:FB:20:FF:38
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3332203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:38:d4:57:ab:35:d0:c5:ea:f2:f8:a6:eb:52:37:d1:f6:
         47:d0:93:42:a6:64:3c:ec:cc:e6:33:b2:37:bc:0b:e3:ef:b0:
         7b:ba:82:80:6b:7b:36:ee:cf:a6:60:f0:34:0f:72:7c:1a:1b:
         da:c6:07:c6:38:48:7f:d0:3e:c1:3b:57:41:b6:ae:d0:67:71:
         e3:89:39:7b:18:1b:cd:7e:42:23:63:e7:14:d9:dc:b1:5a:a2:
         9e:31:e7:e7:f7:48:3e:55:c2:3e:0b:31:d3:c5:3b:66:d7:35:
         a6:4e:02:4e:7d:95:a1:70:b9:0a:af:7c:6f:22:4f:cd:4f:01:
         36:42:a1:23:34:db:1b:9d:9d:a3:e9:3c:a8:45:1f:91:d7:49:
         16:81:01:97:69:d3:7f:20:41:66:23:27:3f:32:a8:f8:10:39:
         88:7e:76:ed:70:9f:fe:da:71:d6:66:91:e3:3c:de:9f:c6:0e:
         fa:1e:f9:37:08:02:1b:12:87:55:e7:6f:40:9d:e6:23:3c:58:
         9d:f0:c5:aa:eb:f9:63:8a:46:45:08:f4:fd:b6:3f:a4:2a:00:
         d5:eb:8e:25:8f:ef:3a:9e:df:44:b1:56:b7:63:1d:7a:63:bb:
         26:67:c5:42:6e:a7:e1:73:f3:fa:62:e5:b6:12:68:c4:17:9f:
         df:a1:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org