Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa
File:                     323830333a393835303a3a2f33322d3332203d3e20323733313136.roa (raw, json)
Hash identifier:          /Q7zZGcIe5Ei/mRc3kpqHoXSxD3yRg3U958MuRVmWv0=
Subject key identifier:   92:F0:16:41:79:B3:A7:21:F4:09:D8:BA:00:85:F6:6C:21:C0:03:86
Certificate issuer:       /CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
Certificate serial:       443E74F5B6DAC5DB1E841943AA5B771E6584B800
Authority key identifier: E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     273116
IP address blocks:        2803:9850::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:74:f5:b6:da:c5:db:1e:84:19:43:aa:5b:77:1e:65:84:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=92F0164179B3A721F409D8BA0085F66C21C00386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:b1:8c:ec:c9:54:85:98:2e:71:cc:cd:fd:
                    71:a1:6a:92:54:69:96:6c:46:72:31:97:31:1b:fd:
                    df:bc:ab:63:a9:54:31:70:e4:d0:e3:c0:65:97:5e:
                    b3:51:90:50:1e:3e:28:d2:57:d8:4b:80:33:04:2a:
                    af:33:3b:e2:30:25:68:da:73:b2:9e:88:a1:ed:59:
                    14:16:a7:29:1a:b8:83:f6:a1:87:b5:1f:ec:c1:5d:
                    06:44:68:d3:11:58:39:63:8f:ad:d4:cf:28:5b:27:
                    1e:a8:9c:52:8c:43:f9:ec:21:8f:30:b9:82:17:13:
                    c2:5b:29:41:1f:d1:55:67:d7:16:d7:5d:09:2e:7e:
                    aa:bc:28:df:4e:97:b8:54:1f:bc:57:b7:61:d6:0f:
                    00:4a:be:d8:e6:22:67:09:d6:e9:e0:f6:d0:2b:4e:
                    8e:60:f4:42:b3:59:2d:a9:c5:d5:62:0e:f4:8e:60:
                    5b:bd:b3:46:3d:ec:0a:ee:52:44:e4:47:ec:7e:74:
                    23:dd:18:91:8f:6c:35:dd:03:22:42:c3:f4:e3:a4:
                    ee:7c:e8:70:65:dc:95:fc:3c:89:db:0b:b7:38:de:
                    13:35:03:b9:0c:1e:0a:b2:d0:34:76:bc:19:da:b9:
                    79:f8:cd:7f:fd:75:28:d4:0b:08:f6:e3:cc:89:66:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:16:41:79:B3:A7:21:F4:09:D8:BA:00:85:F6:6C:21:C0:03:86
            X509v3 Authority Key Identifier:
                keyid:E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/323830333a393835303a3a2f33322d3332203d3e20323733313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9850::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:76:95:fa:5f:ab:75:6a:a3:c2:04:cc:97:bc:7b:dc:45:
         8a:86:de:5d:c7:8e:d2:45:88:3e:78:e3:cb:99:a1:2e:21:a7:
         7f:00:1d:57:91:77:6a:e6:b1:f6:e4:3d:6b:55:8d:af:76:d6:
         90:c6:70:9e:5f:5d:95:d6:26:72:47:ff:85:ea:5b:f6:12:c6:
         4f:8c:f5:ca:e3:cd:1e:3d:8d:35:ce:ed:55:15:31:73:40:cc:
         c6:cf:fb:4e:15:83:30:c3:ad:b9:c8:9a:98:07:2a:dd:99:f2:
         9f:e1:3e:45:eb:a1:eb:b2:cf:cd:25:4e:f6:19:f6:61:0c:5a:
         28:10:cd:70:82:f0:c4:96:ce:d0:67:65:1c:42:ea:ad:88:ba:
         25:ef:7d:b9:ea:72:67:fd:eb:2f:a0:3a:c8:ec:1a:64:56:f1:
         72:a3:6d:06:10:12:51:56:73:94:3d:5b:4a:71:fd:94:5a:e7:
         46:97:f9:51:93:59:60:7c:ef:59:00:0e:f9:f2:3f:af:aa:cd:
         56:3c:fa:9e:8e:bf:78:71:35:dd:d2:c6:05:5d:db:ad:6d:d1:
         7b:46:96:6d:59:ab:d6:a7:8f:fe:e4:b9:eb:08:ae:b2:78:30:
         4e:76:e8:ec:7d:bc:10:38:af:64:41:40:7f:02:64:47:fc:e4:
         8b:ca:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org