Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3335203d3e20323732383833.roa
File:                     323830333a356139303a3a2f33322d3335203d3e20323732383833.roa (raw, json)
Hash identifier:          GvVVdO4tWx9ClAZE3///c+XqmXQmweefu3WOaPjxgxQ=
Subject key identifier:   83:C1:17:1B:A3:0C:11:FF:FE:0D:9A:3B:B6:C1:74:D7:D4:DB:53:72
Certificate issuer:       /CN=CE44C7223EEA81B30E923FA4269D01FA228630C1
Certificate serial:       226C1AFBC97CD474D99BD714C59368A2F701CC10
Authority key identifier: CE:44:C7:22:3E:EA:81:B3:0E:92:3F:A4:26:9D:01:FA:22:86:30:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3335203d3e20323732383833.roa
Signing time:             Tue 05 Mar 2024 17:56:34 +0000
ROA not before:           Tue 05 Mar 2024 17:51:34 +0000
ROA not after:            Tue 04 Mar 2025 17:56:34 +0000
asID:                     272883
IP address blocks:        2803:5a90::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 20:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:1a:fb:c9:7c:d4:74:d9:9b:d7:14:c5:93:68:a2:f7:01:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE44C7223EEA81B30E923FA4269D01FA228630C1
        Validity
            Not Before: Mar  5 17:51:34 2024 GMT
            Not After : Mar  4 17:56:34 2025 GMT
        Subject: CN=83C1171BA30C11FFFE0D9A3BB6C174D7D4DB5372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:53:18:77:b0:34:f1:d3:30:9d:c4:6b:3b:
                    a4:05:12:89:4c:8b:48:ec:d9:4d:bc:3f:22:a4:df:
                    a8:8d:f0:de:56:cb:4b:fb:f4:d1:06:20:ee:fc:0a:
                    b9:e6:d0:d6:ad:64:76:c0:d0:80:22:58:7a:05:e9:
                    de:b8:9f:d2:44:f0:e3:7b:e7:15:50:c4:bb:0a:3b:
                    22:6d:b9:db:c9:e1:ab:7c:e3:e0:9a:b2:10:a0:6a:
                    ec:04:d2:c2:b0:32:44:ea:db:e2:bc:9a:c8:b7:67:
                    7e:9b:b1:0a:ff:8d:37:d9:c4:4e:7f:7b:4f:08:13:
                    f5:81:38:d0:e2:83:86:8c:86:3a:04:25:91:a8:31:
                    8a:aa:bd:27:a2:a5:78:6b:86:ec:90:e8:71:c3:c3:
                    b3:2a:38:68:02:97:c9:9f:9e:b9:0e:cd:77:bf:ab:
                    ad:bf:0b:99:64:9d:31:ad:6f:fe:71:bf:79:05:8f:
                    11:b6:0b:af:ee:a0:cc:d7:f5:ce:df:ea:db:58:b2:
                    31:23:4c:74:33:07:a3:ef:3b:1c:c3:a6:f2:e4:80:
                    d8:fa:68:49:88:d5:09:10:f3:73:d4:6e:26:0f:d7:
                    a4:8a:87:76:f6:f9:25:99:da:a7:d9:44:ca:65:0d:
                    36:74:10:9b:8f:84:58:09:5f:24:b2:38:4e:25:55:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:17:1B:A3:0C:11:FF:FE:0D:9A:3B:B6:C1:74:D7:D4:DB:53:72
            X509v3 Authority Key Identifier:
                keyid:CE:44:C7:22:3E:EA:81:B3:0E:92:3F:A4:26:9D:01:FA:22:86:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3335203d3e20323732383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:12:97:5a:db:b8:ff:7b:c2:66:1b:7f:fa:c5:19:fd:38:
         39:69:7c:a5:cf:62:38:ba:5c:59:1a:56:f2:b8:57:e9:ee:88:
         c9:ff:86:81:62:a5:63:3e:5f:d0:73:ea:84:fb:cc:36:e2:88:
         28:b7:1e:c2:d7:87:00:5e:3c:78:b7:df:db:45:4f:a7:4c:30:
         f8:ae:53:a6:3b:57:7e:34:98:47:7e:61:5e:be:60:54:d3:5e:
         bb:95:07:3f:1c:7d:37:57:95:04:5f:8b:09:64:68:ee:29:85:
         6e:38:82:c5:5e:72:20:4e:78:d8:44:14:0c:f9:e4:c1:c5:c6:
         89:66:06:56:f0:73:ef:3a:8c:2d:2b:82:a1:d8:49:0b:24:70:
         e4:01:04:b1:6d:47:ba:db:b2:bb:27:30:49:d2:65:4e:4e:94:
         6b:57:05:e2:0d:7d:07:64:3e:fc:94:c9:7b:17:de:6a:31:4f:
         ed:c6:c4:29:a9:ec:76:a2:c9:ca:c3:cf:cb:b1:71:87:3e:a9:
         fe:ce:1a:d0:0e:ba:e2:90:d6:df:48:ea:df:df:38:8c:2e:51:
         fc:2f:e3:17:11:a3:1e:d1:7d:5b:9b:be:9b:2e:ce:32:a6:83:
         cd:5f:98:a9:ae:d2:df:86:34:13:73:df:12:b4:1f:36:6e:72:
         5b:4a:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:52:45 2024 by rpki-client on console-fra.rpki-client.org