Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          BUcmXhbUlaw11Yi5ha8VRrIK4WBM4IuYLLgrMhX2aaI=
Subject key identifier:   56:43:04:41:BD:E8:28:E5:A5:E0:2F:6A:39:A8:69:87:19:B3:A0:42
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       06000EC828511FBAFEECCD15DC1F0C9EFECB2AB9
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 09 Oct 2024 15:05:00 +0000
ROA not before:           Wed 09 Oct 2024 15:00:00 +0000
ROA not after:            Wed 08 Oct 2025 15:05:00 +0000
asID:                     273920
IP address blocks:        2803:7b50:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:00:0e:c8:28:51:1f:ba:fe:ec:cd:15:dc:1f:0c:9e:fe:cb:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Oct  9 15:00:00 2024 GMT
            Not After : Oct  8 15:05:00 2025 GMT
        Subject: CN=56430441BDE828E5A5E02F6A39A8698719B3A042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:57:eb:98:4f:0e:4c:b3:ab:fb:ef:6d:96:
                    de:33:5c:e6:06:f6:49:57:2d:e5:13:aa:9b:00:4f:
                    5e:05:dc:31:65:b4:bf:52:13:4a:74:23:55:81:6a:
                    fb:3e:75:82:82:74:bb:66:e7:ad:c8:b4:31:72:5c:
                    bc:1f:d6:7f:96:b9:d3:38:da:34:e4:3a:92:03:31:
                    be:ac:f2:f9:bd:43:9f:9e:6d:83:18:64:36:d5:a9:
                    6d:d6:c1:7f:95:ea:60:71:c2:a4:e4:a0:90:21:8f:
                    79:a2:12:94:c7:bb:44:bf:94:ed:61:69:04:cc:ac:
                    c8:66:8b:18:c2:51:e5:50:76:a1:8d:73:9f:17:a9:
                    f1:a8:cb:f3:c4:f4:43:50:05:0b:43:49:29:6c:0e:
                    57:a3:14:15:c2:c3:e9:8d:e1:a7:e8:fd:10:43:5b:
                    fa:f4:6e:2c:cb:84:11:ef:09:ab:17:93:d5:e7:61:
                    0c:85:ed:8c:de:e4:be:70:96:86:af:da:0e:5d:72:
                    18:b2:03:df:6b:12:24:f1:4c:ac:a1:d3:ea:3e:63:
                    45:fc:e2:7b:e0:e2:12:c7:d1:f3:63:bf:2c:a4:3c:
                    5d:9b:53:89:4b:9c:0d:b3:27:6a:ca:6c:83:74:8b:
                    fe:72:85:f7:dd:51:4b:61:0d:b0:19:31:58:f2:e4:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:43:04:41:BD:E8:28:E5:A5:E0:2F:6A:39:A8:69:87:19:B3:A0:42
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a313a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:c0:39:91:7c:c6:e4:f4:ac:31:d4:41:a6:da:5e:03:61:
         62:6c:0c:89:a0:c6:72:d3:e6:ce:08:ac:ff:f9:17:fb:bf:68:
         d1:cf:df:13:f2:f3:38:95:97:fa:7d:fd:4d:27:35:45:7d:2d:
         1c:d7:e1:d5:5b:fd:59:80:96:bf:7b:57:b4:bf:3f:67:7c:3c:
         32:c9:39:8a:d1:19:62:4c:aa:d6:42:b9:74:86:55:f6:8b:18:
         98:8e:f1:22:2e:4d:52:de:54:39:b0:ea:45:60:95:20:b6:d1:
         6d:4f:b5:f3:53:20:06:1b:d1:59:ef:36:8a:e9:62:d0:3f:85:
         33:8f:8e:60:d9:c8:30:56:d8:fd:bc:fc:e0:f3:c1:ab:bb:91:
         7f:1c:a2:d3:2d:7b:6a:7e:fc:b9:26:0e:e2:b3:00:80:59:aa:
         07:50:6f:06:b9:26:f2:26:46:b1:af:7b:11:59:99:50:0b:d6:
         de:af:1d:57:81:28:a9:0c:d3:04:5c:d4:ac:c0:7b:94:ee:02:
         e2:e5:0c:7e:ed:b5:42:fc:f2:3d:d4:40:e9:91:dc:a5:17:46:
         8c:4d:09:81:eb:9f:5e:ce:75:96:3c:3b:73:3c:bd:c9:9d:ed:
         40:32:41:8f:b3:45:81:37:82:8c:f9:42:cd:0b:0d:fe:05:d8:
         42:f2:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org