Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa
File:                     323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa (raw, json)
Hash identifier:          xcnvlfjrUPqny+7nlZnRD21O4FFSMKUVnm3ywWKc5/8=
Subject key identifier:   AD:98:EB:60:2D:6B:3D:26:62:72:E9:79:5E:7D:BA:49:C6:C4:70:EF
Certificate issuer:       /CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
Certificate serial:       0ABE76AE98692937D07BBCBA235CBF2D2287873B
Authority key identifier: B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa
Signing time:             Wed 09 Oct 2024 15:05:01 +0000
ROA not before:           Wed 09 Oct 2024 15:00:01 +0000
ROA not after:            Wed 08 Oct 2025 15:05:01 +0000
asID:                     273920
IP address blocks:        2803:7b50:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:be:76:ae:98:69:29:37:d0:7b:bc:ba:23:5c:bf:2d:22:87:87:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40653326803718DA3FCFAA792E72AFD5DDF2D1F
        Validity
            Not Before: Oct  9 15:00:01 2024 GMT
            Not After : Oct  8 15:05:01 2025 GMT
        Subject: CN=AD98EB602D6B3D266272E9795E7DBA49C6C470EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:75:6a:2a:b4:6b:06:01:ca:f3:dd:d3:b3:
                    fb:01:b3:d2:a0:e0:c7:c4:84:55:fc:5b:80:38:f0:
                    47:ab:84:ed:aa:1e:0a:6a:a5:c3:24:4f:c0:6f:3a:
                    f7:ac:6e:79:03:4c:e9:6b:ab:86:83:6d:f5:6a:66:
                    68:e2:94:fe:d5:1d:b9:e4:53:a3:66:02:15:4f:c6:
                    87:31:c3:8e:93:0b:ef:cc:0f:a4:dd:87:dc:37:6d:
                    34:4e:99:dc:49:91:61:6c:ce:f5:d7:7d:9b:60:54:
                    23:22:33:15:7d:d7:5a:a3:05:7b:ca:62:b4:d7:cf:
                    9b:7f:13:dc:e9:b1:98:d5:0e:ee:25:79:79:2b:a9:
                    e3:85:94:68:e1:a1:28:0f:18:b4:84:58:17:8c:39:
                    ce:75:40:b1:53:78:2f:ca:d7:74:be:d5:8a:82:cf:
                    ba:a7:af:eb:1b:f5:4a:2f:67:10:8f:8e:6f:c3:c9:
                    05:2b:3d:bd:98:6d:ac:51:db:52:8a:ca:4a:19:09:
                    cd:e3:70:05:75:11:cd:07:58:42:1c:ef:4a:c7:a4:
                    73:b7:69:7a:ef:cc:91:ec:4e:56:5b:84:3c:da:dd:
                    fc:3a:e5:cd:3a:96:a0:c1:98:d2:7b:88:ab:87:f8:
                    1b:da:bb:68:59:3e:b9:8a:6a:64:2a:57:ed:0a:95:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:EB:60:2D:6B:3D:26:62:72:E9:79:5E:7D:BA:49:C6:C4:70:EF
            X509v3 Authority Key Identifier:
                keyid:B4:06:53:32:68:03:71:8D:A3:FC:FA:A7:92:E7:2A:FD:5D:DF:2D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B40653326803718DA3FCFAA792E72AFD5DDF2D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC5C7E0DA1A0F1BE03989E10871178883499143135290631B2EE2541C8BF090B/0/323830333a376235303a323a3a2f34382d3438203d3e20323733393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b50:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:31:4b:fd:cf:80:4d:01:7e:85:02:6a:8a:a9:c5:0f:38:
         4a:fa:80:b0:2a:6f:d1:ab:c2:51:cd:43:7a:8a:2f:25:13:f5:
         42:ae:7b:ee:e8:7e:c6:f7:7d:72:fe:7e:f6:fd:6d:e8:ee:8e:
         94:12:b4:1b:2b:1f:fe:09:5c:49:fe:a4:26:a9:63:7f:18:7a:
         e2:04:19:f3:fa:d0:79:52:6c:ef:37:5a:bc:57:96:b9:56:80:
         4f:9b:ba:f7:a8:83:5f:05:27:f9:a5:4f:68:63:0e:2a:a9:bb:
         fd:2b:d9:2a:c2:06:8f:39:8a:21:24:8e:c2:76:1e:91:62:cc:
         fd:41:52:9c:4a:42:b9:6a:49:76:fa:fa:2d:35:83:44:9e:6c:
         a2:02:46:32:e3:61:15:90:c6:1b:d1:f9:7b:fd:36:f1:2e:85:
         af:09:d4:69:b8:16:39:e1:3a:f6:1c:41:12:ce:eb:0b:3c:b1:
         1b:cf:21:ce:1b:12:02:8b:20:ba:9e:98:fe:97:1e:32:0a:0e:
         c6:8b:c4:10:4e:a5:1e:63:ee:7e:f8:d2:cf:3d:ef:f7:48:17:
         02:63:cc:ed:cb:fe:e4:1b:49:78:9b:a8:e1:2c:99:52:60:b5:
         30:b9:50:a7:4d:6e:d9:eb:1b:52:e1:1e:db:4d:6a:1e:3a:df:
         36:f6:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 22:54:43 2024 by rpki-client on console-fra.rpki-client.org