Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/323830333a613438303a3a2f33322d3634203d3e20323632313932.roa
File:                     323830333a613438303a3a2f33322d3634203d3e20323632313932.roa (raw, json)
Hash identifier:          ZKwB5lwT8sRIl5sr3Z3ga9L4X1oBpmjmSt3KYm2vM24=
Subject key identifier:   B7:F9:73:59:49:84:BD:11:BC:20:7C:35:24:BE:29:14:B6:69:48:78
Certificate issuer:       /CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
Certificate serial:       362CF80816A65466E2D86F3A97FC7B273877BD89
Authority key identifier: 55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/323830333a613438303a3a2f33322d3634203d3e20323632313932.roa
Signing time:             Tue 05 Mar 2024 17:54:00 +0000
ROA not before:           Tue 05 Mar 2024 17:49:00 +0000
ROA not after:            Tue 04 Mar 2025 17:54:00 +0000
asID:                     262192
IP address blocks:        2803:a480::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:f8:08:16:a6:54:66:e2:d8:6f:3a:97:fc:7b:27:38:77:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
        Validity
            Not Before: Mar  5 17:49:00 2024 GMT
            Not After : Mar  4 17:54:00 2025 GMT
        Subject: CN=B7F973594984BD11BC207C3524BE2914B6694878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:1e:0d:71:f4:33:c5:72:7e:a6:3c:01:8b:
                    d2:8b:63:14:ff:b9:73:6a:9f:6b:58:ab:62:b2:57:
                    fe:e5:23:11:af:45:ba:dc:1d:89:b2:8a:c8:c8:a8:
                    63:3c:30:ba:52:a7:3f:de:91:84:40:d9:f3:64:de:
                    be:b7:62:27:92:a8:91:8d:0d:91:05:64:66:75:f8:
                    34:fa:bb:80:48:d6:bc:ca:c9:82:a4:7e:39:46:2e:
                    64:26:9e:ae:64:b1:0b:c6:5c:cc:94:27:e4:bb:c9:
                    ef:0f:b9:91:84:d5:26:b8:3a:23:55:46:6f:f0:8b:
                    05:a6:d0:20:67:d3:21:96:7a:39:f8:17:6d:01:cf:
                    a5:26:ee:b6:34:4b:27:88:dd:84:4e:74:49:ef:b8:
                    04:c1:36:b9:08:3c:c5:56:18:01:25:de:0f:3e:6c:
                    f9:ed:b6:ee:58:ca:e6:04:d0:a8:5e:2d:5b:f7:c9:
                    03:66:e2:54:76:81:64:06:ea:71:a0:13:e5:d0:c6:
                    26:82:2a:25:26:b8:b1:b4:41:45:26:67:12:3b:ec:
                    d1:59:52:d4:51:cd:e3:7a:98:ff:f9:28:2f:84:07:
                    cd:07:1d:4c:b8:ba:d7:4c:c8:54:85:67:e9:39:84:
                    6d:1b:7d:7a:30:e0:ce:ac:18:1e:d8:6b:37:cf:5e:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F9:73:59:49:84:BD:11:BC:20:7C:35:24:BE:29:14:B6:69:48:78
            X509v3 Authority Key Identifier:
                keyid:55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/323830333a613438303a3a2f33322d3634203d3e20323632313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a480::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:19:08:ba:0a:89:a7:44:38:4e:02:b7:40:b4:f1:78:45:39:
         fd:2e:28:f2:14:52:af:bb:82:22:b5:11:55:cb:6c:27:ef:0b:
         28:e0:e4:bc:26:93:26:01:9d:72:c9:7a:5a:fe:7b:9f:17:ab:
         60:c8:6c:35:fb:bf:70:a3:88:66:db:59:46:3b:14:de:34:97:
         c8:8d:96:b3:d3:ea:45:02:62:69:27:2f:cf:ef:a5:bf:e9:3d:
         d7:44:e9:81:6a:57:42:ff:89:39:6c:1e:91:25:04:dc:ab:bd:
         f0:0c:7b:29:d8:04:3f:4d:40:57:b0:17:c3:87:65:8f:d0:37:
         d0:04:bb:d2:50:b4:62:33:9a:8b:f9:21:e3:09:0a:a2:1c:f1:
         1e:7f:94:7e:5f:80:e1:67:9c:12:6d:05:e6:6a:6c:aa:ce:a7:
         19:29:56:d4:47:d8:7d:eb:e9:6a:85:53:43:68:1b:6c:78:99:
         de:11:f6:b9:be:62:8d:a4:39:8e:03:07:fa:d2:b4:d8:3e:4a:
         85:b7:99:c7:de:71:48:2a:19:6d:07:ec:7f:57:41:e2:c2:4d:
         0f:95:47:87:54:e5:79:67:21:af:67:21:89:f9:e8:05:72:4b:
         2e:37:f8:0d:b8:4e:cc:04:9e:58:12:3e:57:7d:5a:07:6e:2e:
         97:08:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org