Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa
File:                     323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier:          X7/xlqNRMdzb8JkG8+OB6H9PM/1rzPxKFXd5NSSQnHw=
Subject key identifier:   13:65:5E:CC:FC:E1:1D:0E:24:14:45:C5:EA:79:A8:A1:7D:4C:27:34
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       07FF4C609B02BF549FFE47ED6F6C2B5069F5BBE8
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa
Signing time:             Tue 05 Mar 2024 17:42:28 +0000
ROA not before:           Tue 05 Mar 2024 17:37:28 +0000
ROA not after:            Tue 04 Mar 2025 17:42:28 +0000
asID:                     271916
IP address blocks:        2803:4a10:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ff:4c:60:9b:02:bf:54:9f:fe:47:ed:6f:6c:2b:50:69:f5:bb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Mar  5 17:37:28 2024 GMT
            Not After : Mar  4 17:42:28 2025 GMT
        Subject: CN=13655ECCFCE11D0E241445C5EA79A8A17D4C2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:8c:04:4f:48:c5:fe:08:69:8a:45:2c:b1:
                    5a:52:1e:61:57:4d:ab:59:ef:9e:1b:2e:00:88:8e:
                    a6:18:12:8f:21:34:5b:03:24:b9:41:c2:02:92:89:
                    18:29:fc:3b:52:92:e9:9f:56:c2:71:3d:b0:53:d3:
                    64:24:86:9c:6b:fd:81:c9:65:a5:9b:45:65:1b:75:
                    27:ec:04:bb:5b:72:b9:9c:05:fd:4a:d6:81:a2:58:
                    3f:24:89:77:f3:01:fc:36:f9:b7:60:07:d0:ff:7e:
                    53:d1:ee:c9:25:35:0f:c9:5f:e8:44:dc:4f:77:08:
                    f0:c8:9d:14:64:10:80:71:a2:97:0b:f8:d6:3d:f1:
                    9d:5c:58:a8:fb:a5:58:16:58:1b:05:d9:a9:ab:d4:
                    34:1b:7f:48:8a:8c:ad:b1:73:0e:f4:9d:7e:67:05:
                    b0:94:0e:a0:5c:bf:4c:61:33:5f:c4:34:06:0a:69:
                    54:bc:2f:f3:93:1f:54:ec:1e:1b:79:ca:5e:f0:e3:
                    29:ed:4b:93:91:48:3d:33:52:1c:cd:aa:f5:ed:dc:
                    99:e6:20:4e:d9:39:56:c2:eb:aa:04:dd:9f:d7:52:
                    55:ed:24:97:05:83:e4:eb:8b:6a:9d:ce:e0:c6:2b:
                    9b:cc:84:b8:75:64:56:08:48:12:39:02:22:b1:ab:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:5E:CC:FC:E1:1D:0E:24:14:45:C5:EA:79:A8:A1:7D:4C:27:34
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:0a:37:49:61:76:5b:7d:34:56:d0:74:41:d7:87:34:0a:
         fc:85:0c:08:ff:c3:4d:be:99:92:2d:77:05:06:63:b3:d1:da:
         bb:aa:5b:8d:d4:09:59:f7:88:8f:27:85:38:f6:b3:92:65:44:
         28:33:5e:91:cd:a1:65:5c:4b:33:93:85:62:66:4b:e0:38:14:
         03:6a:3b:7b:27:a3:cc:ef:69:53:67:05:0d:f4:c5:6e:99:b7:
         d4:cc:ef:c4:2c:6b:fa:65:d9:ba:fa:07:fb:08:9e:eb:95:86:
         e4:df:3e:cd:1f:80:cd:e8:67:70:95:c3:7f:84:7f:c8:96:e1:
         ea:53:5d:9a:4e:9e:fc:93:a0:1b:ba:98:07:7a:29:49:bd:a8:
         49:1d:bf:ff:5b:b0:52:f3:ee:f5:cf:41:f7:86:c8:b9:16:ef:
         2f:a2:f0:f2:e3:07:c0:aa:21:f6:c1:21:a1:ee:32:dd:e2:4f:
         29:e4:59:b2:bc:57:a3:45:3d:5d:d0:a9:94:3b:0e:5c:2c:d3:
         e5:fe:81:6f:f9:c8:f6:64:58:7f:06:c7:f6:ed:ab:dc:af:b2:
         f9:a2:f9:dd:ac:29:d2:ab:0a:e0:90:00:71:1b:d8:2b:6c:79:
         49:2a:84:c5:2a:1f:90:fb:8e:37:9f:37:bb:7c:6b:e3:74:0e:
         b2:b1:7a:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 16 02:59:14 2024 by rpki-client on console-ams.rpki-client.org