Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
File:                     323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier:          4X1qPnvvbHjc9jmcvWIJu0LiMQlRLw4zge2oiZOkM7M=
Subject key identifier:   8D:A6:E1:04:EB:7F:7D:6C:6A:90:70:33:83:DA:65:9B:75:22:75:93
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       4D48A42CEF9254B9B596D60B45D54D9261A606E8
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa
Signing time:             Tue 05 Mar 2024 17:42:28 +0000
ROA not before:           Tue 05 Mar 2024 17:37:28 +0000
ROA not after:            Tue 04 Mar 2025 17:42:28 +0000
asID:                     271916
IP address blocks:        2803:4a10:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:48:a4:2c:ef:92:54:b9:b5:96:d6:0b:45:d5:4d:92:61:a6:06:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Mar  5 17:37:28 2024 GMT
            Not After : Mar  4 17:42:28 2025 GMT
        Subject: CN=8DA6E104EB7F7D6C6A90703383DA659B75227593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:96:13:c7:8d:4f:98:69:56:af:75:2f:4c:
                    39:ec:1c:11:43:48:ca:de:a0:16:9a:1b:f7:c9:94:
                    d8:ca:d5:4b:5d:70:22:f3:16:83:ae:e6:73:0e:3f:
                    70:f6:a5:64:cc:87:45:e5:15:43:80:f8:7e:14:5a:
                    a3:df:f1:18:9a:2f:48:b7:40:c2:65:21:28:80:ce:
                    7c:1f:21:d2:07:dc:f0:2e:23:b5:41:aa:f2:ca:dd:
                    54:a5:39:86:80:70:ad:e0:e0:45:8e:be:96:87:53:
                    2e:f1:2c:fd:af:b0:da:04:49:7c:e1:e8:53:f6:02:
                    d2:d7:5a:4f:44:e1:70:d0:95:b0:fe:b3:53:4b:57:
                    28:0a:88:0c:11:82:2d:c0:ea:68:52:3d:20:e1:af:
                    1f:da:e5:ec:93:d2:2b:37:a6:31:57:d4:a9:af:74:
                    25:c2:5a:d9:98:cf:d2:ca:cd:4c:9d:a8:ee:01:12:
                    ef:ca:39:e8:fd:24:5f:25:5b:9f:58:e7:28:5f:fe:
                    0a:47:d0:83:24:ea:9e:7e:2f:c7:36:43:02:63:1d:
                    9a:a2:cb:bd:7a:c5:67:38:b5:7c:38:a7:1c:82:a7:
                    c9:9a:d9:e3:52:20:f4:aa:ff:9e:22:d9:9d:7e:75:
                    23:44:94:d2:97:07:47:3e:5e:4f:fc:4d:08:9d:7b:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:E1:04:EB:7F:7D:6C:6A:90:70:33:83:DA:65:9B:75:22:75:93
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a663030303a3a2f33362d3336203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:c2:6a:b6:52:17:23:46:ee:7a:60:4f:e8:6e:91:c8:06:
         2c:79:62:a3:37:db:9e:91:5c:97:89:0c:ae:b4:c0:fb:60:84:
         ae:3b:66:c1:44:5f:1e:33:45:20:11:0b:18:60:28:63:93:7d:
         1e:65:6d:18:52:5d:aa:df:bc:88:25:e0:45:d2:d7:6c:48:c5:
         2a:a8:e1:96:8f:31:f8:72:45:03:b1:c4:c0:3d:70:91:b5:7a:
         bd:ee:2c:3f:da:a8:29:15:0c:f7:28:21:ff:ea:10:f6:0e:4b:
         9d:d1:c1:7b:57:d6:c3:53:f3:83:05:74:97:f4:91:42:94:f7:
         a5:67:99:39:52:f9:cb:7b:c4:e5:96:6b:8a:80:54:a0:65:68:
         dd:27:d9:1d:96:6d:76:8b:5c:68:88:c6:32:19:3e:e1:0c:8d:
         05:ef:f0:94:5f:ec:1e:a2:77:0b:43:d3:33:ab:4a:97:1e:c5:
         04:9e:65:dd:2a:72:b5:bf:e9:91:60:9a:38:d5:09:4f:55:1b:
         a0:3e:2d:31:84:fb:40:dc:95:1e:ca:a7:36:73:69:e5:c7:e6:
         6c:14:36:c6:34:65:78:31:43:c2:a0:76:6f:17:9b:a3:dc:1f:
         0a:96:3d:79:80:18:bc:24:7c:c1:1f:4b:b5:49:59:3e:23:f7:
         8f:e2:e6:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org