Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
File:                     323830333a663531303a3a2f33322d3438203d3e20323732303334.roa (raw, json)
Hash identifier:          +StgVTL84j/h2hULFlGsZ++7huBgLSxz4ywDN7/IET4=
Subject key identifier:   9E:C1:91:70:50:18:FD:55:3E:1F:2F:ED:1E:01:CA:46:8C:10:E0:1B
Certificate issuer:       /CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
Certificate serial:       69AE3A89B8381CA5B9CD9F1D8DAE78C21A82D910
Authority key identifier: 89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa
Signing time:             Tue 05 Mar 2024 18:22:14 +0000
ROA not before:           Tue 05 Mar 2024 18:17:14 +0000
ROA not after:            Tue 04 Mar 2025 18:22:14 +0000
asID:                     272034
IP address blocks:        2803:f510::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ae:3a:89:b8:38:1c:a5:b9:cd:9f:1d:8d:ae:78:c2:1a:82:d9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
        Validity
            Not Before: Mar  5 18:17:14 2024 GMT
            Not After : Mar  4 18:22:14 2025 GMT
        Subject: CN=9EC191705018FD553E1F2FED1E01CA468C10E01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:ba:d7:0c:15:cb:94:dc:37:58:09:35:f9:
                    33:40:80:45:16:a2:3c:e9:47:9d:45:08:1e:9f:ea:
                    67:76:51:d0:07:1b:21:9b:79:56:18:4b:f9:f4:7a:
                    75:14:e9:bb:f5:e6:09:76:39:39:03:0d:24:49:1a:
                    87:cd:4b:ba:7e:90:66:84:30:f0:51:a1:5e:ce:c8:
                    48:af:70:26:46:26:a8:d2:2a:16:d0:4f:12:73:f1:
                    dd:f2:a6:13:5d:32:dc:d3:d8:af:ca:c9:a8:04:da:
                    e3:25:01:7e:f1:5d:d0:a0:09:20:62:16:d5:da:ed:
                    d3:bf:12:5a:72:33:62:3f:cc:c1:cb:f4:b5:bf:7a:
                    8d:95:43:eb:81:d6:63:bd:90:f7:0a:29:d6:ab:94:
                    12:27:c9:6b:15:7a:f3:bc:dc:9e:ad:9b:46:eb:c3:
                    dd:ae:1d:aa:71:29:a9:c5:7f:56:9d:d0:c2:cd:ed:
                    14:93:eb:fb:2a:23:b9:43:e1:51:a5:5c:26:27:81:
                    ec:d9:2a:f5:5b:a0:7e:d6:24:d9:28:38:88:be:a7:
                    2d:fa:2c:24:cd:89:42:eb:65:4c:38:6b:e9:1c:b2:
                    9d:6c:e8:d2:c0:10:2d:3f:ef:4b:41:f2:61:b7:f8:
                    ca:e9:75:33:fa:7d:39:87:90:b9:07:8d:db:40:b5:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:91:70:50:18:FD:55:3E:1F:2F:ED:1E:01:CA:46:8C:10:E0:1B
            X509v3 Authority Key Identifier:
                keyid:89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/323830333a663531303a3a2f33322d3438203d3e20323732303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f510::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:86:ac:f0:fb:63:39:2a:63:b0:7b:3b:11:34:60:1e:fe:0d:
         3e:c5:e3:b4:08:55:3d:a6:f3:13:c5:ec:6c:76:79:0c:9c:fe:
         46:fe:8c:f4:c1:ea:78:44:4b:85:95:ce:ad:4a:dc:32:bf:45:
         a2:03:0a:f8:84:23:bb:d6:99:37:01:c0:71:fa:12:3d:fe:98:
         51:0f:c9:39:d4:84:4a:6f:cc:21:13:a3:f3:ea:65:de:67:56:
         ec:6d:30:47:20:02:91:dc:28:bc:58:df:5b:3d:d9:c4:c4:17:
         ef:6b:b9:28:af:e2:49:d2:57:06:ab:c0:92:14:5e:8b:97:e6:
         3f:7a:2b:71:04:5e:5d:79:1b:fd:8a:65:a9:fb:22:f1:1d:b2:
         17:e7:83:56:5b:f8:89:5e:1d:95:bf:e7:aa:4d:75:27:f6:84:
         71:c0:47:82:f6:15:f4:f1:af:c3:0e:1f:8b:22:42:8f:f6:32:
         cf:f5:2d:f6:86:a9:cc:1e:60:1e:c0:3e:0d:ee:84:47:43:a0:
         fc:9a:93:ad:f8:45:22:6f:bc:7a:a0:83:51:10:ed:04:11:ad:
         6f:eb:0e:ba:b9:c9:05:46:92:18:5f:95:21:5c:59:4c:ed:5a:
         06:dc:cd:85:ca:b9:b9:fb:29:35:43:bd:12:f5:d7:f8:2f:f2:
         23:af:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org