Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa
File:                     323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          nwLvEFuCIUAtwzaMmY9Yq9LDiNY2j0HETeowM8sr4Xo=
Subject key identifier:   53:86:BF:8E:42:3F:51:53:7D:37:C7:B1:17:5C:A4:A8:DB:B6:4C:7E
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       3CCBE8666D8DA09178B85415DD37470F3AB3B5EA
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 17:50:41 +0000
ROA not before:           Tue 05 Mar 2024 17:45:41 +0000
ROA not after:            Tue 04 Mar 2025 17:50:41 +0000
asID:                     267699
IP address blocks:        2803:51a0:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:e8:66:6d:8d:a0:91:78:b8:54:15:dd:37:47:0f:3a:b3:b5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Mar  5 17:45:41 2024 GMT
            Not After : Mar  4 17:50:41 2025 GMT
        Subject: CN=5386BF8E423F51537D37C7B1175CA4A8DBB64C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:51:7c:9d:2b:d7:3b:8f:ba:d0:17:71:04:
                    31:75:46:ff:73:7e:19:88:9f:8f:67:fc:3e:5d:c5:
                    6e:1c:a8:49:ee:0e:1e:d4:3a:5e:8d:09:28:53:52:
                    35:80:8c:31:5e:4a:7e:33:fe:9d:72:fb:95:7b:4e:
                    b9:3b:bd:b9:15:cc:d9:82:56:50:32:ec:78:c1:01:
                    e2:29:ad:ec:7e:15:85:f1:02:44:8a:46:f1:60:6b:
                    74:79:c3:0b:93:66:90:ad:18:b7:7c:b2:3f:4f:5b:
                    c2:a7:85:d1:25:4c:bd:2a:b2:68:6f:95:87:90:07:
                    6d:49:fb:cb:17:a4:49:d4:05:32:da:4b:59:4a:7b:
                    96:e5:65:c6:50:fe:62:6b:0f:c3:4c:09:80:0f:1b:
                    09:de:c3:c7:1c:cd:89:0b:17:a6:98:6d:86:98:b3:
                    5a:a0:23:1a:52:e8:7e:8c:db:8b:54:2f:b7:50:48:
                    69:27:3f:85:56:8c:81:f2:c8:55:de:c1:bf:e7:05:
                    ef:90:46:4d:cd:f6:23:d2:22:34:02:f1:9f:89:51:
                    dd:b7:84:d8:a1:61:92:15:71:b9:49:87:ac:8f:e1:
                    26:ba:a5:7b:a0:cb:a4:9b:39:e4:12:18:cb:82:5c:
                    ba:dc:16:3e:f6:d2:78:d3:8e:7a:3e:58:d4:8c:f8:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:86:BF:8E:42:3F:51:53:7D:37:C7:B1:17:5C:A4:A8:DB:B6:4C:7E
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a39303a3a2f34382d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:f4:2c:d2:2f:8d:f0:b1:57:ba:d6:99:e5:0c:84:9f:26:
         16:61:07:dc:e2:ed:a4:a0:55:fb:83:92:46:c8:47:dd:2f:59:
         e3:b6:27:c0:09:25:e8:3d:cf:e7:43:61:da:53:5e:cf:b8:5a:
         31:e5:3a:dc:4b:d3:b8:ea:20:36:91:2c:d1:1d:f4:ce:0e:b7:
         e5:83:dd:42:4f:af:12:08:04:7b:fe:9d:34:64:f9:f7:6a:fb:
         58:e8:cc:22:7c:95:a0:4a:7b:13:a2:0e:7b:73:2f:d3:e8:c4:
         28:91:50:4c:7f:e2:4a:95:23:84:39:0d:c1:53:f2:36:98:6e:
         ad:a6:78:e1:70:e4:1f:bd:e1:15:e0:19:dd:9a:1e:40:4c:a9:
         dd:6e:b6:8e:6a:8f:f6:03:0c:65:32:cc:e1:70:2a:3e:61:63:
         af:d9:d4:b8:7c:46:17:52:72:a9:ee:7e:6a:8b:71:4c:fe:11:
         a6:72:2b:88:ae:39:9a:ea:11:e3:8a:20:12:26:22:c6:c8:61:
         b0:b5:ea:f4:c3:71:13:4b:6d:14:3f:86:78:3c:1b:5b:42:9d:
         b5:0c:ae:d9:e9:41:60:3a:62:37:63:27:2d:60:7c:69:d5:ba:
         59:32:ef:42:76:f0:e9:4c:25:5d:b8:2a:01:78:2e:12:65:38:
         73:15:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org