Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/323830333a656331303a3a2f33322d3438203d3e20323731383830.roa
File:                     323830333a656331303a3a2f33322d3438203d3e20323731383830.roa (raw, json)
Hash identifier:          8yvlIi6nGLdrH5x2W2i7RfCdF9rbLmV/NLeGEeAe1Nw=
Subject key identifier:   40:6F:DD:C7:BC:06:5C:39:DE:C4:79:39:4E:4A:FB:2B:9F:D4:78:07
Certificate issuer:       /CN=8347DC9E5654CC82255D4755095070F888947093
Certificate serial:       28D20D8D5AB1EC770E5932B1946B9DF4CB5A0B22
Authority key identifier: 83:47:DC:9E:56:54:CC:82:25:5D:47:55:09:50:70:F8:88:94:70:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8347DC9E5654CC82255D4755095070F888947093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/323830333a656331303a3a2f33322d3438203d3e20323731383830.roa
Signing time:             Tue 05 Mar 2024 18:12:52 +0000
ROA not before:           Tue 05 Mar 2024 18:07:52 +0000
ROA not after:            Tue 04 Mar 2025 18:12:52 +0000
asID:                     271880
IP address blocks:        2803:ec10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/8347DC9E5654CC82255D4755095070F888947093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/8347DC9E5654CC82255D4755095070F888947093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8347DC9E5654CC82255D4755095070F888947093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d2:0d:8d:5a:b1:ec:77:0e:59:32:b1:94:6b:9d:f4:cb:5a:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8347DC9E5654CC82255D4755095070F888947093
        Validity
            Not Before: Mar  5 18:07:52 2024 GMT
            Not After : Mar  4 18:12:52 2025 GMT
        Subject: CN=406FDDC7BC065C39DEC479394E4AFB2B9FD47807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:12:3c:a5:ad:1e:74:41:20:d9:09:f3:f9:
                    91:aa:cb:ec:70:bb:c6:4c:3f:6d:dc:46:c1:7b:da:
                    28:9a:63:30:fd:21:aa:a3:0d:42:ac:a0:26:ff:dd:
                    92:0b:36:cb:5a:ae:f4:7d:1c:da:bb:81:02:19:1c:
                    ad:05:b9:3c:f6:0d:c7:70:aa:53:b7:07:39:95:44:
                    1f:cb:9d:0a:2e:59:ff:6a:97:4e:88:c0:2b:91:6f:
                    54:82:a2:87:bc:38:a0:61:be:eb:b8:f3:45:f7:7f:
                    f9:ba:9d:92:fb:11:47:1a:d8:cb:e5:8a:dc:f7:89:
                    11:fa:67:76:03:15:5b:91:b1:8b:c5:d8:0d:f9:d6:
                    60:7b:3c:6f:c3:68:8c:90:e2:cd:ee:f8:4c:97:41:
                    7d:86:0e:7a:58:d7:55:86:f8:e0:1f:7f:93:4f:d9:
                    f9:e5:d0:30:03:c5:80:c9:a6:6f:52:98:91:18:3e:
                    71:aa:9d:cf:ce:e1:b3:c2:df:d3:cb:55:f9:90:d1:
                    da:9f:ad:90:e6:31:0c:57:df:4f:1e:53:7d:7d:1d:
                    cc:3d:f1:e2:19:34:a9:5e:26:8b:81:1a:54:2f:a2:
                    7b:85:b9:0a:af:28:48:a2:d1:c4:78:95:d7:dc:70:
                    3b:ac:d4:31:ea:5a:6c:4e:3d:44:e0:61:28:37:05:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:DD:C7:BC:06:5C:39:DE:C4:79:39:4E:4A:FB:2B:9F:D4:78:07
            X509v3 Authority Key Identifier:
                keyid:83:47:DC:9E:56:54:CC:82:25:5D:47:55:09:50:70:F8:88:94:70:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/8347DC9E5654CC82255D4755095070F888947093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8347DC9E5654CC82255D4755095070F888947093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/323830333a656331303a3a2f33322d3438203d3e20323731383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ce:c3:ab:b2:ce:49:d9:8a:ce:bd:75:34:65:ec:33:dc:80:
         16:0c:cc:ea:c4:47:c3:b5:2d:a0:e8:ef:ef:32:32:59:1e:a6:
         8f:38:c6:2c:76:27:61:06:54:45:22:89:77:df:fa:3a:d2:14:
         5e:96:25:bd:b6:54:50:7a:db:92:2b:a3:bf:b5:ae:8c:9f:df:
         2f:34:51:91:0d:07:64:e1:96:7a:dd:3f:01:75:7c:ee:88:c6:
         79:3e:f7:75:64:95:5f:f8:af:31:67:ac:be:2d:b3:06:a5:48:
         c8:92:55:e5:f8:74:20:5d:a8:cc:ff:23:85:74:2a:b8:2f:5d:
         9d:9f:e0:92:10:5b:25:a5:10:0f:7e:67:72:e2:38:10:15:68:
         9c:c8:3f:3b:f0:36:12:ae:85:ab:c9:a4:71:db:01:b4:da:e2:
         d1:86:46:d8:0b:0d:56:c0:a1:78:c8:bf:a9:f0:2b:ab:b6:0f:
         17:a6:51:c5:b7:78:86:fd:c5:fd:62:97:dd:bc:46:e8:a3:4b:
         ea:04:59:62:2c:ab:80:c9:80:da:05:a2:0e:97:5a:65:88:c6:
         ca:f2:8d:23:f4:f5:3d:78:67:ad:63:01:b4:17:f2:ed:40:19:
         c7:12:65:fe:79:4d:04:37:41:60:ac:7f:ac:54:fa:e9:6c:e3:
         54:f9:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:28 2024 by rpki-client on console-fra.rpki-client.org