Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3438203d3e20323733393233.roa
File:                     323830333a383735303a3a2f33322d3438203d3e20323733393233.roa (raw, json)
Hash identifier:          q1ksXtQARxn7u1uJzBRCxAf+lBCREj09fT4mOLgDiCE=
Subject key identifier:   28:AF:6B:6F:4A:12:D0:41:4B:B3:E5:8E:40:FD:75:13:D4:D8:96:87
Certificate issuer:       /CN=CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3
Certificate serial:       1DCC5415A5F5C61776E6EFCD0689F40BE4DB289C
Authority key identifier: CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3438203d3e20323733393233.roa
Signing time:             Tue 29 Oct 2024 22:15:00 +0000
ROA not before:           Tue 29 Oct 2024 22:10:00 +0000
ROA not after:            Tue 28 Oct 2025 22:15:00 +0000
asID:                     273923
IP address blocks:        2803:8750::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cc:54:15:a5:f5:c6:17:76:e6:ef:cd:06:89:f4:0b:e4:db:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3
        Validity
            Not Before: Oct 29 22:10:00 2024 GMT
            Not After : Oct 28 22:15:00 2025 GMT
        Subject: CN=28AF6B6F4A12D0414BB3E58E40FD7513D4D89687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:0d:b5:ab:6c:d8:a4:ba:d4:8d:cc:30:15:
                    e5:2e:c1:d2:66:d5:06:e3:97:b0:4e:3a:d4:0d:9d:
                    1f:5a:ac:15:42:05:92:6e:ea:1c:c3:5d:a0:de:d6:
                    01:a5:34:c2:6e:c5:66:64:ae:73:b9:c6:5e:a9:19:
                    41:b3:6f:38:b6:2b:24:c6:7b:8a:9c:17:4a:2d:20:
                    d1:57:d9:b5:e6:03:8b:8b:a7:2f:69:e4:75:06:7b:
                    47:7b:83:b7:12:b5:a0:5f:67:19:f5:4b:ca:bf:b7:
                    ef:14:0d:9e:e9:3e:1e:f6:7d:e3:60:ea:77:0e:1a:
                    b6:88:c0:56:34:33:d9:e0:36:06:cd:71:f6:35:49:
                    f4:29:16:f0:67:ae:02:7a:e3:5c:ca:b6:b2:e3:5b:
                    51:3e:18:bc:e4:8a:b2:a9:2a:56:cf:37:cd:2b:70:
                    14:03:87:5c:7a:4f:ba:c9:7d:de:9f:4e:66:9f:e6:
                    6a:b7:61:e9:a6:8a:2a:d6:87:c6:20:89:57:72:63:
                    e0:e1:67:49:7e:c1:59:7d:51:02:08:1b:a8:86:cb:
                    bd:44:e7:46:13:ec:80:83:19:39:f8:78:de:3f:30:
                    bd:7e:d3:5f:5b:c8:d6:81:93:0d:18:a4:70:b3:d8:
                    d6:f6:5f:f5:31:c4:f3:c9:09:5f:d7:95:7f:1d:cd:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AF:6B:6F:4A:12:D0:41:4B:B3:E5:8E:40:FD:75:13:D4:D8:96:87
            X509v3 Authority Key Identifier:
                keyid:CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3438203d3e20323733393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8750::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:eb:79:4a:6f:4d:3c:b4:cf:7e:e0:aa:23:b2:23:b2:0a:
         a2:0a:fc:a9:38:d4:9a:53:67:df:b9:f3:46:35:2f:3f:72:97:
         bd:4f:82:55:b8:0a:98:53:f2:59:9e:eb:f6:bc:17:3b:b3:b9:
         ef:f2:58:f0:09:27:e5:e8:22:78:b7:8c:c5:aa:de:af:2f:8f:
         e3:54:08:4b:17:5b:05:c9:e5:28:f9:5e:50:3c:ee:68:63:51:
         37:ec:6e:9f:97:c5:d4:98:45:2a:ab:e6:c8:0c:56:db:2d:fc:
         02:a0:30:1a:57:2b:48:e2:4a:d3:b2:7f:7b:5b:17:43:2b:1d:
         a9:ee:a6:64:9f:97:f9:95:8a:b1:1f:cb:17:a8:48:e8:81:d3:
         5d:ac:f2:d4:1b:f3:2f:f7:32:c2:d3:d9:cd:fe:8f:dc:15:11:
         19:e6:2c:19:ed:51:99:3e:5a:59:9e:1f:50:3f:ba:92:d3:9c:
         25:3d:3e:ee:a4:9b:c7:79:c6:bc:bd:85:49:fc:85:2a:8b:b2:
         b2:35:a6:e4:f7:ce:b8:e1:cf:32:1c:c0:01:da:76:a0:81:7d:
         dc:b8:58:02:aa:98:a9:b4:af:55:8e:04:2d:41:3c:4a:8e:98:
         8f:fd:a1:a9:36:15:96:1b:62:37:f4:21:48:60:2f:51:70:59:
         0b:12:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org