Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa
File:                     323830333a323531303a3a2f33322d3338203d3e20323732303234.roa (raw, json)
Hash identifier:          nM9jzw5J9uHGPPqhkbiUn4IUOLMkvvCDDIb7zDS4/UQ=
Subject key identifier:   F0:45:38:3D:E6:FC:5D:2E:D8:35:5D:4C:5F:08:2D:E4:05:57:6A:7A
Certificate issuer:       /CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
Certificate serial:       10629489ADF8494F543A9C8412905ADAF91C3430
Authority key identifier: 16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa
Signing time:             Tue 05 Mar 2024 18:11:50 +0000
ROA not before:           Tue 05 Mar 2024 18:06:50 +0000
ROA not after:            Tue 04 Mar 2025 18:11:50 +0000
asID:                     272024
IP address blocks:        2803:2510::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:62:94:89:ad:f8:49:4f:54:3a:9c:84:12:90:5a:da:f9:1c:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
        Validity
            Not Before: Mar  5 18:06:50 2024 GMT
            Not After : Mar  4 18:11:50 2025 GMT
        Subject: CN=F045383DE6FC5D2ED8355D4C5F082DE405576A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:71:75:d3:8c:08:a5:3e:54:96:a6:57:58:
                    56:40:99:e6:b7:dd:5a:b1:2f:40:5e:0e:62:f2:7a:
                    56:ac:6f:8c:32:d9:6e:1a:c5:d3:c9:d1:11:96:03:
                    df:ea:ab:ff:85:f4:61:5d:5b:2a:ac:d3:b7:bf:2b:
                    1e:b4:de:10:cc:5d:9a:bf:98:cb:1a:2e:89:e1:a3:
                    eb:8f:08:a1:a0:24:97:96:91:62:89:a5:47:32:17:
                    b2:6e:4b:15:4d:83:c5:ad:8f:00:64:a5:7a:8f:33:
                    eb:8c:3a:cf:a5:bc:17:2e:7f:1c:08:53:ac:25:11:
                    d4:f4:c3:b8:45:da:c3:c6:34:f5:e5:56:2c:aa:79:
                    c0:cb:91:b8:c0:85:16:8e:e2:78:d6:30:3c:11:43:
                    ed:1e:f8:9d:12:ea:12:5b:9c:2d:e0:63:b6:96:3f:
                    b3:f9:e1:09:38:cc:fc:77:03:f8:4f:1c:18:eb:59:
                    08:c9:e6:cb:32:44:2c:fe:46:6e:1e:49:c0:d1:e0:
                    33:41:1f:a4:3b:47:9e:bb:cc:78:d9:9e:1a:2c:16:
                    d8:40:66:af:22:26:99:4c:c9:53:dd:bb:34:4a:40:
                    4d:15:a0:ce:78:fa:05:d9:92:23:0c:bd:0f:f9:c2:
                    8a:41:5a:0b:2e:32:c1:f7:f6:31:f8:e6:30:55:51:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:45:38:3D:E6:FC:5D:2E:D8:35:5D:4C:5F:08:2D:E4:05:57:6A:7A
            X509v3 Authority Key Identifier:
                keyid:16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/323830333a323531303a3a2f33322d3338203d3e20323732303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:09:62:37:bb:4e:66:e4:a2:81:67:d3:05:1b:31:88:15:fc:
         14:d6:54:27:77:18:83:79:ba:84:e2:e9:5f:68:af:d8:fa:45:
         0b:a6:71:ca:f5:ea:65:cd:d4:11:cf:9b:51:ed:8a:e1:7c:d7:
         0b:f0:dd:93:6b:88:5c:b5:c6:6c:07:3b:6a:e5:fd:01:36:a5:
         f0:05:e6:ce:de:94:52:d8:a4:39:41:21:bc:2b:15:9f:8d:29:
         99:65:50:60:b3:70:34:91:72:e3:0f:e2:42:05:aa:42:07:0c:
         2a:c5:19:df:2c:78:59:d5:f6:74:15:99:e8:42:81:2c:34:ae:
         c0:b9:2e:18:68:93:eb:b9:08:b2:9f:af:91:ab:64:ca:e8:f5:
         a1:ac:f4:dc:81:4f:d5:b8:49:0e:9d:04:e0:5f:c8:dc:00:b0:
         21:ad:57:c8:78:b9:f5:a0:45:0b:e9:56:32:60:1f:ed:a3:72:
         13:a8:8c:04:7f:cc:34:e3:08:c8:57:b6:87:20:66:db:2c:93:
         41:7a:e9:37:be:fb:ea:67:2d:da:ef:65:8d:95:ad:cd:94:ee:
         4b:3f:da:9c:c5:c2:10:f5:5c:c6:9b:9c:ce:ca:1b:82:92:6a:
         1b:23:f2:f7:31:88:73:da:57:e6:c7:94:ee:80:74:a2:92:cb:
         ac:3c:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org