Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa
File:                     323830333a383739303a3a2f33322d3438203d3e20323733303534.roa (raw, json)
Hash identifier:          Be4+uj2GtTWpngxqrV/4Jz0dSqPSpaljSMh/8NGCSAw=
Subject key identifier:   73:5C:A8:8B:CC:8A:CD:AD:45:27:55:AB:3B:F8:A7:7D:30:14:F4:A1
Certificate issuer:       /CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
Certificate serial:       39EBBEC4DB025EE31D7B01F6489BE614621BDD27
Authority key identifier: E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa
Signing time:             Tue 05 Mar 2024 17:58:26 +0000
ROA not before:           Tue 05 Mar 2024 17:53:26 +0000
ROA not after:            Tue 04 Mar 2025 17:58:26 +0000
asID:                     273054
IP address blocks:        2803:8790::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:eb:be:c4:db:02:5e:e3:1d:7b:01:f6:48:9b:e6:14:62:1b:dd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
        Validity
            Not Before: Mar  5 17:53:26 2024 GMT
            Not After : Mar  4 17:58:26 2025 GMT
        Subject: CN=735CA88BCC8ACDAD452755AB3BF8A77D3014F4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:c4:57:89:eb:f0:13:5c:15:77:9c:78:f6:
                    0a:77:d3:b3:b9:7b:78:17:d4:84:6f:46:ba:bf:83:
                    ba:04:8f:47:f5:5a:71:43:6a:22:21:ae:b3:71:84:
                    cf:21:de:e1:e4:32:f7:e9:c7:c6:92:d8:46:61:84:
                    85:5d:77:de:7a:61:ee:62:e0:80:41:ea:4e:bd:9b:
                    a6:02:92:54:71:5c:d3:9f:2d:36:48:d2:1d:94:63:
                    3b:8d:d6:05:a6:a1:80:76:21:a6:d4:05:99:fe:cf:
                    49:46:77:8c:3d:c0:80:bb:22:c5:64:b2:d9:9c:1a:
                    29:92:bc:9b:0c:c6:e1:ed:65:4b:c1:b9:38:08:c6:
                    a5:cf:6e:b3:34:7b:a7:9d:6e:ee:0d:11:0d:df:8f:
                    04:74:ec:90:8c:da:6a:fd:60:f1:3d:96:e1:e7:d8:
                    94:a3:ec:10:44:50:bb:63:d9:3d:e7:0f:3e:9f:e3:
                    99:65:62:01:ca:6e:17:3a:85:4e:00:b0:ba:68:88:
                    77:5f:b5:cd:98:df:f4:36:c0:d1:c8:14:49:a6:b5:
                    df:02:2d:30:1d:7b:62:22:ba:a2:d2:49:09:20:91:
                    a6:4c:69:4f:4e:7d:1f:35:8f:1d:a1:0d:6e:74:ac:
                    25:c0:7b:3a:21:a2:7d:db:a1:97:c4:fb:79:e0:ec:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:A8:8B:CC:8A:CD:AD:45:27:55:AB:3B:F8:A7:7D:30:14:F4:A1
            X509v3 Authority Key Identifier:
                keyid:E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8790::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:37:91:4e:d9:dc:8c:1d:bb:5b:97:40:54:4a:ef:db:0d:53:
         5b:85:b5:51:a9:9a:c1:35:d2:80:bb:5b:6b:5f:43:1e:08:4b:
         bf:ac:64:2d:0b:c0:c7:09:28:e8:90:ad:9d:38:fb:de:2f:d7:
         e5:a9:82:33:fb:0f:f0:91:a0:cf:9d:61:0d:ab:9a:d7:85:0c:
         c4:53:54:92:aa:b6:c3:c1:21:ec:6c:bb:7a:e4:ec:e1:d0:20:
         f6:7f:80:6a:ae:96:41:f3:63:62:c1:7f:83:d6:44:26:f0:28:
         56:5b:27:8b:06:6a:6a:cf:79:06:25:05:44:38:85:4f:b4:06:
         1e:e9:88:99:f2:5d:26:dc:8c:85:5c:c7:4e:7b:5f:5b:a0:32:
         ed:38:3d:b3:90:7b:48:3a:82:38:9c:ad:be:d4:2a:a5:e8:1f:
         b3:cb:8d:24:4a:44:24:c6:da:d5:3d:cf:e1:14:d6:f2:fe:76:
         4f:47:3e:6b:13:14:82:54:e3:19:b5:5f:85:f6:09:f5:ef:86:
         cb:cb:a4:4a:00:6c:e7:46:4f:96:e7:fc:92:1c:58:74:f4:e6:
         00:3b:8c:1c:d8:bf:f1:17:87:54:49:fe:75:9f:ac:56:4e:c6:
         ed:f5:fd:08:4a:d8:57:9a:c5:ea:af:e6:80:ac:f2:32:6b:69:
         3a:0f:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org