Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa
File:                     323830333a626232303a3a2f33322d3438203d3e20323636373532.roa (raw, json)
Hash identifier:          rhNCgBlsLwOK0QQo1KU14Fo/iGglxtIlmTD7qgSABhE=
Subject key identifier:   84:C3:98:C4:C7:28:4D:5F:64:13:36:57:6E:BE:E4:C7:F2:AB:75:0B
Certificate issuer:       /CN=211F35A7F8779E638FF375C42733BBC7754A8446
Certificate serial:       1DBE0026E43A6A968E089AEF91E23BE7A7B66016
Authority key identifier: 21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa
Signing time:             Tue 05 Mar 2024 18:13:53 +0000
ROA not before:           Tue 05 Mar 2024 18:08:53 +0000
ROA not after:            Tue 04 Mar 2025 18:13:53 +0000
asID:                     266752
IP address blocks:        2803:bb20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:be:00:26:e4:3a:6a:96:8e:08:9a:ef:91:e2:3b:e7:a7:b6:60:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F35A7F8779E638FF375C42733BBC7754A8446
        Validity
            Not Before: Mar  5 18:08:53 2024 GMT
            Not After : Mar  4 18:13:53 2025 GMT
        Subject: CN=84C398C4C7284D5F641336576EBEE4C7F2AB750B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:95:a5:ec:a4:7e:2a:73:81:c6:d0:2c:1e:
                    58:ee:d7:84:69:5e:4c:57:a2:0e:da:a3:bf:b6:5d:
                    f2:7c:f1:34:6c:ee:13:ba:72:5d:8f:02:ee:cf:91:
                    d1:b6:e9:d1:c2:54:de:9f:37:75:6f:4a:3b:7d:e6:
                    a6:f4:f5:e8:a7:60:8d:b0:38:65:c1:91:4b:da:6b:
                    50:fe:d8:93:5b:1b:7d:e5:db:0a:ea:48:16:31:a4:
                    b6:e7:6a:c1:f8:95:6e:62:22:82:c6:c7:97:75:9b:
                    41:1a:8b:d1:90:ed:1e:46:0c:6a:82:b6:c4:0f:4f:
                    d9:25:5f:fc:1b:2f:d7:35:46:f2:f2:77:30:02:46:
                    75:8e:d9:11:3f:64:71:d8:21:25:ea:b6:d4:a1:75:
                    b0:f8:4c:1c:7d:0a:84:29:88:97:82:4e:f1:f4:ba:
                    93:3a:a6:d5:54:02:d1:59:20:ad:d3:8a:51:82:57:
                    94:e9:c6:8e:33:22:9b:0b:6e:41:3e:64:dc:3b:82:
                    bc:21:ae:94:24:18:04:5b:22:4c:be:8e:2d:c7:53:
                    66:ac:cd:a9:a0:76:0d:6e:7d:11:fc:36:88:d9:96:
                    58:8f:35:97:64:af:1a:aa:1f:29:6c:47:ce:2f:d2:
                    fa:19:9b:83:63:ba:c7:e4:04:db:54:79:de:61:99:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:98:C4:C7:28:4D:5F:64:13:36:57:6E:BE:E4:C7:F2:AB:75:0B
            X509v3 Authority Key Identifier:
                keyid:21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/323830333a626232303a3a2f33322d3438203d3e20323636373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:e3:c4:4c:83:02:0a:b9:b1:23:05:33:9c:a9:4b:65:76:fb:
         41:75:85:76:a1:22:84:8a:e4:0e:90:11:1b:f8:13:d7:27:49:
         38:6d:a6:bc:ad:8d:79:85:f5:ec:fa:67:e8:aa:ab:2f:46:fb:
         2a:6d:0b:c4:86:47:9d:31:9f:a1:bc:a7:18:42:06:04:f4:84:
         d0:dc:99:a9:6e:af:06:58:40:f7:9f:02:41:a5:1d:91:81:d5:
         52:b0:af:b6:e0:3d:25:42:07:5d:f7:d9:97:cb:45:6b:70:b5:
         80:12:ed:2b:c9:c4:d6:6c:e1:88:53:0a:03:65:1c:3b:fc:3c:
         98:00:f2:5c:d3:dc:1c:7c:a6:10:e5:d9:b0:1d:52:4c:43:e6:
         a4:aa:cd:31:b9:cd:7e:cf:86:4f:c3:b5:57:07:fd:41:cc:b1:
         2c:91:14:ea:1b:db:fc:22:5d:ba:67:fa:73:df:eb:b6:9d:9e:
         26:1f:01:12:32:13:56:fe:e0:8a:02:a2:63:3b:b6:62:c6:fe:
         61:25:86:52:b3:eb:b6:db:95:95:81:f0:00:eb:30:a0:a4:09:
         6f:6b:6a:52:7c:67:59:e3:b9:b5:3d:5f:6b:35:3f:35:4f:cb:
         ab:15:1e:25:68:29:7f:2f:f7:51:38:09:b3:1f:c1:90:35:72:
         45:86:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:42:00 2024 by rpki-client on console-fra.rpki-client.org