Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
File:                     323830333a653130303a3a2f33322d3335203d3e203237393731.roa (raw, json)
Hash identifier:          NIqV8Ke8qTi1y9up3wJP/uM7DQOLft7jgO7Pmx0rAxY=
Subject key identifier:   22:96:D2:1C:52:04:66:B7:E9:21:05:D5:BE:FF:C5:76:FC:9F:4B:72
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       66C1FBB5D87686BF071894DD514E17C7344F7737
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     27971
IP address blocks:        2803:e100::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c1:fb:b5:d8:76:86:bf:07:18:94:dd:51:4e:17:c7:34:4f:77:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=2296D21C520466B7E92105D5BEFFC576FC9F4B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:0b:bc:16:f3:64:a3:50:fd:0b:10:6d:4e:
                    2b:6d:b9:28:2d:af:ba:1e:22:fd:e3:8f:58:0e:4b:
                    e2:a4:ad:80:f1:23:68:0d:dd:de:fb:3d:37:9d:9a:
                    39:cd:d7:98:4b:83:8e:11:e6:2e:6d:19:07:c8:c2:
                    0f:62:22:c2:74:ec:5d:c9:57:98:7e:11:9c:cf:32:
                    d2:1a:27:a2:e0:77:94:9c:ef:9a:3e:16:e0:25:94:
                    c6:ae:c1:6d:6e:ae:2d:c4:37:d2:20:62:1a:cf:29:
                    8e:84:9e:ab:2f:cc:2d:d0:19:d5:c5:2d:00:60:9e:
                    77:db:d2:90:5b:2d:ff:2f:a8:9e:63:61:03:3d:1e:
                    b1:6b:47:e4:04:7d:8a:2d:41:3a:7c:12:1a:08:25:
                    f3:ce:67:37:e8:88:6f:54:42:95:f8:1e:b9:c9:e2:
                    03:bd:73:58:23:ae:18:4c:d0:2b:1c:7d:da:a7:7b:
                    58:ca:91:14:d5:a9:0c:a7:8c:80:9a:54:97:1f:3e:
                    9b:02:4c:55:5d:d8:80:df:5a:c1:17:18:34:86:29:
                    c8:11:8b:e8:1d:ea:67:9d:ae:75:f4:f9:55:ec:ae:
                    78:1b:8a:1d:c5:01:bb:d7:8c:96:7b:5c:0c:93:89:
                    3e:67:bc:44:d4:c3:14:de:ee:8c:a4:06:d6:bc:0f:
                    3a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:96:D2:1C:52:04:66:B7:E9:21:05:D5:BE:FF:C5:76:FC:9F:4B:72
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/323830333a653130303a3a2f33322d3335203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:a1:ec:1f:51:b3:a8:77:72:3f:8f:96:a2:d9:7c:d0:53:
         9f:f3:b5:0a:25:4e:77:92:9e:a4:40:a7:7a:0e:23:47:61:13:
         af:8d:78:13:55:e5:b4:d2:3b:72:90:9a:53:82:a9:63:f8:1e:
         3c:b2:45:52:79:62:9d:3d:80:1f:eb:d1:4c:95:8d:d3:eb:68:
         f1:83:5e:3b:21:ab:a5:97:81:45:d4:65:32:99:d7:61:4d:7e:
         87:f7:80:44:05:ca:f0:ec:48:c5:d1:96:a7:1c:ce:87:81:64:
         ce:09:44:27:dd:cd:aa:37:ea:d7:d7:58:10:26:1d:65:d7:9d:
         f9:ac:8f:3d:b0:d6:ae:02:9d:64:74:25:aa:8e:e6:42:15:31:
         ca:a0:1d:b9:28:f7:d6:cc:e3:f0:f9:b9:37:a3:64:b7:c5:e4:
         3d:30:3e:83:46:b3:2d:68:9f:0c:a1:e7:d7:d5:5a:44:30:5e:
         31:4a:39:83:71:ad:09:6c:a4:4d:b1:35:ae:6f:37:d8:1a:5d:
         b2:cd:5e:cc:be:b5:83:12:50:49:a4:d3:d4:85:3a:67:52:26:
         68:c1:1d:e5:64:dd:c1:1f:48:ac:4f:89:d1:d5:ca:36:22:9e:
         66:03:62:13:2c:29:e0:e4:c1:6c:6b:22:01:64:7d:e8:8a:7f:
         3e:ac:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:30:16 2024 by rpki-client on console-ams.rpki-client.org