Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/323830333a653165303a3a2f33322d3332203d3e20323730303035.roa
File:                     323830333a653165303a3a2f33322d3332203d3e20323730303035.roa (raw, json)
Hash identifier:          /FRsuwHEllzRuc6CG2PGkLo9gweUV2MxOZDK0BHXQl4=
Subject key identifier:   B4:89:BB:B8:DB:FE:17:AC:86:A3:35:BA:21:90:6C:D3:B7:D1:37:B0
Certificate issuer:       /CN=B7CB5849700405B09C30533A718BDE30CBF21CEC
Certificate serial:       2C9D61FCA9F02BF4B5EE09C0D3E834D4DD2A43D0
Authority key identifier: B7:CB:58:49:70:04:05:B0:9C:30:53:3A:71:8B:DE:30:CB:F2:1C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/323830333a653165303a3a2f33322d3332203d3e20323730303035.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     270005
IP address blocks:        2803:e1e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:61:fc:a9:f0:2b:f4:b5:ee:09:c0:d3:e8:34:d4:dd:2a:43:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5849700405B09C30533A718BDE30CBF21CEC
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=B489BBB8DBFE17AC86A335BA21906CD3B7D137B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:2d:a0:37:c2:27:d5:56:fc:37:cc:1b:7e:
                    b1:c1:f1:d9:9e:22:c3:16:2f:da:aa:9e:02:48:c7:
                    a6:3a:91:c2:43:cf:6c:e0:08:8b:16:9e:25:d9:9e:
                    1c:4d:17:0f:08:fa:c0:71:c2:9e:c5:df:a6:20:9c:
                    fd:09:39:10:2f:88:b8:97:21:84:28:5b:25:f6:67:
                    f6:ca:8b:b4:f4:c8:66:67:9b:e5:66:a4:79:c7:e7:
                    47:7a:9e:2d:72:ba:93:96:51:43:67:1e:5b:c3:a8:
                    03:d1:28:19:ec:66:12:7a:b6:4e:c0:56:9e:f0:af:
                    89:eb:2d:b3:f9:76:1b:28:66:37:07:b3:35:f1:cd:
                    56:00:d7:71:26:69:ed:b8:a5:5c:3e:bc:1f:3b:9f:
                    0a:7f:91:83:64:f6:8a:99:95:6c:4e:b1:f0:06:a2:
                    aa:5a:40:bf:6d:44:55:61:6f:f6:8e:35:bc:c5:cb:
                    5b:e8:31:78:8d:fe:fc:e3:3d:f9:bb:e6:6d:2f:05:
                    5e:0d:2a:0f:00:fd:0b:f1:ff:0a:48:59:05:84:79:
                    dd:55:5d:b9:ed:4e:6b:04:c9:cb:c9:c6:52:58:2a:
                    1d:c1:b0:36:96:ca:b5:c5:d1:cc:09:10:8c:fc:d8:
                    bb:41:c4:b1:7a:90:23:c2:5d:2f:ae:3a:d8:53:da:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:BB:B8:DB:FE:17:AC:86:A3:35:BA:21:90:6C:D3:B7:D1:37:B0
            X509v3 Authority Key Identifier:
                keyid:B7:CB:58:49:70:04:05:B0:9C:30:53:3A:71:8B:DE:30:CB:F2:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/323830333a653165303a3a2f33322d3332203d3e20323730303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:88:b2:f7:32:80:f2:b2:b8:1b:22:7d:a8:85:62:d4:84:62:
         e6:f4:ac:fc:71:b9:79:e5:78:00:a2:8b:1b:19:c3:67:c1:9f:
         37:d7:20:bb:f6:7e:ff:b0:d8:e3:ba:4e:63:82:c9:c1:b8:ba:
         ce:8b:00:26:11:95:0f:3e:04:d1:f0:8c:85:f0:6c:07:4d:b1:
         55:2c:05:4c:1a:b8:81:8d:2b:e8:31:25:fd:9d:3b:86:fc:2f:
         7d:59:9f:75:53:04:69:ab:6e:cb:a6:56:de:8d:ab:cc:25:50:
         b5:a4:e5:99:1a:a4:81:34:f5:e3:b6:7c:fd:60:6f:19:94:00:
         5a:13:93:2b:dd:56:b8:9e:c8:00:a4:80:44:58:ec:9a:5c:d3:
         c6:6d:2d:21:82:c3:24:98:cf:57:40:85:dd:dd:2b:36:6b:b8:
         dd:b4:36:2d:43:dd:e9:76:bc:3b:10:21:a6:67:96:df:94:75:
         6c:95:7d:73:51:f8:97:02:c7:9e:07:10:b0:c4:06:e8:d0:b2:
         0e:c3:a1:94:28:82:e0:ce:92:df:47:a1:a1:f3:93:6b:e9:50:
         36:7e:39:de:6b:89:91:af:cd:f4:52:1b:68:12:12:a9:ee:10:
         49:e2:f1:4d:87:e7:cd:2a:cf:7f:7a:32:c4:de:b5:ab:9c:fc:
         88:cf:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org