Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3438203d3e20323733303734.roa
File:                     323830333a326639303a3a2f33322d3438203d3e20323733303734.roa (raw, json)
Hash identifier:          aTiecC998Ix058wAj+bCyjCghtfqeC/OxmhrYqhWDYM=
Subject key identifier:   E6:34:3C:8E:6B:34:51:A8:5B:7D:12:61:74:E1:32:CA:0D:57:60:33
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       38DF976EF2F07DD745CD99BB040657D0CF76A0DA
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3438203d3e20323733303734.roa
Signing time:             Tue 05 Mar 2024 18:04:06 +0000
ROA not before:           Tue 05 Mar 2024 17:59:06 +0000
ROA not after:            Tue 04 Mar 2025 18:04:06 +0000
asID:                     273074
IP address blocks:        2803:2f90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:97:6e:f2:f0:7d:d7:45:cd:99:bb:04:06:57:d0:cf:76:a0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Mar  5 17:59:06 2024 GMT
            Not After : Mar  4 18:04:06 2025 GMT
        Subject: CN=E6343C8E6B3451A85B7D126174E132CA0D576033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:e1:f9:2a:2f:67:77:8f:af:59:29:e7:6d:
                    10:95:c6:f4:da:1d:2c:c7:77:8c:6f:d4:e6:fd:4a:
                    9c:0b:f9:26:89:17:c3:61:6a:71:65:c4:13:50:12:
                    d2:89:4a:e7:0c:43:00:da:46:56:2a:44:01:77:dd:
                    09:54:ea:a4:9e:58:15:c8:f0:a9:ae:14:66:30:0f:
                    26:7c:2d:9f:68:0d:92:af:ab:13:63:a8:78:58:a8:
                    90:ac:d2:f5:5a:28:64:0a:c6:e9:36:d7:ab:43:cd:
                    80:60:e2:90:b1:15:0f:d8:39:d9:3d:df:10:8c:61:
                    c9:83:32:80:e9:05:ca:e2:43:16:69:bb:56:80:c3:
                    10:84:77:69:c0:ff:39:52:aa:74:2b:51:2f:75:f4:
                    58:0b:e3:62:8b:71:11:22:c1:15:66:fa:2a:ce:11:
                    ef:54:e9:30:9f:66:83:48:4b:da:07:47:04:09:b2:
                    c1:96:b2:af:37:6e:d3:a3:0a:fb:07:93:98:8b:5b:
                    35:7f:81:18:2f:34:ff:a1:a0:c2:80:ab:13:20:dc:
                    af:b2:e8:1a:07:92:94:2b:ff:da:25:d8:21:ab:d6:
                    d0:44:12:eb:77:fb:ab:e1:d1:73:dd:a6:2d:d1:17:
                    e0:24:fa:97:15:b9:51:49:f5:79:1e:82:e5:df:81:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:34:3C:8E:6B:34:51:A8:5B:7D:12:61:74:E1:32:CA:0D:57:60:33
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/323830333a326639303a3a2f33322d3438203d3e20323733303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:83:a0:7d:3b:4c:6f:39:cc:8c:4a:f3:70:36:55:8b:9d:b5:
         fe:3a:ce:1b:25:4e:b2:0b:dd:17:17:a9:69:03:04:df:21:22:
         3f:a2:f8:4c:e0:77:3e:89:d1:9b:96:11:eb:36:9a:00:97:5f:
         db:7d:8f:67:00:43:bc:bc:2b:9e:e2:04:db:19:1f:f1:bf:19:
         a9:74:ab:35:b3:da:80:63:8d:10:b7:64:36:ab:5b:e1:db:8e:
         c0:ac:cf:37:25:07:27:fe:67:5f:08:3b:4f:f5:28:29:23:ea:
         07:04:98:75:2b:d1:eb:35:08:c4:c1:2e:62:5c:c8:b0:97:0d:
         56:b8:08:a0:df:88:a4:94:de:80:a7:ce:f2:76:86:2c:79:b3:
         96:26:99:d5:2e:dc:74:6d:3d:57:3f:68:c4:41:d1:18:02:6e:
         46:48:42:94:4d:d4:c5:ac:2f:44:78:2e:84:89:b6:4a:5e:a0:
         6a:bc:9d:a0:3b:6a:b3:a0:3d:fc:f9:dc:ad:8e:ec:06:72:3a:
         68:ec:bf:74:bb:47:fb:48:b8:cf:69:5d:73:7f:61:3c:62:0d:
         25:31:71:d5:65:44:ce:f8:4d:75:39:48:4c:b3:3f:ae:77:cc:
         9d:19:c9:c4:44:c3:34:1c:3d:c9:60:bb:4a:46:2f:02:c4:b7:
         ce:d7:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org