Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa
File:                     323830333a643230303a3a2f33322d3332203d3e203133383035.roa (raw, json)
Hash identifier:          3Y2yQOxSzJ/47YvdKvj2CB5qAJ5A3R6GeGcy7bOtoqk=
Subject key identifier:   14:B1:1A:D6:BE:E7:A0:DA:61:BF:4A:2B:E0:E6:8C:BD:D4:D6:AF:E3
Certificate issuer:       /CN=7576B30485208191B54BA2BD59339967753E0699
Certificate serial:       28477548DBE5BCE4B4CDE06E8A0550D84D88043F
Authority key identifier: 75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa
Signing time:             Tue 05 Mar 2024 18:00:35 +0000
ROA not before:           Tue 05 Mar 2024 17:55:35 +0000
ROA not after:            Tue 04 Mar 2025 18:00:35 +0000
asID:                     13805
IP address blocks:        2803:d200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:75:48:db:e5:bc:e4:b4:cd:e0:6e:8a:05:50:d8:4d:88:04:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7576B30485208191B54BA2BD59339967753E0699
        Validity
            Not Before: Mar  5 17:55:35 2024 GMT
            Not After : Mar  4 18:00:35 2025 GMT
        Subject: CN=14B11AD6BEE7A0DA61BF4A2BE0E68CBDD4D6AFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:c8:77:b3:de:e9:98:0b:5a:21:4e:80:22:
                    58:cc:9c:2e:3e:8f:bd:58:da:6d:8e:ad:38:91:19:
                    e1:14:3b:53:e8:ed:01:5d:2a:5b:de:2b:1b:43:d7:
                    b3:ee:50:58:31:0e:9f:92:4c:e9:29:74:15:38:68:
                    3d:bd:98:ed:23:66:fe:36:44:ad:1d:e3:26:b9:65:
                    1b:27:42:7a:df:72:d1:66:d8:a0:ea:46:5f:56:56:
                    b0:d5:f6:38:a5:bb:85:eb:4c:05:a4:a1:13:60:14:
                    8c:9b:51:aa:f2:ca:df:74:49:c9:fe:39:90:e2:55:
                    ff:ad:f4:2e:2e:85:59:cd:14:a1:bb:18:c6:44:cf:
                    33:bf:64:1c:34:eb:da:74:a9:71:ab:3a:be:0e:d2:
                    c8:43:39:9a:a8:e1:3a:4f:2f:57:1b:fb:bc:18:21:
                    e8:8e:f5:ab:b6:a7:d1:c0:46:53:9c:be:78:fe:10:
                    32:fa:83:92:bb:64:e7:55:e2:5e:b8:9e:40:96:4f:
                    5a:86:4e:91:76:73:34:88:21:d7:e1:fc:14:3b:7f:
                    82:f4:0d:0b:77:70:e9:e6:35:c9:63:82:7a:1c:a6:
                    5c:a5:b5:1f:4a:6e:5a:92:5d:8c:12:2d:76:d0:25:
                    01:a0:b3:a9:8d:c3:bd:c2:50:bd:e6:a1:7e:b5:13:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:1A:D6:BE:E7:A0:DA:61:BF:4A:2B:E0:E6:8C:BD:D4:D6:AF:E3
            X509v3 Authority Key Identifier:
                keyid:75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:a5:29:9a:0b:ea:69:d2:36:58:85:24:06:93:b8:cc:95:
         b4:88:6d:79:9a:16:58:be:53:75:a6:d5:d9:6e:34:f9:03:15:
         8c:82:fb:d7:b0:bc:b3:42:fd:8b:19:9e:5b:2e:ee:19:50:43:
         a6:47:3d:23:7c:f2:e1:7f:db:b8:58:d2:d7:ad:05:eb:c7:9a:
         54:49:af:81:d7:6c:eb:00:72:7c:21:ef:13:d7:d3:42:bc:c3:
         56:7e:c4:36:38:26:5b:e7:6c:20:b3:f9:08:58:81:fb:1c:34:
         e8:1c:52:ff:0d:0e:ff:e3:db:6a:89:6b:79:94:88:32:df:ba:
         7a:b2:e3:7e:86:c3:7d:f7:89:b1:33:11:e9:97:b1:9f:64:d5:
         c5:0f:c0:00:4f:d3:e5:d7:92:42:b2:8d:7c:a4:bb:ec:f2:21:
         5e:b5:c7:4b:95:55:7e:7c:c2:28:07:e0:e6:c0:2f:1b:75:ce:
         1b:69:d6:9f:14:9c:cf:8c:3a:30:b8:5e:a9:a5:4c:20:3a:cc:
         96:ba:97:2a:41:38:7a:9e:5c:d1:14:ae:71:ec:56:63:53:e0:
         ef:ae:a4:b3:ca:59:c9:c9:7e:53:80:fd:2c:bb:14:c4:81:78:
         dc:dd:e7:45:9a:43:14:df:de:7f:92:a2:56:1d:2f:2e:d9:9e:
         1c:a4:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org