Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a313538303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          QR4dQvznjO4AkOr+XZ9QCXRC9KUscfCSnYfr1qsDbPU=
Subject key identifier:   F0:61:D2:CF:0A:32:E9:A7:E5:87:37:3E:31:8E:71:7A:28:73:CF:9B
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       0F6908F402D47F5C6BE06B7E0AE96E4D1A4F79B4
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:09:17 +0000
ROA not before:           Tue 05 Mar 2024 18:04:17 +0000
ROA not after:            Tue 04 Mar 2025 18:09:17 +0000
asID:                     262191
IP address blocks:        2803:1580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:69:08:f4:02:d4:7f:5c:6b:e0:6b:7e:0a:e9:6e:4d:1a:4f:79:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Mar  5 18:04:17 2024 GMT
            Not After : Mar  4 18:09:17 2025 GMT
        Subject: CN=F061D2CF0A32E9A7E587373E318E717A2873CF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:fc:07:fc:40:5c:30:87:a8:46:22:94:32:
                    7a:d6:2d:26:02:68:41:ca:c0:7b:33:46:12:e1:35:
                    22:97:14:31:c0:c0:90:ab:27:7a:d2:02:76:14:59:
                    dd:5b:09:c3:85:e9:2c:07:a7:25:b7:ab:28:8b:ee:
                    83:de:6e:70:65:8a:e5:5b:5c:41:a8:1f:7f:2f:1a:
                    f4:03:de:29:33:85:c7:8b:a3:bd:9b:03:62:55:ed:
                    4b:af:9b:7a:ad:3e:c4:53:d7:51:76:87:95:df:81:
                    69:b3:e5:20:8c:a0:f7:4e:b0:a0:f3:31:a7:d6:63:
                    97:d9:79:b5:64:80:b2:ac:c8:48:8a:e5:a7:76:c3:
                    0f:85:5a:97:56:4c:1f:c2:89:72:b8:c0:e8:8e:24:
                    53:29:96:a1:cd:05:6b:98:9f:4b:33:70:f7:8b:fa:
                    28:fb:96:31:76:c6:ee:27:eb:f9:dc:93:f4:73:ca:
                    0c:64:a5:ff:12:c3:a3:35:76:34:3a:67:92:ff:dd:
                    ea:25:5d:02:d6:82:cd:2d:b5:0b:37:e0:67:5a:1e:
                    b3:7f:2c:f2:ee:c0:c2:ec:a3:52:c1:88:14:f2:23:
                    6b:8e:63:88:51:cc:87:7a:e6:5b:db:99:c7:1d:67:
                    d0:9c:e5:46:0f:94:fc:2b:31:de:2c:39:32:b5:e9:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:61:D2:CF:0A:32:E9:A7:E5:87:37:3E:31:8E:71:7A:28:73:CF:9B
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:95:b6:b9:1d:9d:6f:93:85:0c:c0:95:df:1a:55:86:68:c8:
         0a:32:4a:62:b1:9e:7b:b3:dd:2d:15:3a:5c:22:7a:c6:18:a2:
         49:a3:d6:da:da:45:31:66:8b:98:ed:cc:52:7b:63:c9:db:03:
         c3:7d:72:44:5b:d3:37:54:9b:3d:25:32:5f:53:0f:10:3b:9b:
         3d:b4:fa:b8:c2:45:4d:e1:9b:74:7e:ea:24:67:e9:1a:0b:9a:
         8a:68:e8:07:49:db:40:b7:09:40:e5:85:8f:a7:1a:5b:f9:6e:
         8b:74:9d:c6:e9:77:f8:77:dd:e9:47:a9:0e:cf:ed:e5:cb:92:
         2e:ad:10:02:2d:ac:ca:d5:65:63:87:28:20:56:20:9d:ec:84:
         86:88:db:a6:58:77:4c:16:96:8d:8c:76:f2:9c:1c:ac:61:d6:
         51:fc:10:9a:aa:9e:6f:bd:67:56:62:03:68:0d:b4:4f:81:9d:
         30:07:90:1d:5c:6e:71:67:6a:de:ac:ab:68:1f:24:f6:31:2b:
         13:d8:c5:bb:12:ea:1a:04:3c:8a:a0:5f:56:04:19:a1:27:d1:
         f5:d7:e9:75:7b:10:34:24:0b:5e:3e:6a:9e:b6:6f:ae:8a:db:
         e0:b5:61:ff:d9:d5:ac:bc:1d:5f:40:82:57:97:96:e5:79:9c:
         a4:2f:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:27 2024 by rpki-client on console-fra.rpki-client.org