Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa
File:                     323830333a326561303a3a2f33322d3332203d3e20323637363737.roa (raw, json)
Hash identifier:          Ife9nlzfRIbUC06YrSIKx7hEaZ4YgkQJKvw8ZBkoaMk=
Subject key identifier:   30:00:92:61:15:33:D8:45:0B:6C:07:AC:9C:C5:DE:47:D6:11:61:74
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       172F609F3DAEEEF84E2B4BAE306617AE8B7B7E05
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa
Signing time:             Tue 05 Mar 2024 17:57:11 +0000
ROA not before:           Tue 05 Mar 2024 17:52:11 +0000
ROA not after:            Tue 04 Mar 2025 17:57:11 +0000
asID:                     267677
IP address blocks:        2803:2ea0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2f:60:9f:3d:ae:ee:f8:4e:2b:4b:ae:30:66:17:ae:8b:7b:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Mar  5 17:52:11 2024 GMT
            Not After : Mar  4 17:57:11 2025 GMT
        Subject: CN=300092611533D8450B6C07AC9CC5DE47D6116174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:7f:aa:b3:83:b1:a5:18:66:d1:28:15:9d:
                    be:33:a9:09:f5:00:2c:b0:63:63:db:0c:4e:94:77:
                    58:76:01:10:71:39:4d:0a:a6:76:66:c4:3c:ae:a3:
                    99:6d:e5:88:d6:90:b5:30:29:3b:b0:a2:17:65:85:
                    83:93:9c:b9:5e:4e:fc:32:da:68:44:0f:00:a5:44:
                    77:eb:e8:22:e0:5b:17:1e:c9:42:31:53:4f:0f:cc:
                    df:26:51:b9:64:32:4d:24:28:61:41:90:fa:97:6b:
                    f2:de:80:58:33:4a:05:fc:5b:73:a3:6e:15:e6:ec:
                    48:ab:e5:e2:e6:96:58:4c:3f:c9:85:4b:16:63:d9:
                    e8:92:ac:dd:15:a2:58:87:c6:1d:c4:4a:27:c7:7d:
                    5d:8d:dd:09:84:f3:70:fe:30:ef:0b:0d:90:f5:7a:
                    59:3f:61:19:fb:3c:da:5a:c8:e0:ea:bd:99:7e:02:
                    3d:3d:b8:6e:ec:d2:b1:61:a2:d3:bb:d0:b7:6a:1b:
                    50:bb:0b:0a:97:bd:30:01:9b:b3:da:e6:10:17:7c:
                    21:b5:99:a6:6c:56:5d:8f:e3:56:c6:c7:32:8e:f1:
                    52:97:24:3e:88:bf:53:ef:80:5e:c1:80:19:81:60:
                    c2:d4:34:c5:77:68:75:c2:e6:70:35:3d:95:3b:fa:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:92:61:15:33:D8:45:0B:6C:07:AC:9C:C5:DE:47:D6:11:61:74
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/323830333a326561303a3a2f33322d3332203d3e20323637363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:c1:9e:a7:7a:fa:6f:ae:a9:7d:ed:7b:de:4d:85:80:28:
         64:2c:22:a7:5e:c6:67:88:ca:ed:2f:59:8d:71:66:9f:ec:b1:
         c3:79:92:f6:b4:24:0a:d5:b4:1b:5d:1b:49:fa:5d:53:0f:cd:
         20:f1:f7:1c:3a:25:31:30:16:d8:5f:d1:7e:02:f8:e3:1d:d0:
         28:e7:9a:e7:e0:d0:28:ce:af:2c:88:bd:2f:24:12:2f:d7:8f:
         9d:be:47:31:30:67:85:2e:79:92:46:a6:9c:6a:eb:0c:7a:87:
         d0:b4:86:6d:33:a6:8c:5f:00:6e:e9:24:3c:91:5a:37:37:f5:
         c6:6a:7f:63:e8:79:91:c9:51:84:7d:93:2d:1b:79:c2:d2:3c:
         89:12:93:fa:25:e7:b9:c6:a7:24:cf:c6:03:b5:bf:d3:f6:43:
         c1:ef:a2:a2:b1:01:62:c3:1c:62:60:24:f6:4a:3a:04:91:05:
         f5:a4:07:a7:19:08:5a:ac:de:c1:53:8b:4c:e7:30:31:b6:12:
         f9:47:70:d9:cf:b6:df:25:a0:31:c2:5e:dd:f2:23:e1:c8:49:
         ae:74:41:b3:e2:8c:46:a8:86:ac:fd:98:ae:64:f1:ce:48:15:
         45:82:e2:7d:ba:01:b4:ef:58:64:99:d7:15:cb:51:15:65:f6:
         91:8b:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:07 2024 by rpki-client on console-fra.rpki-client.org