Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3634203d3e203238303934.roa
File:                     323830333a373930303a3a2f33322d3634203d3e203238303934.roa (raw, json)
Hash identifier:          UQotluZApOOGVdooPEWI0+ENff4ZioeM/o5a+ouN94M=
Subject key identifier:   2D:13:D6:11:3B:22:6D:B5:C9:6B:1B:14:93:35:8C:58:FA:2A:34:57
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       5E33E852D2F08E3CAFE66EECB4CB05FDEE8A1373
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3634203d3e203238303934.roa
Signing time:             Tue 05 Mar 2024 18:00:33 +0000
ROA not before:           Tue 05 Mar 2024 17:55:33 +0000
ROA not after:            Tue 04 Mar 2025 18:00:33 +0000
asID:                     28094
IP address blocks:        2803:7900::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:33:e8:52:d2:f0:8e:3c:af:e6:6e:ec:b4:cb:05:fd:ee:8a:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Mar  5 17:55:33 2024 GMT
            Not After : Mar  4 18:00:33 2025 GMT
        Subject: CN=2D13D6113B226DB5C96B1B1493358C58FA2A3457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:4d:2b:e4:c0:5b:76:4f:54:66:aa:c0:9a:
                    b4:29:7a:96:5a:d4:13:19:11:e8:f2:e7:97:c6:d5:
                    8b:30:24:43:f6:f9:7c:82:98:73:b6:ae:83:71:c7:
                    8c:83:1b:11:38:cf:ad:ed:80:b2:82:40:62:77:0c:
                    a6:1a:55:c6:3e:fc:78:cc:0d:67:ad:d8:42:0c:21:
                    2a:bf:e0:d6:5e:9d:dc:65:ee:c1:dd:1b:0c:50:0f:
                    1f:17:bf:74:6c:ee:07:a1:5a:a1:6b:06:2e:9f:e5:
                    aa:91:c9:95:90:22:b9:c5:c0:01:8a:63:b9:cc:ef:
                    41:26:b4:58:4c:e9:8c:3f:0c:d6:64:65:54:a8:3d:
                    ec:77:90:b0:17:74:91:33:50:db:55:58:fd:0d:fc:
                    4a:4d:f3:d7:16:2a:63:db:0b:3a:cc:b8:ee:e9:59:
                    2a:29:b7:b4:6e:04:0f:9b:7e:e1:78:c2:6e:d3:53:
                    4c:9a:99:bf:24:2d:a1:e3:2b:67:7b:de:4d:45:d9:
                    41:60:7a:62:82:5c:c6:41:15:e9:66:18:f0:20:31:
                    71:87:c9:32:f1:41:4b:ee:f8:fc:4d:b7:b9:d9:e8:
                    fc:2e:a4:fb:67:1b:99:45:d0:95:57:91:00:43:3a:
                    9a:73:31:90:d9:a1:a5:bf:16:2e:61:83:82:25:bd:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:D6:11:3B:22:6D:B5:C9:6B:1B:14:93:35:8C:58:FA:2A:34:57
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3634203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:99:80:b3:f8:ab:c9:f1:75:96:cf:c4:9d:5f:91:34:3d:
         81:a9:c3:7b:d9:18:d1:25:20:5d:15:60:f2:ed:89:97:b1:3b:
         05:d8:6c:87:63:35:91:60:cc:df:0b:83:18:3d:d7:97:1f:99:
         04:40:6e:88:56:ac:0b:2c:65:4f:fb:87:45:a1:9a:69:1f:90:
         6d:47:65:43:f7:d7:a8:dc:b4:3d:ba:c6:93:fe:40:97:50:c6:
         04:fa:98:ed:ab:05:81:13:6e:ff:a0:d9:b4:fd:ea:dc:cb:1c:
         05:1b:41:e3:45:bd:76:7d:2c:62:a5:13:6e:ba:54:4a:f8:2e:
         2d:85:3b:35:32:f4:12:2c:dc:ae:15:27:55:eb:3c:cc:71:d4:
         32:aa:b8:9c:20:50:b7:77:c5:70:52:f7:6b:c3:25:5e:a2:9c:
         25:4d:a8:62:76:d2:30:a9:39:b1:cf:f4:e0:2d:46:29:a0:d9:
         e3:06:d2:c3:d0:8e:72:80:e8:2a:45:26:54:cc:5c:3b:3b:03:
         16:71:01:b2:8b:03:27:49:6b:dc:13:96:07:9c:36:6f:7f:50:
         e7:25:73:3a:84:07:7a:e2:da:54:7e:22:47:d4:30:08:6f:aa:
         63:f6:ef:07:9c:a5:90:ac:c7:ce:4b:a0:38:f8:dd:7a:54:49:
         53:00:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org