Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa
File:                     323830333a313436303a3a2f33322d3332203d3e20323637383337.roa (raw, json)
Hash identifier:          yyjhoWQGeq0nRAIIW/P6scTdVXevLwyj/oWe7+HYp7M=
Subject key identifier:   D5:6E:FB:EC:D4:38:8D:FC:A8:09:14:CC:28:90:55:FA:2F:82:A5:F8
Certificate issuer:       /CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
Certificate serial:       4CA32882DC12205A13E202314277F2E31AC5DBC6
Authority key identifier: 7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa
Signing time:             Tue 05 Mar 2024 17:42:30 +0000
ROA not before:           Tue 05 Mar 2024 17:37:30 +0000
ROA not after:            Tue 04 Mar 2025 17:42:30 +0000
asID:                     267837
IP address blocks:        2803:1460::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a3:28:82:dc:12:20:5a:13:e2:02:31:42:77:f2:e3:1a:c5:db:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
        Validity
            Not Before: Mar  5 17:37:30 2024 GMT
            Not After : Mar  4 17:42:30 2025 GMT
        Subject: CN=D56EFBECD4388DFCA80914CC289055FA2F82A5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:76:d4:e7:11:05:48:eb:32:4d:03:ca:a1:
                    f8:b4:e0:de:92:73:fb:9a:a9:9a:20:56:c5:82:3e:
                    40:50:89:dc:e9:5a:8e:62:47:d2:d2:a7:17:b0:fd:
                    fc:06:8b:c5:aa:ca:f6:0a:31:0f:9b:ed:00:ca:0a:
                    d0:98:17:ea:aa:c9:04:3e:cf:28:e8:35:5e:bf:cf:
                    7d:22:06:d7:44:63:31:cb:79:3b:38:86:db:97:b7:
                    d5:5a:bd:f1:bf:7a:0e:ba:bc:be:cb:9c:03:71:a0:
                    41:ea:87:ab:c7:e7:9d:65:a8:61:ad:f8:14:0a:b2:
                    b5:a9:2f:bb:6b:44:bc:f8:34:7a:34:67:07:10:3e:
                    dd:d0:97:15:92:9e:cd:c3:1d:d7:42:f3:c5:8e:bb:
                    33:66:1b:4e:5e:b7:5d:49:a4:66:8e:90:2d:a5:b4:
                    22:f9:93:0e:a0:50:b0:66:1b:86:82:31:2a:a4:44:
                    3e:ee:be:9c:d5:fc:91:3e:67:f5:6e:d4:54:08:66:
                    88:4a:8b:c0:e8:ff:78:5c:61:87:a9:f6:89:f5:2e:
                    a1:64:92:b6:d8:5c:ac:ce:57:d9:f8:a7:63:3f:87:
                    eb:b2:b1:73:db:49:1c:a6:77:ca:4f:72:c2:b8:6b:
                    a1:d5:5e:84:c7:8e:cb:98:b6:9c:8e:8e:2e:bf:ad:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6E:FB:EC:D4:38:8D:FC:A8:09:14:CC:28:90:55:FA:2F:82:A5:F8
            X509v3 Authority Key Identifier:
                keyid:7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/323830333a313436303a3a2f33322d3332203d3e20323637383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1460::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:db:b4:65:7f:17:90:cb:1e:26:36:2b:4d:d1:14:7b:84:
         31:1d:88:ac:d7:4f:70:30:36:95:07:1e:f1:4e:3b:74:a9:47:
         08:b0:16:5a:a2:19:5c:6c:3a:05:83:e6:3f:42:cb:87:0f:87:
         78:cf:eb:67:7e:2e:7b:29:c8:5f:64:22:1f:7f:cf:30:17:2a:
         c9:d3:09:b1:7d:a7:eb:93:79:b3:57:ee:e0:9c:1f:ad:1a:7f:
         8d:b9:e7:b4:8c:0e:6c:b0:0f:9e:88:05:52:24:cd:db:52:50:
         bb:07:2a:60:74:4a:64:31:75:24:ae:a4:3c:8d:50:ec:f5:07:
         26:9c:8f:05:1b:2b:2e:c7:5c:9e:f5:2b:da:97:ba:99:64:f7:
         bf:59:bc:68:47:ab:b8:f4:e6:2c:6c:ca:ac:42:51:4d:0a:ed:
         49:e6:e9:14:b1:55:e1:75:f6:e0:f5:9c:9d:56:d6:04:21:20:
         6d:49:e1:14:d2:c3:24:a7:d4:cd:09:e9:04:10:f3:c9:2b:ba:
         2a:41:d2:2a:0a:25:20:80:fe:34:6b:0b:4a:99:00:b4:8b:31:
         9d:82:f6:f9:86:35:cd:e2:72:7b:44:7a:13:82:21:c9:2f:11:
         5e:40:9b:d1:87:b4:07:22:2d:7a:9a:da:fb:26:96:c8:bf:95:
         56:c5:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org