Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
File:                     323830333a626238303a3a2f33322d3332203d3e20323633373031.roa (raw, json)
Hash identifier:          UFHBMQnjjuyD9+oXuRAXsOm4Oc2RnfdYiIm2G1FRypg=
Subject key identifier:   8A:C3:26:83:37:5A:62:32:1D:12:D9:0B:77:72:2F:2D:3C:01:79:CA
Certificate issuer:       /CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
Certificate serial:       2072935AFB1E288DB6ACA2D6F1374DAE917E31AC
Authority key identifier: 2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     263701
IP address blocks:        2803:bb80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:93:5a:fb:1e:28:8d:b6:ac:a2:d6:f1:37:4d:ae:91:7e:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=8AC32683375A62321D12D90B77722F2D3C0179CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:91:14:b0:52:37:85:6b:88:9a:7c:1b:39:
                    0f:c3:e5:36:27:e2:67:17:9a:a8:15:5a:e7:06:3b:
                    af:02:9c:aa:41:c7:5c:37:83:c1:e2:1b:95:b3:42:
                    12:ec:53:da:cb:29:83:d7:94:21:44:ae:47:4f:20:
                    34:a0:1a:8c:6c:8f:66:02:d1:93:d1:a8:a1:64:a9:
                    fe:51:1f:19:86:cf:22:fb:07:9c:66:57:be:88:d3:
                    d8:72:31:06:bb:10:e3:40:de:d7:fd:c3:4c:2e:ff:
                    34:99:e1:76:7b:7b:49:5a:81:32:97:46:aa:02:bf:
                    1b:78:dc:16:f6:62:b4:8a:6e:e8:60:7a:e7:a1:59:
                    69:f6:ea:3f:b9:a6:ed:3d:b3:eb:b1:04:92:4c:ff:
                    3c:56:19:bc:2c:e4:74:1c:ac:f2:0f:d9:ec:f7:c1:
                    d8:de:b5:cf:1b:00:95:06:a4:4f:9f:89:1d:4f:3e:
                    dc:f3:d2:51:06:7b:bc:64:ae:c9:da:ee:e2:22:31:
                    9c:b0:a9:0b:ad:c4:2f:4c:e9:ae:56:86:3b:eb:d8:
                    b6:55:9b:be:34:79:3f:96:2c:34:2f:19:7e:af:0e:
                    90:10:72:a6:74:71:bb:0d:4b:35:6f:2c:3f:65:03:
                    50:77:82:7f:25:80:f7:d3:74:d3:13:fb:fc:4d:e3:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:26:83:37:5A:62:32:1D:12:D9:0B:77:72:2F:2D:3C:01:79:CA
            X509v3 Authority Key Identifier:
                keyid:2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/323830333a626238303a3a2f33322d3332203d3e20323633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:05:3f:78:cf:7c:14:ba:0d:1e:a1:04:0c:88:6a:f0:c2:f4:
         55:34:7b:e1:3c:80:da:1c:a2:8c:48:6d:89:30:08:55:6e:0f:
         c6:33:f3:29:de:92:a7:8e:b7:7a:14:c1:02:36:75:b7:1e:d6:
         90:39:d7:18:51:87:70:59:51:90:d2:7f:03:d2:d1:02:87:89:
         cc:02:d4:5b:ae:ee:47:9e:f1:51:56:62:74:0d:61:ef:b5:80:
         a9:d6:a7:a3:d8:4c:da:85:d9:02:a3:5e:40:29:5a:a8:ac:54:
         81:ef:28:f8:0a:4b:c6:46:f4:6d:e1:b1:35:9d:0c:00:a4:cc:
         b0:c9:28:5b:fd:a2:48:2c:a5:1b:5b:bf:8f:02:ae:d4:26:34:
         13:bc:e0:84:8d:d7:ab:c4:0c:f9:17:1e:26:29:43:d9:a8:08:
         96:50:2a:fc:92:dc:05:d8:c8:47:77:b5:7b:ab:8b:8c:81:d3:
         37:44:26:ae:12:23:17:e6:2c:b9:01:b7:92:e4:ca:5b:e6:9c:
         0b:d7:67:78:50:7a:5c:73:06:51:3f:cd:13:6a:30:13:59:34:
         d3:f4:32:12:bb:cf:c0:cf:ba:c7:4d:d7:cc:48:c7:e7:52:85:
         4d:ce:0d:30:0a:ea:9a:1e:ec:8d:62:9e:ba:2a:a3:e9:49:14:
         26:15:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:37 2024 by rpki-client on console-ams.rpki-client.org