Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a653632303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          AUxLuW4CmopoeFaguzrtavqeDfzLIQZqecxxa4oUQt8=
Subject key identifier:   FE:36:1C:62:EA:52:7F:35:6C:26:05:36:3C:53:C0:E2:75:3C:B5:E8
Certificate issuer:       /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial:       08A96B80ECA3C8565ACEAEC183F6981685995C19
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:56:53 +0000
ROA not before:           Tue 05 Mar 2024 17:51:53 +0000
ROA not after:            Tue 04 Mar 2025 17:56:53 +0000
asID:                     264668
IP address blocks:        2803:e620::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:6b:80:ec:a3:c8:56:5a:ce:ae:c1:83:f6:98:16:85:99:5c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
        Validity
            Not Before: Mar  5 17:51:53 2024 GMT
            Not After : Mar  4 17:56:53 2025 GMT
        Subject: CN=FE361C62EA527F356C2605363C53C0E2753CB5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:4d:46:37:a8:11:5b:aa:44:1f:7e:34:14:
                    5e:0b:26:49:db:d6:ce:0c:c4:d1:28:b9:3c:31:02:
                    35:23:c8:f7:8d:72:af:8a:30:1c:3d:57:98:5e:1a:
                    ff:d4:75:04:fc:bd:e6:d3:fb:31:4f:8d:36:67:f4:
                    5d:95:fd:fd:b1:1b:ee:f0:c3:50:f0:4c:fa:dc:88:
                    da:b1:d0:7f:f9:c1:d6:d7:6d:97:c1:7f:4b:6f:9d:
                    60:28:27:ae:5d:1b:c2:a8:57:ca:82:2f:2f:e8:6f:
                    39:9b:38:26:10:ab:b1:23:d7:1d:b5:e1:da:43:84:
                    ff:52:bd:01:a9:20:2e:7d:6d:d4:74:1f:83:a9:fb:
                    ea:9c:81:fc:a1:ee:a4:fe:85:8f:26:bb:ec:2f:de:
                    66:a4:7f:42:43:e6:4a:4e:18:75:0a:21:c8:38:76:
                    3e:71:f7:95:c5:52:78:1a:03:4c:8d:80:1b:90:eb:
                    3d:3e:1c:ec:da:2d:d5:28:5a:d9:83:12:d8:5b:d8:
                    00:ed:43:58:29:19:f6:25:4e:a4:ef:fc:a6:2c:d4:
                    2c:0b:b9:07:6d:f4:d5:4f:bd:c6:6b:eb:5d:bd:6b:
                    13:9c:7a:1d:ff:c5:8b:ae:2e:46:00:86:d4:cd:9b:
                    f4:79:2c:85:76:93:fd:eb:41:28:c0:cc:18:ab:82:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:1C:62:EA:52:7F:35:6C:26:05:36:3C:53:C0:E2:75:3C:B5:E8
            X509v3 Authority Key Identifier:
                keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/323830333a653632303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e620::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:77:89:f9:05:48:42:cc:9c:b7:c4:c9:53:2a:f8:4e:15:
         bd:96:23:87:0a:8e:fa:86:a0:4b:2a:4b:1e:bf:16:b2:c6:6b:
         40:09:35:cd:0e:56:dc:1f:5c:5f:ea:5c:53:d3:d0:10:de:36:
         9f:5f:48:7d:7b:d4:e0:87:2b:7f:69:5c:8c:73:c2:30:09:68:
         b6:5b:c3:08:2c:85:4a:0a:d8:6c:cc:ec:e2:18:2c:b6:ea:1e:
         dd:4d:40:0a:61:ea:5b:28:29:4a:52:33:91:1f:6f:87:f8:02:
         23:96:4d:95:37:14:7d:6c:fd:05:4e:ed:70:8b:c5:35:21:d7:
         fb:c3:3d:96:46:4e:07:cc:d3:f8:bc:c8:5a:5f:94:36:c4:f6:
         e3:74:1c:ae:54:0d:bf:a7:e1:2c:7a:a5:0f:e6:e1:da:17:eb:
         83:95:d7:c7:30:44:ad:ba:1c:9d:6f:88:5f:39:28:32:e8:8f:
         1d:dc:c5:1a:02:7f:a4:ca:2c:cd:8a:e0:f4:af:0c:f8:83:fd:
         19:1f:b8:f0:f5:04:46:8b:58:a7:cf:5f:fd:3c:65:15:e6:c9:
         54:59:fe:61:1b:c2:49:dd:a1:ac:ac:1c:83:17:9a:ca:62:bc:
         3f:0a:bd:22:6a:83:5c:09:57:68:dd:5d:9b:0e:2e:2b:37:3e:
         af:8e:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org