Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/323830333a373961303a3a2f33322d3438203d3e20323637373231.roa
File:                     323830333a373961303a3a2f33322d3438203d3e20323637373231.roa (raw, json)
Hash identifier:          QGvDHIWUsLFZwpd3xYLtVfzjK2R50eq5HHwxunZsDFM=
Subject key identifier:   64:89:D7:4D:C1:6E:9D:18:B3:3D:C8:58:EE:A5:67:F4:17:E0:F1:13
Certificate issuer:       /CN=DEBD254C261020FC83563BF97624C24F76BB66F8
Certificate serial:       45B997DB6F9070E0662ECAD1788176853621DD05
Authority key identifier: DE:BD:25:4C:26:10:20:FC:83:56:3B:F9:76:24:C2:4F:76:BB:66:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/323830333a373961303a3a2f33322d3438203d3e20323637373231.roa
Signing time:             Tue 05 Mar 2024 17:59:35 +0000
ROA not before:           Tue 05 Mar 2024 17:54:35 +0000
ROA not after:            Tue 04 Mar 2025 17:59:35 +0000
asID:                     267721
IP address blocks:        2803:79a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b9:97:db:6f:90:70:e0:66:2e:ca:d1:78:81:76:85:36:21:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEBD254C261020FC83563BF97624C24F76BB66F8
        Validity
            Not Before: Mar  5 17:54:35 2024 GMT
            Not After : Mar  4 17:59:35 2025 GMT
        Subject: CN=6489D74DC16E9D18B33DC858EEA567F417E0F113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:36:42:a6:60:74:25:1b:88:80:d9:2d:82:
                    3f:8d:0d:2d:08:b4:db:6a:d7:de:3b:1f:c2:4d:18:
                    e4:4c:f0:6f:1e:e5:be:62:9f:bc:1f:42:d3:b6:19:
                    43:1c:6b:49:c3:d6:62:f2:41:1d:19:c6:8d:94:b0:
                    2f:08:8c:b7:b3:3e:84:ad:29:88:51:06:b0:4c:a3:
                    b1:5d:de:bd:e2:a9:a5:3d:b4:66:af:a3:69:19:64:
                    3c:97:e4:4f:e4:20:f1:73:30:71:f4:de:65:9e:a6:
                    3c:36:cf:0a:ec:99:e1:5f:b3:34:8b:10:40:bc:63:
                    d6:2c:6d:84:83:c8:93:a7:df:47:8a:94:11:bf:9e:
                    ac:1c:4c:48:3a:7d:fe:c9:e8:aa:68:92:a1:b2:4c:
                    a8:4b:34:2c:e5:6c:81:d4:ca:da:05:27:82:9d:01:
                    ae:d5:ae:33:88:1b:ab:1a:f8:ee:e4:a9:44:96:0c:
                    97:d8:01:be:b1:4c:41:d6:11:53:cd:b7:60:56:24:
                    93:c2:9a:0d:87:7c:60:5b:af:91:0f:bd:ca:79:2b:
                    65:ab:f6:0d:de:13:e1:01:99:fa:a7:da:f7:67:4e:
                    ed:d6:48:b4:44:91:b7:23:73:c1:68:bf:db:47:a5:
                    07:de:6d:11:fa:1d:fe:b0:d0:9b:72:c3:39:07:ec:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:89:D7:4D:C1:6E:9D:18:B3:3D:C8:58:EE:A5:67:F4:17:E0:F1:13
            X509v3 Authority Key Identifier:
                keyid:DE:BD:25:4C:26:10:20:FC:83:56:3B:F9:76:24:C2:4F:76:BB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/323830333a373961303a3a2f33322d3438203d3e20323637373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:79a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:24:86:85:95:26:be:69:ba:14:80:e0:43:2f:76:b2:c7:
         72:e8:0c:05:0d:08:a9:e1:71:44:9c:e7:b3:cd:82:c0:57:4d:
         94:2b:6e:5d:c2:42:8d:b9:9d:60:47:7f:59:96:14:8d:bd:eb:
         7f:d2:bb:eb:f1:71:b5:b8:2a:53:30:70:83:6c:a8:2f:ac:18:
         fb:ed:b9:5a:27:a1:76:a9:52:a1:96:2a:28:5e:b5:bf:ec:90:
         89:af:2b:c4:0e:69:51:ed:f9:54:68:15:87:b1:e1:b1:fc:ad:
         db:5c:ab:e3:9a:14:d7:c8:a4:2c:e3:54:56:92:ac:c3:d7:bf:
         b4:ca:d9:3f:37:45:68:93:d8:25:30:2d:56:ec:d5:6e:7d:9b:
         a5:c5:cc:37:cc:e0:31:18:13:a0:11:51:c9:3b:28:16:51:a2:
         c0:28:93:b7:aa:2c:9c:9e:dc:2a:42:f9:3f:2d:4e:a7:e0:89:
         90:aa:d5:1f:58:69:e8:62:06:79:e6:e3:22:53:8f:a2:d4:77:
         9a:9d:0a:0f:24:5f:fa:21:79:a7:30:4f:3e:d1:bc:23:e6:de:
         33:65:bf:8b:32:9a:c6:23:83:57:97:86:37:8a:29:b6:06:e1:
         2d:eb:ab:dd:05:00:99:28:35:4c:f8:1a:ac:c5:ed:cd:61:de:
         4c:45:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org