Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa
File:                     323830333a613336303a3a2f33322d3438203d3e20323639373833.roa (raw, json)
Hash identifier:          SvKW+EOE4c9boe3HHgPVzdwlCE7hL9R+bui23no2TpM=
Subject key identifier:   94:5C:4E:8B:81:A4:4A:B7:55:5D:7B:7E:29:E3:13:E2:CD:F6:45:B3
Certificate issuer:       /CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
Certificate serial:       382C21CE2B710445091626AB3EBB20AA8B2A78DE
Authority key identifier: E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa
Signing time:             Tue 05 Mar 2024 17:44:09 +0000
ROA not before:           Tue 05 Mar 2024 17:39:09 +0000
ROA not after:            Tue 04 Mar 2025 17:44:09 +0000
asID:                     269783
IP address blocks:        2803:a360::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2c:21:ce:2b:71:04:45:09:16:26:ab:3e:bb:20:aa:8b:2a:78:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
        Validity
            Not Before: Mar  5 17:39:09 2024 GMT
            Not After : Mar  4 17:44:09 2025 GMT
        Subject: CN=945C4E8B81A44AB7555D7B7E29E313E2CDF645B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:45:55:46:a7:9c:50:52:60:64:bd:c5:5e:
                    08:52:1e:2d:2f:21:5b:9e:28:97:ba:e5:4e:27:42:
                    4b:ce:77:02:4b:fc:01:9b:a3:a3:19:dd:76:62:01:
                    8c:bf:e0:f9:a0:d4:58:c2:ca:a9:6c:dd:f3:35:bb:
                    96:0c:ef:19:96:11:7e:95:23:4a:68:66:42:c1:8d:
                    7c:4d:0b:0e:13:06:59:5b:48:9f:0b:93:e9:14:7d:
                    07:e8:81:68:83:f7:41:3c:21:35:a5:af:77:95:5f:
                    c8:c2:3f:3a:6a:52:53:23:b9:6c:91:28:f2:a9:19:
                    39:94:61:e9:2d:cd:9c:2e:70:a8:52:96:ac:b7:f7:
                    8f:44:ef:99:2c:bb:4a:51:17:5d:8e:42:4c:49:5a:
                    ff:f5:61:a6:be:e6:ae:3f:9d:50:91:ef:81:96:3f:
                    66:4a:2b:c5:4a:52:1e:2d:88:f9:2c:d1:41:a6:e4:
                    eb:32:60:d5:0f:63:f4:f6:56:9b:5d:e5:c6:ea:dc:
                    e4:56:bd:8b:7c:3a:41:b5:e4:75:1a:d7:af:93:5a:
                    5d:05:da:1a:11:a9:e1:09:2c:8c:1e:78:63:a0:4e:
                    6b:dc:6e:1e:6d:d2:e1:4e:ab:e8:bb:ba:e5:e5:8d:
                    4e:7f:d9:c8:d0:3e:90:6d:65:78:6d:bb:7a:b2:46:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5C:4E:8B:81:A4:4A:B7:55:5D:7B:7E:29:E3:13:E2:CD:F6:45:B3
            X509v3 Authority Key Identifier:
                keyid:E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/323830333a613336303a3a2f33322d3438203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a360::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:aa:2d:54:69:77:a9:40:92:5d:0f:1f:e6:40:97:5d:c9:
         71:45:f0:58:6e:bc:d4:54:94:0c:33:a6:4c:1a:6e:6c:c0:cd:
         f4:6f:fe:52:e8:08:9d:2a:0c:9c:e8:aa:8e:28:34:e4:ff:69:
         d7:05:3d:92:ec:b1:13:2d:0e:e2:02:7d:b2:22:13:a4:83:1c:
         29:94:3c:0e:a2:ba:53:b4:7b:bf:02:f6:3f:1a:b7:bd:26:c1:
         c9:01:22:ac:2b:32:b2:b2:fc:0b:c3:30:be:7a:2a:9a:7d:7f:
         4d:a1:97:e0:2c:45:d4:18:e5:b7:ca:14:89:60:3c:6a:57:f6:
         1e:44:3f:50:de:ed:fc:a3:4c:98:58:14:f9:1e:d4:da:f9:94:
         72:c8:24:d2:0a:2e:34:92:c3:4a:79:78:18:e4:04:39:1d:5c:
         e3:ab:8c:64:33:62:2c:ff:12:36:2a:d3:04:f4:2d:fa:f2:3d:
         b2:4b:a6:21:8e:e5:de:14:e0:e7:c2:fc:1f:32:1a:4f:19:6e:
         f1:82:ff:fa:58:da:fd:7d:0a:6c:2a:2a:cd:b0:2b:d2:a6:f4:
         1b:15:c4:f3:3d:1a:5d:2e:63:4e:61:0d:13:78:af:ce:75:cc:
         6c:5d:b4:1f:d5:d3:85:34:21:fe:46:f6:54:8a:2b:04:c9:ac:
         22:f0:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org