Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/323830333a633838303a3a2f33322d3332203d3e20333938373132.roa
File:                     323830333a633838303a3a2f33322d3332203d3e20333938373132.roa (raw, json)
Hash identifier:          B7mnB8eVclHobZLwMvhmqcHHshvNvIbXEN2zd/qz6GM=
Subject key identifier:   22:78:6D:D4:08:71:2D:4A:87:B1:EB:23:A4:36:25:95:BB:56:03:CC
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       1E258A22B40DEAC11A71F981EC28A09524B4137B
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/323830333a633838303a3a2f33322d3332203d3e20333938373132.roa
Signing time:             Tue 05 Mar 2024 17:47:53 +0000
ROA not before:           Tue 05 Mar 2024 17:42:53 +0000
ROA not after:            Tue 04 Mar 2025 17:47:53 +0000
asID:                     398712
IP address blocks:        2803:c880::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:25:8a:22:b4:0d:ea:c1:1a:71:f9:81:ec:28:a0:95:24:b4:13:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:53 2024 GMT
            Not After : Mar  4 17:47:53 2025 GMT
        Subject: CN=22786DD408712D4A87B1EB23A4362595BB5603CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:53:9d:a0:64:cb:a4:b5:5f:a3:88:12:d8:
                    c2:20:37:73:73:97:97:79:db:b5:39:7b:c2:3f:54:
                    89:a1:93:1c:0d:36:37:2f:c2:dc:78:95:a7:2b:90:
                    fa:6c:b4:93:ff:ec:11:c4:01:19:fd:05:21:db:6e:
                    47:f9:f2:b0:20:ab:7d:d0:ca:0a:9f:c9:f4:ca:49:
                    50:8a:4e:75:5b:88:57:76:cd:9c:57:d7:4c:8a:92:
                    fe:9b:19:f0:36:3a:9a:74:de:66:a8:80:d9:f6:85:
                    11:99:40:d3:01:2a:a1:3f:e1:21:e1:d4:e9:90:d9:
                    22:81:c1:aa:e3:59:95:13:20:cb:2e:0a:c0:1c:be:
                    5a:32:a9:bc:ba:7a:1f:ab:27:7e:b3:f5:7f:73:35:
                    57:08:2c:b0:8b:e4:db:fe:32:dd:fb:3c:9d:70:ed:
                    24:0d:f0:0d:7f:92:8a:f9:f3:72:3b:3f:f9:91:b2:
                    f8:34:07:08:b4:03:80:60:bc:fb:32:0f:9c:9f:51:
                    52:7e:d5:49:f8:3d:a4:d9:d1:40:ba:92:6a:15:b9:
                    42:1d:a6:18:47:cc:cd:18:5b:b7:e2:f8:d3:5f:39:
                    65:af:5c:f5:44:fa:da:e2:d1:08:5d:72:3c:5d:af:
                    30:88:da:4c:67:41:dd:3d:a3:c8:40:b6:e3:e7:fa:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:6D:D4:08:71:2D:4A:87:B1:EB:23:A4:36:25:95:BB:56:03:CC
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/323830333a633838303a3a2f33322d3332203d3e20333938373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c880::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:89:b1:a3:ad:aa:0e:22:0d:96:9b:ec:a2:c6:55:60:3c:63:
         3e:ce:98:d1:c2:91:75:64:db:e8:79:47:6c:63:b2:e9:e4:a2:
         a8:2a:40:2d:82:55:d5:c7:3b:92:cf:27:1b:38:59:dc:0a:11:
         81:f1:2b:b4:49:b9:07:42:83:2c:7d:c2:0f:f3:af:70:79:13:
         55:6f:9a:1b:b3:c5:78:90:e5:9a:50:03:c4:be:f1:2d:15:ab:
         3f:d0:d5:64:3f:7d:11:01:28:49:cf:26:92:f9:5a:9a:4f:66:
         69:ef:b7:a0:3f:0d:d4:f7:33:fb:22:7b:de:0a:fe:5d:19:ca:
         d5:b3:68:54:a1:bb:46:19:b8:23:9a:87:a7:15:d4:77:84:dd:
         a7:19:3b:3e:78:46:cd:8b:e9:66:95:49:e7:b0:5d:ad:a8:4f:
         c3:22:1d:a0:76:f6:28:3a:b5:65:f8:fb:3d:dd:1f:51:57:66:
         41:d5:58:f3:c2:66:93:15:8a:f9:40:ef:95:fe:28:0f:dd:44:
         86:f1:9f:5a:a8:b2:e7:15:f0:7f:eb:91:60:68:6b:cb:46:ef:
         bd:67:ce:d8:66:e6:ba:05:d4:cb:dd:73:e3:7c:d6:88:9c:50:
         c7:2a:57:fa:7c:f8:af:75:b3:e4:74:07:6d:4d:29:4f:94:71:
         7f:45:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org