Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
File:                     323830333a653134303a3a2f33322d3434203d3e20323634363331.roa (raw, json)
Hash identifier:          ka7RKVXOaGtfDoFi/UNUdQl0/XkR5j5J8HmsKVfvvVo=
Subject key identifier:   20:24:58:EE:C8:06:24:6A:49:57:25:BB:82:87:37:B6:51:1E:7C:4E
Certificate issuer:       /CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
Certificate serial:       51001CDAF97F1006981BECA3B912B856BA4D3632
Authority key identifier: D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa
Signing time:             Tue 05 Mar 2024 18:13:48 +0000
ROA not before:           Tue 05 Mar 2024 18:08:48 +0000
ROA not after:            Tue 04 Mar 2025 18:13:48 +0000
asID:                     264631
IP address blocks:        2803:e140::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:00:1c:da:f9:7f:10:06:98:1b:ec:a3:b9:12:b8:56:ba:4d:36:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
        Validity
            Not Before: Mar  5 18:08:48 2024 GMT
            Not After : Mar  4 18:13:48 2025 GMT
        Subject: CN=202458EEC806246A495725BB828737B6511E7C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:ed:e8:18:9a:49:90:8a:32:65:9b:89:91:
                    c3:47:c0:89:44:4a:c9:2f:04:17:1a:1b:fa:fe:67:
                    ea:f1:14:f2:c5:6e:07:77:cb:32:c1:16:22:2e:a9:
                    a4:a5:a8:63:09:79:e4:c6:d5:be:4d:54:a4:65:2d:
                    47:7b:09:c6:b3:d2:e0:94:c8:8e:a1:c4:d9:06:6f:
                    e6:c6:88:ac:3f:34:26:47:90:6a:be:47:c8:ba:47:
                    89:c3:0a:66:90:d4:4a:4b:de:93:34:63:1b:51:a9:
                    f0:30:e6:37:13:d2:87:22:f4:62:bd:85:bd:c5:2c:
                    da:7f:b2:48:89:7a:d2:ae:1f:83:58:2a:64:f2:3c:
                    45:2d:14:27:bf:b9:34:a3:5f:38:f3:a8:95:35:cd:
                    cc:0a:80:a6:de:15:62:f1:d2:9a:27:d5:c9:c0:a3:
                    0c:63:46:88:72:9a:77:68:67:f2:19:16:33:83:88:
                    29:1a:45:e0:bb:5d:cc:74:f7:c4:7c:5a:79:c0:02:
                    09:1a:36:55:ab:80:cf:43:dd:5e:6c:04:0a:1b:1e:
                    f9:4b:9a:1c:3a:08:81:2f:3c:b1:70:fd:09:95:36:
                    b6:33:6e:a6:d2:ee:68:97:1b:c7:48:9b:1e:48:22:
                    70:f0:cf:93:18:6b:2e:d2:c0:ef:63:a3:73:b6:c7:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:58:EE:C8:06:24:6A:49:57:25:BB:82:87:37:B6:51:1E:7C:4E
            X509v3 Authority Key Identifier:
                keyid:D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/323830333a653134303a3a2f33322d3434203d3e20323634363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e140::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:63:d6:0c:af:47:94:45:fd:37:20:df:95:b0:0c:1c:05:
         c1:0c:c9:49:09:65:a9:d6:cf:6a:2a:c5:be:89:52:c3:92:ea:
         b2:d6:fc:fc:8b:9d:92:80:9c:fd:95:59:97:c0:c3:0e:17:2e:
         20:49:64:a8:96:e4:4e:0a:a4:e3:90:4d:3c:44:51:1d:cb:41:
         65:ef:83:e2:75:fb:a8:45:c6:07:b3:7f:55:ca:80:db:a4:f2:
         0a:1a:17:34:95:cd:f1:b4:09:e9:34:09:63:10:50:af:35:1e:
         4d:a3:f5:42:a6:f1:e3:29:38:48:8f:6b:e8:35:46:26:3b:40:
         91:61:7f:cf:a1:ae:6c:c3:ac:bf:9c:e8:4c:51:aa:e3:12:9e:
         43:c6:e7:78:52:6e:08:1c:66:f4:f2:3d:04:0a:49:e1:d3:52:
         ec:45:1d:3c:84:fb:ae:16:1c:96:d0:3c:96:ea:e1:2e:91:3e:
         71:1b:33:c1:17:9f:88:06:d6:17:09:c3:72:4d:0e:2b:2f:25:
         a7:fe:f5:96:37:56:ab:89:72:ba:ff:15:02:12:88:10:72:7d:
         0d:58:26:b4:30:93:d4:67:04:87:c5:0b:c9:b4:91:f4:12:4f:
         ad:35:fe:c3:7d:56:fa:67:52:1c:b5:fc:81:4f:8d:32:70:db:
         3d:88:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org