Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a3a2f33322d3438203d3e20323635363935.roa
File:                     323830333a3963303a3a2f33322d3438203d3e20323635363935.roa (raw, json)
Hash identifier:          dJ5gufzGIiPiUipv7iVGdtH+SWX324nbyUaageiCOZs=
Subject key identifier:   5B:E5:9B:EE:79:B6:27:DC:78:D4:B6:DC:EE:B2:C5:13:C9:2F:D4:56
Certificate issuer:       /CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
Certificate serial:       01687562F97290DA418F3E13802A6D0CA9A332CF
Authority key identifier: 40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a3a2f33322d3438203d3e20323635363935.roa
Signing time:             Tue 05 Mar 2024 18:19:28 +0000
ROA not before:           Tue 05 Mar 2024 18:14:28 +0000
ROA not after:            Tue 04 Mar 2025 18:19:28 +0000
asID:                     265695
IP address blocks:        2803:9c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:75:62:f9:72:90:da:41:8f:3e:13:80:2a:6d:0c:a9:a3:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Validity
            Not Before: Mar  5 18:14:28 2024 GMT
            Not After : Mar  4 18:19:28 2025 GMT
        Subject: CN=5BE59BEE79B627DC78D4B6DCEEB2C513C92FD456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:9c:77:d8:30:e1:32:22:2d:35:55:18:9a:
                    b1:65:37:fe:c0:b9:26:cb:48:96:4d:1c:ac:9a:d2:
                    76:b4:8c:81:e0:25:7f:f1:2e:d1:27:b8:9b:a6:d9:
                    96:34:5c:54:be:b0:7e:47:68:49:8b:33:89:36:26:
                    af:64:ed:80:87:f3:e0:25:94:7c:fd:08:89:62:bd:
                    dd:9d:e5:2a:74:17:89:10:29:02:d2:54:09:8b:49:
                    e7:fa:c0:50:fa:b7:41:d5:b0:91:76:db:59:6a:d2:
                    a6:87:98:77:ad:8a:79:df:27:13:3c:2a:ca:15:b2:
                    f5:60:e7:e3:62:db:17:e4:e8:ff:7e:c2:f4:b2:25:
                    e1:b0:0f:5d:11:e9:c4:ad:c9:5e:56:d8:b3:14:61:
                    3a:42:1c:10:02:0c:f5:20:08:84:f3:ea:a5:34:1c:
                    35:4a:bc:34:e2:64:dc:a4:2f:fa:65:32:e7:13:b7:
                    27:32:74:6b:62:a5:4a:1a:37:c9:49:2a:f3:a4:9d:
                    71:5e:5e:3b:32:13:32:4a:69:67:b9:50:e2:64:cf:
                    39:a9:ef:1d:42:f0:26:59:e4:94:f0:4f:a7:c5:dc:
                    b2:56:7d:a0:7e:fa:76:26:ce:61:b1:8d:6d:c9:67:
                    9d:a8:d6:2b:e2:ce:ec:f0:ac:f5:ac:45:b6:6e:8f:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:9B:EE:79:B6:27:DC:78:D4:B6:DC:EE:B2:C5:13:C9:2F:D4:56
            X509v3 Authority Key Identifier:
                keyid:40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/323830333a3963303a3a2f33322d3438203d3e20323635363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:fe:74:b2:88:84:4f:73:98:5a:89:97:57:7d:ff:13:8d:
         24:cc:2e:73:60:b5:54:ed:dc:25:0b:8b:85:06:de:a2:ab:17:
         ea:b8:ed:32:c2:44:ab:dd:e1:81:fc:ab:c9:b9:0c:95:d9:4a:
         ac:35:fd:1b:07:5d:00:91:58:3c:58:2a:d3:19:57:65:b4:fc:
         d8:8a:ba:a0:b9:5d:61:6d:90:82:6e:ee:25:b5:c2:91:14:13:
         dd:1b:c2:e6:df:30:6f:0e:93:23:33:35:e0:23:ee:dc:d0:60:
         56:66:ce:1a:f6:91:09:53:88:9d:74:e8:a4:80:a7:95:77:41:
         64:6d:c8:3d:e2:11:d7:18:2b:b8:82:79:97:74:c7:3f:54:a0:
         3f:cf:ca:a8:2e:fb:4e:b7:ca:f1:3c:85:5b:7a:9b:70:2a:02:
         0f:d2:e5:a9:f4:22:b5:88:67:ac:e2:47:8b:53:23:92:32:21:
         10:17:90:e3:8d:48:43:11:09:9a:92:4f:62:e3:6c:f6:f8:9c:
         5d:a4:1f:7b:ab:e1:a9:ab:98:7e:90:5e:2d:7f:28:a9:32:77:
         89:4e:0c:e0:12:83:f9:55:e2:e7:d2:37:76:77:66:3a:d2:da:
         12:6d:30:fd:32:9d:7c:19:c2:2c:b9:2d:41:a6:1b:7e:1c:b1:
         2e:32:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:16 2024 by rpki-client on console-fra.rpki-client.org