Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/323830333a666230303a3a2f33322d3332203d3e20323632323438.roa
File:                     323830333a666230303a3a2f33322d3332203d3e20323632323438.roa (raw, json)
Hash identifier:          UfuwSBFxHeicCBRS4vh1kKnajTUijxKz563f4/IPLOQ=
Subject key identifier:   EA:00:4A:BD:4E:8E:5B:B1:25:26:A1:71:D9:5A:31:8A:5B:29:8A:42
Certificate issuer:       /CN=F229131AE00917D21FA8649A03866823F3A6B161
Certificate serial:       737428A6ED84A0B8284B3486B2923E1C9F846412
Authority key identifier: F2:29:13:1A:E0:09:17:D2:1F:A8:64:9A:03:86:68:23:F3:A6:B1:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/323830333a666230303a3a2f33322d3332203d3e20323632323438.roa
Signing time:             Tue 05 Mar 2024 18:03:38 +0000
ROA not before:           Tue 05 Mar 2024 17:58:38 +0000
ROA not after:            Tue 04 Mar 2025 18:03:38 +0000
asID:                     262248
IP address blocks:        2803:fb00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.crl
                          rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:74:28:a6:ed:84:a0:b8:28:4b:34:86:b2:92:3e:1c:9f:84:64:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F229131AE00917D21FA8649A03866823F3A6B161
        Validity
            Not Before: Mar  5 17:58:38 2024 GMT
            Not After : Mar  4 18:03:38 2025 GMT
        Subject: CN=EA004ABD4E8E5BB12526A171D95A318A5B298A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:b9:ac:ec:46:e1:6e:ec:1b:1d:ec:35:e2:
                    1b:55:f0:61:a8:f5:e4:d5:99:26:5f:27:5b:06:31:
                    74:c9:43:dd:a3:29:a9:20:5e:ff:06:f2:39:33:ce:
                    a5:b7:e9:6a:aa:3c:36:8a:78:26:a9:9d:1a:ec:83:
                    a0:88:c7:ef:0f:08:b6:95:dc:58:f3:dc:5e:d9:1d:
                    0d:13:39:41:4e:e8:af:45:b7:ca:ed:5d:35:8d:10:
                    6b:b4:bf:7e:3b:be:f6:c1:cf:b9:4e:d9:22:96:93:
                    b7:fb:36:99:fe:87:82:51:5e:33:30:00:c3:30:2d:
                    26:dd:10:a1:4d:05:f2:c0:57:af:4c:65:2f:32:97:
                    fa:4b:f5:3a:0f:2d:37:a3:c6:77:7d:69:f6:43:58:
                    24:51:cd:c2:3a:3c:14:f1:34:80:24:43:35:4d:5b:
                    fc:9f:7a:93:07:65:2d:64:02:9f:20:4b:7d:9f:ad:
                    df:a2:de:28:ca:f1:6c:9b:e9:e5:0c:45:97:52:74:
                    69:11:0d:19:24:81:a9:1f:38:1e:c2:2e:b7:15:5f:
                    6a:4d:9f:f6:ca:f2:ef:84:cb:8a:8b:b1:3f:cc:df:
                    a9:4d:1c:9a:ae:3a:c4:f9:27:28:39:6e:7d:19:0c:
                    e9:99:d1:55:64:94:45:46:d0:69:88:d3:ae:75:a9:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:00:4A:BD:4E:8E:5B:B1:25:26:A1:71:D9:5A:31:8A:5B:29:8A:42
            X509v3 Authority Key Identifier:
                keyid:F2:29:13:1A:E0:09:17:D2:1F:A8:64:9A:03:86:68:23:F3:A6:B1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/F229131AE00917D21FA8649A03866823F3A6B161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F229131AE00917D21FA8649A03866823F3A6B161.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158E8DC858B5A14C1B425D7357236AC6562878826B518095F28061692C1D96F9/0/323830333a666230303a3a2f33322d3332203d3e20323632323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:d3:94:dd:72:23:6e:c1:8c:53:08:a9:de:f4:b0:df:a6:
         06:b5:53:ba:9f:ce:47:7c:45:25:94:fd:52:b6:27:f8:be:2e:
         8d:dc:05:d2:73:53:3f:2c:e5:35:3b:fc:34:c6:40:e8:d5:29:
         bc:96:a4:4d:6b:66:86:d2:5d:0a:f0:0f:3e:f7:59:06:4a:ec:
         d4:ae:dd:bd:35:7e:c5:e6:65:dd:db:c6:87:55:cf:29:86:db:
         7b:2c:a6:74:02:51:db:90:3b:2c:a9:8c:c3:1a:bb:d6:49:64:
         6c:1e:7d:2a:1d:d1:00:ca:a5:57:47:2c:19:43:c3:03:53:57:
         11:9b:9f:5b:83:8a:44:6a:92:48:8e:92:40:ee:85:38:0f:d1:
         f4:14:e2:e2:9a:57:48:1d:cb:d7:c9:35:45:e2:d5:65:7e:29:
         5e:2b:37:7e:d3:4d:99:a4:52:d0:5a:04:be:d9:21:ea:ff:0a:
         22:a5:f8:87:d6:64:11:92:fd:e5:65:e1:a8:14:68:96:4a:a2:
         55:e9:be:e7:13:70:70:e3:e3:3f:9c:ce:7f:f9:2e:18:e3:4a:
         ae:78:49:73:8b:9a:38:2e:d2:ff:39:90:85:af:db:4b:5b:c8:
         73:43:91:ec:99:d1:68:db:a1:63:2b:f0:af:1b:38:a7:3f:f6:
         9c:5b:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:00 2024 by rpki-client on console-ams.rpki-client.org