Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/323830333a653835303a3a2f33322d3332203d3e203634313535.roa
File:                     323830333a653835303a3a2f33322d3332203d3e203634313535.roa (raw, json)
Hash identifier:          GN4ZU5mk3hMmUudooZgc2cYNRVLHGc02J+zvKd+u3UY=
Subject key identifier:   40:ED:CA:71:D1:4B:16:5A:63:9D:FA:A4:8C:D2:BF:17:D2:D0:B0:78
Certificate issuer:       /CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
Certificate serial:       19670565EED22EF39AAE5469622828459D38D4DB
Authority key identifier: BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/323830333a653835303a3a2f33322d3332203d3e203634313535.roa
Signing time:             Tue 05 Mar 2024 17:41:21 +0000
ROA not before:           Tue 05 Mar 2024 17:36:21 +0000
ROA not after:            Tue 04 Mar 2025 17:41:21 +0000
asID:                     64155
IP address blocks:        2803:e850::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:05:65:ee:d2:2e:f3:9a:ae:54:69:62:28:28:45:9d:38:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
        Validity
            Not Before: Mar  5 17:36:21 2024 GMT
            Not After : Mar  4 17:41:21 2025 GMT
        Subject: CN=40EDCA71D14B165A639DFAA48CD2BF17D2D0B078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:ac:b3:f3:52:1c:37:8e:a3:a7:fb:4e:20:
                    72:59:cd:52:85:f9:cc:58:d4:63:bc:04:d7:e4:c1:
                    e1:38:78:06:b6:8a:c1:1a:fc:13:f4:36:93:9e:e7:
                    74:76:05:86:70:a9:ff:4d:db:df:8f:be:4a:a1:06:
                    86:b9:11:e0:22:63:7a:ff:f3:e5:7f:7d:73:0d:c8:
                    7a:72:16:f8:4e:c9:f4:85:a4:38:59:8b:26:c2:8c:
                    eb:fb:d7:69:03:d7:6b:ab:e3:9f:63:8b:ba:e5:fd:
                    a9:4c:50:7f:08:56:d2:94:29:2f:c6:6d:d3:6d:1f:
                    1d:34:ca:20:6c:a4:99:83:85:be:16:de:d7:e2:80:
                    57:f6:f6:cf:a0:45:09:c2:1c:3d:15:cb:c5:87:32:
                    31:25:90:a8:b1:a3:9f:c9:b9:f5:eb:f0:59:77:1b:
                    6c:af:f6:be:62:15:89:16:24:86:ce:f6:07:b4:4e:
                    7f:bf:c0:ed:85:05:d4:53:3f:cf:42:d7:b1:94:e1:
                    7b:a5:c6:8b:31:ce:9f:a2:55:c1:ec:00:19:b3:8f:
                    3b:03:93:4e:4f:57:a0:bd:ca:03:db:b0:c9:ac:2f:
                    2f:2f:09:39:9d:98:1f:6e:33:4e:51:40:3c:ee:22:
                    1e:a0:6a:3f:f5:59:b0:5b:41:ad:7a:c6:f6:fc:b8:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:CA:71:D1:4B:16:5A:63:9D:FA:A4:8C:D2:BF:17:D2:D0:B0:78
            X509v3 Authority Key Identifier:
                keyid:BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/323830333a653835303a3a2f33322d3332203d3e203634313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e850::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:d1:80:c6:54:33:3e:3d:71:6a:1c:62:6f:04:99:15:96:
         41:e4:95:a5:c7:a0:b0:65:ba:9a:11:e8:a6:a6:d4:34:cc:c1:
         58:51:59:a1:ae:e5:cd:9b:6b:87:e0:3b:e8:04:e6:d0:aa:a5:
         09:d1:1d:42:08:67:6a:9c:19:93:44:e4:70:0e:71:c3:61:67:
         75:f3:e4:c5:20:38:7d:ce:c6:43:55:8e:ff:a5:e7:bd:1b:a0:
         91:50:cb:72:80:d3:5a:78:78:2e:0e:95:de:c8:a4:51:c7:4c:
         66:63:82:e0:99:32:8a:0e:0e:6f:06:ef:cb:79:06:8e:53:0c:
         9b:64:52:c8:cd:07:32:51:f0:60:66:d7:94:fb:18:9c:4a:30:
         4b:c5:db:a1:d8:28:6d:b0:ea:56:38:47:48:f9:e2:af:d9:65:
         3f:b7:56:0b:bd:64:ca:57:7d:ec:e0:12:a6:1e:10:2a:6c:91:
         c0:36:bc:11:ac:d5:a3:e2:bd:ee:76:04:89:33:ab:58:d3:f5:
         a2:15:3b:b9:87:fc:7d:55:e9:3e:7c:70:0a:82:ea:55:16:f0:
         bf:12:fe:63:32:47:b0:c5:7a:28:37:f8:84:a1:b5:42:3f:48:
         59:b9:83:58:9e:d4:ae:54:75:6c:5b:f5:ec:b1:10:06:d5:0d:
         f9:d5:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org