Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
File:                     323830333a323832303a3a2f33322d3332203d3e20323635383035.roa (raw, json)
Hash identifier:          4NpwxYiWaNANPjlIKezm5AyXVGAPvLe08dvddcityFg=
Subject key identifier:   64:D2:28:01:8F:C1:9E:9C:33:05:00:33:1C:4C:0C:50:51:21:91:55
Certificate issuer:       /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
Certificate serial:       46F5BAEA025938E05EDC19E35427DAE0AF6FA279
Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
Signing time:             Tue 05 Mar 2024 17:59:54 +0000
ROA not before:           Tue 05 Mar 2024 17:54:54 +0000
ROA not after:            Tue 04 Mar 2025 17:59:54 +0000
asID:                     265805
IP address blocks:        2803:2820::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:ba:ea:02:59:38:e0:5e:dc:19:e3:54:27:da:e0:af:6f:a2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
        Validity
            Not Before: Mar  5 17:54:54 2024 GMT
            Not After : Mar  4 17:59:54 2025 GMT
        Subject: CN=64D228018FC19E9C330500331C4C0C5051219155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:17:33:55:e8:be:8d:44:84:f4:04:41:ff:
                    0a:ec:09:a5:38:7a:26:02:6f:6b:70:df:2b:95:65:
                    58:c3:1c:fb:bc:04:92:e2:c4:2b:bb:68:df:8d:76:
                    64:3f:bc:19:f1:eb:ad:f4:4d:e4:73:fc:52:e4:f9:
                    f3:6b:00:d0:fa:a2:b7:c0:3a:d6:a6:a0:ad:96:2c:
                    e8:2b:4d:c4:12:fe:e7:4c:18:c3:19:88:45:35:e1:
                    0e:5a:a8:f8:ac:05:a8:f2:1e:1d:7f:31:58:5d:5d:
                    1e:5b:30:85:78:d0:c9:ad:c5:8f:5c:cb:94:71:ae:
                    92:dd:d9:5a:5a:7e:0e:a4:a1:42:16:24:a9:ab:b4:
                    4a:c9:0f:de:37:ef:5e:64:f4:c5:a8:b7:13:51:07:
                    79:e3:16:cd:a6:6a:bf:3e:7e:ed:93:ad:14:0f:2f:
                    df:6f:2e:37:09:a3:a3:bb:d7:ec:68:50:76:d3:80:
                    aa:6a:ac:18:2f:c7:5e:27:ef:7a:05:d9:61:1c:4f:
                    1e:2c:eb:29:7e:6b:09:aa:b8:05:56:f0:05:b3:51:
                    c0:f7:f1:c1:d0:c9:a7:67:1a:3b:d4:3d:18:1e:ac:
                    3c:e5:7c:a3:ed:b6:4a:a8:51:ba:34:24:be:98:6d:
                    7a:c5:2b:c6:28:35:36:43:1f:f5:e9:e9:ff:2c:a9:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:28:01:8F:C1:9E:9C:33:05:00:33:1C:4C:0C:50:51:21:91:55
            X509v3 Authority Key Identifier:
                keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2820::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:3d:18:6b:eb:e1:15:7b:a8:80:49:46:5c:6b:17:da:d7:
         5e:28:54:6d:12:fb:a0:2c:1c:cb:18:34:9a:02:da:6e:c4:a2:
         77:82:22:a7:d2:80:e7:f0:9c:b6:35:a7:7e:1d:ea:ba:65:8f:
         fc:57:87:1a:28:1a:23:e3:6e:f3:35:3c:06:e9:59:b3:25:e9:
         93:47:2f:7e:b9:b5:67:b2:9e:89:ba:44:84:73:85:9e:a9:bc:
         07:22:50:9e:94:5a:4c:38:f1:06:5a:0e:04:2c:5d:c7:35:0f:
         55:36:e0:87:0b:c9:c5:29:f8:69:51:96:b5:5b:94:47:59:75:
         e9:09:c0:fe:4f:0e:79:ba:18:03:56:73:a5:a5:bd:da:fd:c5:
         77:34:07:aa:de:2c:02:82:50:ea:56:fd:4a:a0:c2:ee:b1:4b:
         fb:29:e2:49:f6:79:df:cf:b3:a1:3e:70:2d:9e:d6:46:53:7a:
         fa:d8:b3:37:fc:7b:94:5d:96:37:bf:70:93:ab:c9:31:88:b2:
         2a:e9:b1:bd:38:58:5e:ed:91:3a:29:77:45:bd:8e:eb:f7:23:
         c7:4c:e2:7a:23:0b:32:d0:c9:ac:d8:f1:af:dd:fd:53:93:6a:
         26:c5:cd:ab:28:c8:4b:24:cd:2d:21:6e:1c:23:b2:9e:5b:42:
         15:9b:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org