Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa
File:                     323830333a656434303a3a2f33322d3332203d3e20323634363736.roa (raw, json)
Hash identifier:          v/dXWITkIzOcGmBOsF9n2CfMsnBoBVa8EKKhqXAaXgc=
Subject key identifier:   CE:7A:96:14:44:6C:BA:EE:E3:C3:92:26:78:4A:D8:7F:61:96:A7:61
Certificate issuer:       /CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
Certificate serial:       7ED869FEE4083BDC34F6CDE27F84FD76E9FE403D
Authority key identifier: 89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa
Signing time:             Tue 05 Mar 2024 18:11:38 +0000
ROA not before:           Tue 05 Mar 2024 18:06:38 +0000
ROA not after:            Tue 04 Mar 2025 18:11:38 +0000
asID:                     264676
IP address blocks:        2803:ed40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:69:fe:e4:08:3b:dc:34:f6:cd:e2:7f:84:fd:76:e9:fe:40:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
        Validity
            Not Before: Mar  5 18:06:38 2024 GMT
            Not After : Mar  4 18:11:38 2025 GMT
        Subject: CN=CE7A9614446CBAEEE3C39226784AD87F6196A761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:7b:d5:9f:fd:10:46:c0:c2:59:cb:99:9f:
                    97:55:f2:c3:0c:78:37:3e:55:ef:8f:b1:e4:87:bd:
                    79:d5:41:60:24:e1:c7:b0:cb:41:ef:bf:ea:ae:05:
                    05:ce:7e:73:87:ed:14:f5:fa:ad:2a:1c:59:bd:a6:
                    b5:e0:5d:9e:36:ea:d0:84:c7:7c:02:f2:ef:30:03:
                    64:57:80:1d:e4:5a:cf:1b:b1:28:58:5d:5a:22:6a:
                    ec:75:9f:f4:f6:42:1b:5a:ef:14:a1:32:e5:88:fc:
                    00:ff:18:c8:95:49:b9:5b:87:e3:53:50:a7:57:9b:
                    0c:9d:01:d5:89:bc:30:f5:08:c7:d0:1c:a9:03:04:
                    fc:f6:81:9c:e9:41:ae:d4:66:d2:ed:fb:cb:0c:34:
                    f4:42:0e:8d:f8:6a:72:8f:16:10:65:46:cb:1a:80:
                    17:4f:98:d5:a5:02:99:c1:e6:c4:d2:f4:8a:dd:be:
                    1b:3d:bf:a2:42:57:c4:5d:f4:12:6c:46:77:f0:e7:
                    61:c6:0d:e8:12:be:b7:83:7b:ce:47:e2:00:fd:dd:
                    73:e0:ab:70:2c:cf:71:79:f6:bd:33:9e:4f:a4:9c:
                    96:c9:84:f2:fb:86:0b:ba:0b:f9:5f:68:e4:39:fa:
                    12:e2:56:53:6a:ca:74:62:d4:8c:d4:15:17:2c:1b:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:96:14:44:6C:BA:EE:E3:C3:92:26:78:4A:D8:7F:61:96:A7:61
            X509v3 Authority Key Identifier:
                keyid:89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/323830333a656434303a3a2f33322d3332203d3e20323634363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:66:21:96:d9:05:d6:17:e2:5b:e4:3f:dc:5f:c0:12:09:db:
         bf:e5:b7:9a:13:ce:a3:61:0f:d5:1f:99:3f:20:24:ee:93:09:
         b3:9a:63:31:24:cf:6e:51:33:68:3a:d8:da:04:19:b7:aa:e6:
         da:a5:4f:bb:e2:0e:23:21:13:ee:4b:06:3d:a0:de:2a:01:77:
         4d:ec:4d:76:ba:45:e9:e3:cb:4c:fc:25:cd:0a:6e:49:5a:0d:
         18:15:57:d7:ab:6b:94:ea:30:f6:7e:fd:d6:2c:f8:cd:35:e0:
         24:b7:b9:cf:d4:62:2f:a8:86:c2:aa:35:76:e0:89:d7:cd:b1:
         4d:0d:6c:52:80:1d:1a:bb:79:c3:47:be:16:55:f0:20:5b:4e:
         92:27:6e:47:e2:a0:6d:99:62:37:25:bf:ea:d6:0f:e6:dd:5a:
         6c:dc:01:03:e0:0d:46:d0:f2:14:64:2d:83:a5:e7:fc:cc:45:
         99:79:e0:3d:9b:8f:cc:b9:cd:fd:84:45:32:e9:b3:12:e6:3a:
         6e:af:df:8d:72:ad:49:72:1c:94:44:f8:09:17:9e:ac:af:5d:
         79:db:08:64:b9:cb:ff:8b:b1:fc:a1:ad:70:37:35:80:9d:4e:
         78:86:42:97:b4:78:48:9e:1f:8e:a9:47:dd:6f:57:8b:3a:ac:
         f1:ac:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org