Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa
File:                     323830333a333865303a3a2f33322d3332203d3e20323639383830.roa (raw, json)
Hash identifier:          NvqWjzOHUbMUspR1NntP0JSzWg/y8S952gy9SJLA8PE=
Subject key identifier:   D3:6E:FC:8E:EA:02:15:30:72:1A:B4:D7:86:8C:1E:DA:B9:38:F5:35
Certificate issuer:       /CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
Certificate serial:       53A5CEFF742DD9E0FA9BCF6D51DEAD290DD25B6F
Authority key identifier: AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa
Signing time:             Tue 05 Mar 2024 18:19:46 +0000
ROA not before:           Tue 05 Mar 2024 18:14:46 +0000
ROA not after:            Tue 04 Mar 2025 18:19:46 +0000
asID:                     269880
IP address blocks:        2803:38e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:ce:ff:74:2d:d9:e0:fa:9b:cf:6d:51:de:ad:29:0d:d2:5b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
        Validity
            Not Before: Mar  5 18:14:46 2024 GMT
            Not After : Mar  4 18:19:46 2025 GMT
        Subject: CN=D36EFC8EEA021530721AB4D7868C1EDAB938F535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:8f:5e:01:f1:8e:e3:dd:e1:2d:c5:67:89:
                    25:8f:78:77:60:7d:1a:fd:7e:91:3f:5d:0c:72:5f:
                    ac:c1:b7:ca:fd:ca:3d:55:8c:38:40:94:92:ef:bb:
                    6b:59:50:4a:28:fc:22:d1:b6:9f:0c:dc:0e:74:99:
                    66:31:95:38:4e:78:c5:64:83:aa:a4:73:f1:76:a9:
                    df:71:de:0f:94:4a:c9:a8:e8:f7:26:19:3d:38:79:
                    99:0d:a8:4e:7a:6e:00:78:c9:f3:a5:1f:43:f7:ba:
                    e8:a5:b6:ae:55:fd:47:75:c7:56:b0:15:e0:03:f1:
                    a7:e7:3a:58:24:68:20:ea:5c:e8:53:98:10:46:b6:
                    86:6e:53:57:d7:64:3f:61:18:8c:67:14:f3:66:16:
                    8f:2e:db:fa:cd:94:46:a6:da:8e:3f:40:8b:7b:18:
                    12:35:cd:9e:b9:22:14:f9:c9:f8:87:37:09:dc:21:
                    18:d1:fd:c1:d9:f6:dc:0c:3c:65:e5:4d:cb:74:cf:
                    5f:f2:aa:94:95:52:44:b1:25:7c:8c:bd:1c:06:c6:
                    96:38:72:f8:21:a8:a1:f3:c5:36:81:cd:f0:b0:f5:
                    4a:95:e2:ab:10:4a:7b:3d:54:fb:8f:e2:00:1d:19:
                    14:3f:9a:42:f2:5d:02:37:cb:71:82:10:de:bd:e8:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:FC:8E:EA:02:15:30:72:1A:B4:D7:86:8C:1E:DA:B9:38:F5:35
            X509v3 Authority Key Identifier:
                keyid:AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/323830333a333865303a3a2f33322d3332203d3e20323639383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:38e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:07:5e:0b:16:68:c7:9f:dd:6f:e8:ab:36:ba:1f:8e:a4:
         52:e8:a4:b2:c1:f6:87:f6:22:bd:51:ca:78:8c:83:3d:31:de:
         12:ee:58:c2:36:17:5c:3e:56:09:14:76:62:fd:ad:bb:33:87:
         92:6a:00:86:04:2d:b0:32:d0:e4:12:d1:4b:dd:58:d0:b0:b2:
         66:cb:9b:07:f8:17:b7:dd:5b:ef:22:22:e1:ed:ce:39:a4:82:
         3e:5e:78:6f:4d:0c:be:ea:6b:a3:4f:b1:34:da:2b:d2:dc:94:
         26:1c:af:08:d4:75:90:82:4a:56:2f:f1:3f:fa:16:25:22:31:
         71:ac:92:37:58:c3:c8:29:f4:94:26:4a:73:12:09:a8:80:3d:
         aa:68:1b:0b:05:87:b1:f1:8b:21:83:9f:f8:60:a2:f5:aa:81:
         11:17:36:35:66:78:5c:59:98:51:1d:8a:88:ed:2d:3b:4b:0f:
         1f:e3:7b:f2:77:7f:17:2c:75:69:2f:2c:ea:ca:7e:63:ac:07:
         e4:d3:df:35:14:1b:44:b3:c0:54:fe:f5:df:ee:ff:f4:90:d1:
         22:60:95:a0:f9:a0:0b:c5:44:bd:26:05:76:11:08:11:09:2a:
         53:15:cd:bd:07:ad:19:b3:d0:dc:9c:a1:62:21:25:82:d0:6b:
         9c:37:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org