Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/323830333a333634303a3a2f33322d3332203d3e20323634373530.roa
File:                     323830333a333634303a3a2f33322d3332203d3e20323634373530.roa (raw, json)
Hash identifier:          ZiQXpvKsNKw0odAWcBsGMie1GDPvU2Awj4NXLtyfAC0=
Subject key identifier:   BF:1F:91:7D:C1:5A:85:67:C2:77:4C:F9:9C:21:93:35:C4:4F:E1:1C
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       5229614743D177FBFDE55E51AB8A263D1B783CAD
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/323830333a333634303a3a2f33322d3332203d3e20323634373530.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     264750
IP address blocks:        2803:3640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:61:47:43:d1:77:fb:fd:e5:5e:51:ab:8a:26:3d:1b:78:3c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=BF1F917DC15A8567C2774CF99C219335C44FE11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:f4:74:dc:0c:df:85:0b:3b:18:b2:ef:cb:
                    b7:6f:f3:9f:a6:36:51:f3:8e:59:7e:4a:ce:a5:3c:
                    6a:2e:e4:c9:06:fd:f7:99:05:f5:29:e7:20:ea:d8:
                    7c:b8:da:bc:f4:93:75:1c:5c:fd:2c:13:b7:0a:10:
                    a7:1e:70:21:fa:3c:1c:59:b9:54:cb:3b:de:6d:38:
                    61:b6:03:e1:c3:24:a6:f7:e4:30:06:a4:6a:9a:cf:
                    bd:9a:3b:b3:3b:a2:79:1f:ae:41:ea:0b:1e:eb:4b:
                    83:37:6b:fd:4e:9c:2a:52:81:40:08:16:61:6c:d7:
                    16:82:56:2b:66:fe:2f:ed:80:63:b4:6f:74:ee:73:
                    66:fc:9a:52:8c:9d:ca:dd:ad:7b:4a:dd:3c:2a:dd:
                    25:ac:65:1d:28:cd:59:bf:62:91:67:ca:ad:53:25:
                    97:65:e7:68:60:3e:f5:fd:a3:d6:51:68:2a:d8:5a:
                    98:6a:97:63:69:66:d2:a9:0b:07:ca:56:42:1a:7c:
                    53:fe:df:a4:67:03:02:c8:27:48:60:b1:52:64:93:
                    e4:c9:12:c6:7a:41:ae:12:b6:44:e6:e4:be:d5:2d:
                    4d:3e:35:25:ae:1a:a8:13:53:14:3e:07:27:6d:fc:
                    b7:f0:a4:b1:2d:05:ac:3e:cf:22:db:b8:22:e9:5c:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1F:91:7D:C1:5A:85:67:C2:77:4C:F9:9C:21:93:35:C4:4F:E1:1C
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/323830333a333634303a3a2f33322d3332203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3640::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:91:fc:a6:d9:59:30:ff:ec:4a:23:a7:fa:17:60:23:71:
         de:77:6d:78:69:4f:ce:9c:ff:3b:43:eb:f3:72:87:60:82:52:
         49:53:28:52:61:8f:b5:60:2d:fd:63:97:03:48:48:87:b9:27:
         75:c5:ef:2b:66:6d:96:0b:2b:2b:84:3d:35:c4:11:e0:a5:1f:
         d8:c8:31:7b:2b:73:50:e5:26:67:6f:03:27:84:6c:22:9f:77:
         6f:50:46:7b:54:59:a9:da:db:66:46:8b:df:6e:52:4e:29:da:
         a8:03:4c:23:29:04:c4:e1:01:e9:dc:3d:db:f6:54:b5:c3:dc:
         9c:9b:7b:c6:d8:88:d8:77:d8:f9:5d:78:a6:f5:12:0d:5d:09:
         c0:07:26:26:de:ce:b3:1c:da:95:65:73:12:0c:4b:45:3d:0d:
         19:8e:9a:e4:04:22:03:5a:47:e2:f2:80:52:83:5a:d7:e7:d0:
         0a:13:f1:f7:6d:ed:e3:1a:19:6a:fb:29:72:b6:e4:ff:f0:4d:
         cc:bb:23:4c:ac:c9:6d:fb:f8:00:a0:4a:d5:ca:1d:30:5e:03:
         3d:59:02:f4:a0:f1:2a:45:d4:7d:88:e7:53:64:fc:85:57:bd:
         83:b5:e2:24:9f:4c:75:1b:29:89:41:89:35:84:66:e3:09:ad:
         90:ec:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org