Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa
File:                     323830333a376530303a3a2f33322d3634203d3e203238303236.roa (raw, json)
Hash identifier:          6SpxuKZ9aPL8vh89DWLmEJ8y0vgDnkIJrh+R5h7nNSQ=
Subject key identifier:   CD:10:83:1F:9A:C9:AB:D1:EE:A2:CD:73:E2:6A:C6:CE:D3:6F:1D:6B
Certificate issuer:       /CN=E4A504F09CB46473429BF10B505A60DB51837BE5
Certificate serial:       7594F14BB5D775B0B09431A9E866A80FB8C19B83
Authority key identifier: E4:A5:04:F0:9C:B4:64:73:42:9B:F1:0B:50:5A:60:DB:51:83:7B:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A504F09CB46473429BF10B505A60DB51837BE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa
Signing time:             Tue 05 Mar 2024 17:41:11 +0000
ROA not before:           Tue 05 Mar 2024 17:36:11 +0000
ROA not after:            Tue 04 Mar 2025 17:41:11 +0000
asID:                     28026
IP address blocks:        2803:7e00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/E4A504F09CB46473429BF10B505A60DB51837BE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/E4A504F09CB46473429BF10B505A60DB51837BE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A504F09CB46473429BF10B505A60DB51837BE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:f1:4b:b5:d7:75:b0:b0:94:31:a9:e8:66:a8:0f:b8:c1:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A504F09CB46473429BF10B505A60DB51837BE5
        Validity
            Not Before: Mar  5 17:36:11 2024 GMT
            Not After : Mar  4 17:41:11 2025 GMT
        Subject: CN=CD10831F9AC9ABD1EEA2CD73E26AC6CED36F1D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:ab:06:82:32:e7:e5:4d:85:1e:86:0c:44:
                    bf:e3:7d:8c:a1:2f:b3:30:15:aa:df:7e:fe:0b:7b:
                    0d:7b:4d:98:4d:89:cc:70:97:a9:01:51:7c:c3:90:
                    d8:31:b2:f2:5e:42:33:7d:24:9b:1d:d6:3e:41:8b:
                    84:5d:26:bb:c4:7e:e6:19:a0:c8:db:94:f6:53:97:
                    38:2c:39:dc:6a:d0:83:7a:92:43:cf:c3:79:61:a7:
                    85:5c:e3:a8:2c:ed:01:ef:21:dd:29:35:8a:bd:fe:
                    a9:14:62:6f:c3:d2:6b:51:63:69:4f:c1:14:f7:50:
                    a2:cc:ad:58:32:90:b4:0e:12:b8:e4:72:78:6e:8c:
                    89:24:fa:1a:af:95:75:e1:cb:c1:9d:84:4d:b0:ac:
                    79:0e:55:16:b7:76:d7:3c:a3:5e:e7:96:69:52:6f:
                    67:73:1d:02:ee:fd:83:c3:7a:b0:f4:a2:63:29:10:
                    43:89:a2:a0:7f:67:12:e9:90:a1:f8:c8:79:cc:d9:
                    70:db:ea:69:bc:da:7e:a3:6d:93:f4:83:09:48:e7:
                    3a:7a:5f:5f:1b:9a:3d:5f:be:ef:96:59:0c:e5:e4:
                    ec:65:96:c9:38:dd:f3:4e:38:bc:0e:d7:31:a5:02:
                    21:2d:72:5e:a5:6a:98:84:ca:7a:92:de:83:4d:cb:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:83:1F:9A:C9:AB:D1:EE:A2:CD:73:E2:6A:C6:CE:D3:6F:1D:6B
            X509v3 Authority Key Identifier:
                keyid:E4:A5:04:F0:9C:B4:64:73:42:9B:F1:0B:50:5A:60:DB:51:83:7B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/E4A504F09CB46473429BF10B505A60DB51837BE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A504F09CB46473429BF10B505A60DB51837BE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:07:18:00:09:37:83:8b:e0:6c:2c:b4:42:0c:71:e3:3e:a7:
         01:99:10:e4:c0:23:77:d7:b2:a2:c7:d3:5a:0a:7f:f2:4b:8a:
         2a:cf:a4:bc:fb:93:bd:6e:92:a0:50:75:dc:a0:34:62:75:65:
         6e:17:8b:3d:d1:5d:ce:88:db:e0:93:82:72:fc:3a:50:fe:b6:
         5c:0f:9c:fa:3b:43:83:8a:14:07:45:6c:b8:4a:1c:e6:94:bf:
         9b:61:3d:8a:96:6f:73:de:58:79:1f:4d:c3:3e:05:dd:e2:4f:
         18:cd:00:f2:21:b1:f0:7a:77:76:55:a7:35:13:d7:50:ed:28:
         20:a4:31:94:85:f2:f0:72:6f:e7:0f:42:99:18:df:ef:38:e9:
         12:ff:b7:b7:65:af:bc:84:0f:28:7f:ba:88:58:6b:b0:39:db:
         a6:90:71:36:7a:d9:8a:80:4c:9c:56:73:ec:51:ae:9f:90:fe:
         2e:22:47:29:e3:5b:aa:af:d0:db:cf:1c:31:49:7d:e7:b9:2f:
         4d:93:fc:58:0b:6a:8b:b6:36:b5:e3:3d:36:e5:bb:03:13:f5:
         44:50:1b:e5:b7:63:f7:72:a1:7f:d9:c2:c6:91:f7:d7:98:b9:
         e5:07:20:af:ec:b9:34:0b:ba:45:64:4f:77:8a:85:28:bf:5b:
         bc:5f:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org