Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/323830333a373034303a3a2f33322d3332203d3e20323633373534.roa
File:                     323830333a373034303a3a2f33322d3332203d3e20323633373534.roa (raw, json)
Hash identifier:          JTemk1427B+7RkC6O9XQ660ksONRbgbKeB0HpJ1ogug=
Subject key identifier:   ED:53:7F:CB:A6:75:18:15:29:22:1C:0E:AD:74:81:B8:2B:E9:8A:52
Certificate issuer:       /CN=57696D227BF558822356A541E87E2F70E2A214E2
Certificate serial:       9B8F643FCFDAFAECFFA6D6180A805FBEE50E73
Authority key identifier: 57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/323830333a373034303a3a2f33322d3332203d3e20323633373534.roa
Signing time:             Tue 05 Mar 2024 18:19:52 +0000
ROA not before:           Tue 05 Mar 2024 18:14:52 +0000
ROA not after:            Tue 04 Mar 2025 18:19:52 +0000
asID:                     263754
IP address blocks:        2803:7040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:8f:64:3f:cf:da:fa:ec:ff:a6:d6:18:0a:80:5f:be:e5:0e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57696D227BF558822356A541E87E2F70E2A214E2
        Validity
            Not Before: Mar  5 18:14:52 2024 GMT
            Not After : Mar  4 18:19:52 2025 GMT
        Subject: CN=ED537FCBA675181529221C0EAD7481B82BE98A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:13:bf:cc:d7:9c:28:40:8d:d1:52:71:f4:
                    a8:22:a0:84:f0:19:e0:50:05:36:10:7d:db:9d:fc:
                    20:25:76:54:41:08:f1:ee:b6:a3:ff:4f:fc:42:7b:
                    b8:7b:89:52:86:90:b1:86:64:df:56:6f:e5:d9:b6:
                    8b:7d:ac:2c:fc:94:b0:35:78:1a:f0:77:ae:1e:9f:
                    82:2a:ba:2c:da:e4:39:f0:96:d2:7e:13:bc:ec:09:
                    fc:4c:02:1a:dc:39:71:2b:26:34:52:e6:41:77:c4:
                    63:a9:70:de:8e:21:d1:19:dc:d0:da:94:84:08:bc:
                    ba:9d:71:46:8f:7a:1c:79:4d:00:de:3c:b2:8c:9d:
                    b4:29:d0:f3:6c:68:16:68:b4:b2:7c:06:55:e7:fb:
                    de:82:06:eb:bd:ad:58:98:ed:51:52:86:fe:d3:96:
                    d6:9f:af:b6:ed:18:3c:68:2f:4e:30:c3:80:4a:24:
                    f7:96:16:0e:aa:6e:29:f9:be:8d:0d:4d:d5:1f:02:
                    4e:3e:7f:b2:44:b7:33:40:75:11:87:9e:f0:3a:d4:
                    a5:7a:91:8b:2d:d5:78:74:01:c6:76:dd:0c:ab:32:
                    ea:b0:17:01:a8:26:f5:ee:ed:e3:19:68:15:13:c3:
                    ae:07:5a:bd:13:1b:4c:ec:86:d7:20:a7:c1:05:ea:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:7F:CB:A6:75:18:15:29:22:1C:0E:AD:74:81:B8:2B:E9:8A:52
            X509v3 Authority Key Identifier:
                keyid:57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/323830333a373034303a3a2f33322d3332203d3e20323633373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:a6:62:69:9b:17:3a:66:78:5b:40:16:0a:f9:36:a4:4f:
         42:f6:f4:7b:12:36:e8:23:0c:11:b9:3f:4d:8f:54:b0:2b:c7:
         b8:51:f0:f0:6e:50:ba:d5:73:f2:ef:58:71:41:6a:82:dc:97:
         04:08:29:bd:49:44:3f:a6:b0:91:0b:30:82:35:2b:71:19:6a:
         e8:37:3b:61:78:a1:61:67:f7:33:52:aa:f1:e8:26:e3:ea:ff:
         17:41:7e:8f:f1:5e:1a:79:3d:08:ec:d5:13:9a:af:b6:5f:62:
         65:27:0c:0f:88:d4:86:9c:c9:3e:31:3f:b4:47:6e:b9:74:98:
         f2:0a:08:60:cd:f0:84:ac:7e:82:a5:71:0b:2f:19:3e:bf:a0:
         9d:3d:c8:a4:49:5f:af:95:dc:4a:91:d9:03:70:a6:5e:98:c3:
         cf:20:28:43:d7:49:e3:39:5c:94:c1:2e:d9:e6:df:19:25:0f:
         03:28:2e:4e:16:68:bc:05:1e:b8:93:dc:61:76:b1:40:85:3f:
         ed:8e:b7:59:3a:48:0e:79:24:50:e4:da:50:a2:3b:47:76:e2:
         d9:fe:0f:2b:70:82:a9:e7:57:c4:56:13:fe:31:10:bb:d4:de:
         66:69:64:4f:54:6b:39:9e:9c:d6:11:16:1c:18:1c:3f:b1:b2:
         35:f1:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org