Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa
File:                     323830333a623463303a3a2f33322d3438203d3e20323634373434.roa (raw, json)
Hash identifier:          HA3z2A745mzXKJCASMiWYzdu4iM3kcYSYHg/E1wS+/U=
Subject key identifier:   3B:9E:92:13:AE:90:AE:5A:34:7B:49:E2:8D:06:FB:A9:09:88:6D:94
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       7D427B82EB07C359CF6E3F7ECF4234C42D65BBB9
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa
Signing time:             Tue 05 Mar 2024 17:57:15 +0000
ROA not before:           Tue 05 Mar 2024 17:52:15 +0000
ROA not after:            Tue 04 Mar 2025 17:57:15 +0000
asID:                     264744
IP address blocks:        2803:b4c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:42:7b:82:eb:07:c3:59:cf:6e:3f:7e:cf:42:34:c4:2d:65:bb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Mar  5 17:52:15 2024 GMT
            Not After : Mar  4 17:57:15 2025 GMT
        Subject: CN=3B9E9213AE90AE5A347B49E28D06FBA909886D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:5e:d2:69:c8:22:43:d6:2e:e3:83:30:d5:
                    92:9e:d3:7d:33:7d:bc:cf:f5:0b:97:51:e2:3f:dc:
                    c8:9e:25:04:e9:2a:59:60:f2:e0:f7:39:ab:16:51:
                    c6:3c:ca:25:f8:a1:7c:12:fd:f1:bc:54:a6:27:cd:
                    c9:22:16:ac:0e:f7:e6:82:12:c8:e2:bf:09:3e:d0:
                    04:9f:f2:27:64:aa:6a:47:51:c8:ff:d9:ba:72:26:
                    ad:2d:03:e3:99:41:54:a9:6c:fe:28:34:46:d6:e6:
                    a9:08:6a:24:f4:86:df:a2:87:3a:d6:c4:39:fa:df:
                    b0:09:78:61:86:30:bd:05:e4:b0:e6:fa:a8:f4:1b:
                    88:7e:b9:18:8b:9e:e7:22:af:7b:24:59:86:c2:5d:
                    5d:77:34:c1:79:49:08:d4:6f:6e:b9:11:3c:a4:69:
                    3d:a2:c2:34:86:86:82:88:f3:bf:6d:e5:ff:7d:6d:
                    45:a6:c1:d3:80:7f:12:ee:55:35:71:a9:d5:80:2b:
                    e0:d7:4d:86:d3:79:b3:e1:b5:a9:7f:78:4d:90:a8:
                    a7:6f:d1:31:e8:ea:24:fd:cb:83:07:33:cf:32:3d:
                    0a:c8:34:13:eb:85:f2:ee:52:93:54:67:bb:b4:50:
                    b8:45:e4:41:4d:49:c9:bb:fd:76:4c:96:b3:11:7c:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9E:92:13:AE:90:AE:5A:34:7B:49:E2:8D:06:FB:A9:09:88:6D:94
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:d3:2c:3d:b7:e4:21:f0:4e:f8:a3:44:79:c9:89:70:41:
         23:b8:c3:bd:e7:ec:47:d4:83:4b:16:35:d5:b7:e2:2c:67:e0:
         3f:17:ca:4b:e0:aa:44:00:03:cf:6f:6e:2b:36:6c:3f:e5:64:
         0b:43:b8:64:72:03:1f:3f:25:91:6d:00:7d:c4:2a:e3:6b:18:
         ec:31:62:52:3e:b6:ad:c1:75:3c:bb:2c:53:15:89:74:98:8e:
         29:3b:51:32:0a:ba:42:e0:a6:be:ae:f3:7d:7d:1e:1a:4b:30:
         3e:7d:f7:05:1f:41:73:7b:c5:4e:17:5c:ce:7e:73:85:93:ca:
         01:87:63:5e:7c:b3:b7:e3:e5:94:80:0e:90:5b:dc:53:a2:ff:
         21:1c:95:4f:9f:08:df:62:df:96:43:df:be:bc:cf:4a:6a:b3:
         f5:61:00:d7:72:07:3a:79:a3:04:9e:92:2e:de:a8:78:17:ad:
         96:f1:57:5f:02:cf:a5:30:09:c2:34:3a:02:b9:6d:48:23:d8:
         e0:d8:2b:5e:e8:97:47:dd:33:4a:ce:42:77:c7:33:8b:6d:cd:
         e5:d4:82:eb:e7:28:d4:b3:fe:35:3f:71:00:a1:99:73:85:90:
         78:79:02:42:32:68:b8:ce:00:88:7e:1b:4e:c0:b9:4f:8f:41:
         a7:d0:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org