Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/323830333a346538303a3a2f33322d3438203d3e20323633323332.roa
File:                     323830333a346538303a3a2f33322d3438203d3e20323633323332.roa (raw, json)
Hash identifier:          kW9GV2KM5M/PWIPSPK34K4P6f9sR3tlV/ikdlAd7VpY=
Subject key identifier:   C2:FD:CE:E0:70:2D:DE:77:7F:28:CC:4B:6A:BF:3B:4B:9A:E5:85:6E
Certificate issuer:       /CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
Certificate serial:       0B7D8A5D4E3865110759BA6B8938BA6B68D0B785
Authority key identifier: DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/323830333a346538303a3a2f33322d3438203d3e20323633323332.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     263232
IP address blocks:        2803:4e80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:8a:5d:4e:38:65:11:07:59:ba:6b:89:38:ba:6b:68:d0:b7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=C2FDCEE0702DDE777F28CC4B6ABF3B4B9AE5856E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:e1:86:cd:44:47:ef:9f:2c:ff:61:b8:ff:
                    48:19:41:cd:84:90:cb:6d:45:e4:31:c3:e7:ed:a1:
                    92:a0:c5:b7:cc:47:dc:57:7c:2f:22:69:8f:54:e7:
                    e6:30:39:e9:3f:8d:1c:4b:82:4c:cd:22:b4:d2:38:
                    57:b1:2a:74:8b:1e:e1:a0:29:de:95:cb:11:34:90:
                    fc:f4:70:0b:e2:95:dc:e4:3c:f8:52:70:be:55:a9:
                    76:70:01:c0:12:8b:f6:35:11:af:26:17:a3:7d:1c:
                    40:2b:fa:42:bf:49:c1:46:89:7d:2f:83:f6:f2:73:
                    be:1e:7c:46:9f:f4:f4:64:54:13:7d:b8:f7:cf:ac:
                    ea:a7:b5:60:40:38:9a:f3:a6:0c:df:a4:d6:45:e9:
                    7a:d4:09:1f:d8:b7:90:d6:41:ad:a9:1e:91:55:38:
                    be:1c:49:7e:4f:89:4c:b9:0b:63:a5:27:4d:87:6f:
                    15:0e:32:c5:04:fb:7d:f3:0f:09:e5:01:4f:86:e0:
                    db:8c:ca:0b:67:36:06:8f:21:7a:34:ae:6a:e1:a7:
                    40:3a:6d:36:88:ba:77:89:88:1f:07:81:74:5c:21:
                    f2:67:ed:8f:58:d3:a8:84:00:b1:2c:55:c4:ae:fb:
                    62:df:e5:7b:27:fe:6e:7a:c8:b2:39:aa:d5:4c:c7:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:CE:E0:70:2D:DE:77:7F:28:CC:4B:6A:BF:3B:4B:9A:E5:85:6E
            X509v3 Authority Key Identifier:
                keyid:DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/323830333a346538303a3a2f33322d3438203d3e20323633323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:3f:94:66:c4:28:6c:92:d8:a8:ce:66:db:6d:90:9a:9f:
         8f:21:b1:32:ae:da:ba:81:99:38:65:4a:46:de:84:d7:b6:fa:
         a1:94:67:ae:31:89:7c:ec:df:25:be:1a:e4:ef:3c:8e:5d:eb:
         2f:48:c8:9a:1e:b6:6c:5c:78:68:cf:a8:10:61:70:6b:dd:68:
         1d:83:8c:c3:c1:04:54:0a:86:59:7e:8a:01:6e:92:2c:53:06:
         7f:4b:7e:ee:46:e8:5c:18:62:c7:a4:52:81:17:ee:3f:76:c7:
         ec:23:68:49:16:7c:33:03:93:84:47:59:91:04:67:71:f6:c0:
         dc:c9:f4:ab:d8:83:a1:3e:ca:49:ce:47:23:82:e8:95:02:fc:
         1a:2b:b1:44:45:6a:f4:10:eb:9e:06:b7:0c:2d:ee:01:0e:d3:
         ac:a0:3f:88:ad:ed:b9:72:b1:1c:bb:98:96:0f:5c:ee:14:74:
         7b:04:3f:fc:93:9a:cd:2b:8f:1a:e5:2b:72:df:f0:aa:91:6c:
         2b:3f:a3:b2:f6:89:4d:c7:0a:dd:68:6b:ad:c3:10:1d:96:1d:
         55:3e:ec:02:28:8e:15:54:1d:6e:32:02:16:e4:eb:2b:94:99:
         31:5d:fc:ac:4f:54:ad:1b:5e:66:94:44:9c:32:95:25:3f:47:
         7e:58:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:57 2024 by rpki-client on console-fra.rpki-client.org