Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa
File:                     323830333a656136303a3a2f33322d3438203d3e20323637383833.roa (raw, json)
Hash identifier:          pXCuLbimny7yBD8zEk7OPgoAUSxNfqF0IlbYepR+ZHg=
Subject key identifier:   72:BC:2C:A5:A2:78:EA:DA:35:13:AE:6D:77:A9:6C:D6:D1:FD:D6:A1
Certificate issuer:       /CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
Certificate serial:       7C981B251D8FBFEDF848DE5ADFE8B9DCF1320263
Authority key identifier: C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa
Signing time:             Tue 05 Mar 2024 17:48:49 +0000
ROA not before:           Tue 05 Mar 2024 17:43:49 +0000
ROA not after:            Tue 04 Mar 2025 17:48:49 +0000
asID:                     267883
IP address blocks:        2803:ea60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:98:1b:25:1d:8f:bf:ed:f8:48:de:5a:df:e8:b9:dc:f1:32:02:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
        Validity
            Not Before: Mar  5 17:43:49 2024 GMT
            Not After : Mar  4 17:48:49 2025 GMT
        Subject: CN=72BC2CA5A278EADA3513AE6D77A96CD6D1FDD6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:36:11:21:ad:18:37:42:28:0c:87:4a:7a:
                    82:78:5a:fc:83:61:76:16:0e:56:25:57:86:3f:1a:
                    af:92:23:be:a0:02:3e:ac:54:9a:21:04:6a:7a:c2:
                    2e:f7:cd:f4:8a:b9:66:25:da:22:8f:cf:6f:78:1d:
                    d0:16:8a:44:c1:60:2a:6c:35:7f:bd:e1:a8:8b:31:
                    eb:31:a7:bc:33:8e:1d:57:9d:c7:64:b6:cb:83:a7:
                    dd:37:d5:bc:97:b7:1c:9f:df:20:e4:ed:74:4c:04:
                    dd:90:4e:01:44:cd:1e:b4:13:0b:bb:1c:4b:cf:d5:
                    a9:6a:6d:05:e8:d1:f6:fc:7d:6b:3a:fc:91:08:63:
                    d8:5e:e7:0a:b9:17:0d:a0:4d:bb:50:56:be:e0:39:
                    85:7d:15:b5:3b:00:62:14:ea:43:89:02:87:8a:4b:
                    47:fb:66:aa:d8:89:32:0e:1d:24:8b:00:e4:9c:7c:
                    4a:fb:19:c3:ef:b3:68:23:79:58:27:d1:ab:1c:20:
                    7c:23:69:ee:51:de:1f:45:d9:07:d7:4a:d0:7e:7e:
                    d9:8a:f7:6c:2d:f1:5b:72:25:34:d6:fb:de:60:28:
                    45:8d:e3:95:06:d6:ad:a3:14:a4:d0:0c:d3:98:47:
                    9d:16:7a:88:c3:4c:6c:cd:f5:d3:14:24:fd:05:dd:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:2C:A5:A2:78:EA:DA:35:13:AE:6D:77:A9:6C:D6:D1:FD:D6:A1
            X509v3 Authority Key Identifier:
                keyid:C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea60::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:83:25:ad:35:00:4a:92:70:4b:e2:75:6e:b3:fa:92:ef:64:
         8b:7a:a9:da:c2:68:64:6a:d8:66:48:06:6a:b4:99:b6:19:40:
         f1:cd:05:c6:2d:ba:0e:a5:83:2c:79:72:a0:84:cd:b1:ce:a8:
         ad:87:50:2b:c3:2c:51:2f:44:79:0e:56:00:64:14:fb:c2:71:
         c8:4b:c9:00:ca:6d:f7:11:ac:c3:1f:ea:84:2e:10:78:15:69:
         8b:58:ed:94:b5:d0:27:47:f1:f0:f4:0d:f3:0e:c2:ab:ff:f0:
         45:7f:1f:49:73:fa:62:3f:5b:26:ef:4f:38:f7:2f:66:ae:67:
         af:be:0f:4f:47:d3:f8:8f:01:69:30:55:95:b3:24:fa:e7:6d:
         26:a2:25:ce:f1:fd:35:8a:d0:a3:9f:5f:39:03:95:a5:91:3e:
         9e:c0:20:3b:e5:11:bb:31:74:0b:1d:a8:ab:6c:d9:bf:e9:4b:
         1a:da:e1:2c:ba:7f:7d:61:33:e2:ed:d3:b1:86:bb:f5:36:ec:
         5a:c1:73:19:1e:2d:87:ed:65:66:be:77:c4:69:e1:dc:45:d1:
         92:11:df:96:e7:90:0b:c1:1f:e3:33:6d:d5:40:fe:62:b7:77:
         15:ab:6d:8c:ab:7b:35:2c:27:88:eb:0b:37:4a:a5:3f:5d:a2:
         f5:8e:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org