Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa
File:                     323830333a353538303a3a2f33322d3634203d3e20323636383832.roa (raw, json)
Hash identifier:          gJDxVevPh2HWmwB6ZxD+4qdeQ05QwUalmxnGgqKlUCI=
Subject key identifier:   9E:4C:F1:46:14:A3:C0:B0:B7:77:64:16:F5:BC:5F:97:94:F6:52:02
Certificate issuer:       /CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890
Certificate serial:       0AC0933572C3AE88A6A63A7E73873A79BB31EF60
Authority key identifier: DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa
Signing time:             Tue 05 Mar 2024 17:56:25 +0000
ROA not before:           Tue 05 Mar 2024 17:51:25 +0000
ROA not after:            Tue 04 Mar 2025 17:56:25 +0000
asID:                     266882
IP address blocks:        2803:5580::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:93:35:72:c3:ae:88:a6:a6:3a:7e:73:87:3a:79:bb:31:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890
        Validity
            Not Before: Mar  5 17:51:25 2024 GMT
            Not After : Mar  4 17:56:25 2025 GMT
        Subject: CN=9E4CF14614A3C0B0B7776416F5BC5F9794F65202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:67:5e:2d:16:35:e9:a5:0b:70:0c:64:c6:
                    6c:8d:e3:c7:1d:77:4b:00:30:a1:4a:5c:26:a3:fd:
                    3c:fd:e6:df:57:29:88:94:a1:7c:67:48:4c:f6:cd:
                    8c:ab:5b:b2:a1:65:93:ac:d4:9b:0b:f7:a3:10:30:
                    bc:93:1a:1a:c5:00:85:eb:8c:6b:99:a0:3b:b9:46:
                    ca:be:01:5f:bb:3d:43:e4:e8:a1:f4:14:2c:98:6b:
                    ba:00:9a:0c:f3:2b:b8:a9:28:5e:c7:53:a7:a0:f1:
                    8b:14:01:9d:8d:41:9d:26:06:5d:0c:f8:18:3a:c2:
                    25:b2:84:93:4a:f8:5c:2c:06:73:2b:53:e6:d1:c2:
                    12:36:a8:1f:b3:71:e8:8c:10:69:f6:ee:9f:bd:82:
                    cf:4d:76:bc:0c:ce:65:97:d5:26:72:67:61:52:b5:
                    e2:3f:26:9e:97:fd:09:3a:49:e7:48:b4:29:49:44:
                    5a:fa:b8:be:5a:fa:c2:3b:c5:59:70:91:18:b4:8f:
                    d0:fb:b8:aa:b0:fd:68:d3:01:37:4a:12:c5:e2:73:
                    a7:57:f2:1b:a8:3f:fd:ed:b4:3e:94:9a:de:97:93:
                    56:c5:b7:5f:ca:07:ab:45:7e:cc:25:68:b5:e5:7d:
                    cd:93:2d:52:28:1b:1f:ac:0e:b8:af:07:54:5d:10:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:F1:46:14:A3:C0:B0:B7:77:64:16:F5:BC:5F:97:94:F6:52:02
            X509v3 Authority Key Identifier:
                keyid:DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/323830333a353538303a3a2f33322d3634203d3e20323636383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5580::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:bc:e6:a1:4c:e0:0d:55:9b:59:a0:fb:49:1a:df:5f:aa:
         d4:2c:e8:9b:71:e2:93:c8:90:96:b2:a0:2a:e4:0e:23:c8:50:
         2f:8f:24:5f:90:a2:65:99:2c:c4:a5:28:4d:83:7c:09:98:ae:
         2e:ac:26:b0:20:13:d3:98:ff:91:eb:73:05:ed:26:96:79:74:
         c0:66:5a:74:60:96:ab:e8:5f:ad:28:4c:be:b0:32:ca:78:63:
         80:5c:d8:8c:d6:59:4f:46:82:de:51:c9:b8:bc:49:d7:4c:e4:
         21:3e:80:9a:f0:a3:d2:11:ac:d9:96:b7:f4:0c:9d:66:df:49:
         40:ab:2c:a9:c2:06:7d:fc:12:f9:02:1e:5b:40:4b:b5:95:f3:
         1a:c9:aa:61:bf:c0:48:80:53:9c:48:db:f7:82:28:1b:31:e9:
         9a:c2:cd:e9:9d:c0:fa:92:06:17:98:80:98:57:b6:5e:90:fe:
         03:91:0d:fc:1e:51:19:de:43:54:ce:a2:f0:1d:95:ea:ea:05:
         44:ec:3b:33:06:4a:82:c9:e3:8d:76:89:2b:48:92:0d:79:48:
         85:55:cf:cc:92:b7:d8:88:81:c8:ed:19:90:86:de:af:6c:69:
         0f:7d:91:58:da:9f:4c:29:c6:9e:b7:cc:31:01:07:bb:48:8a:
         84:52:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:28 2024 by rpki-client on console-ams.rpki-client.org