Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa
File:                     323830333a3363303a3a2f33322d3332203d3e20323635373238.roa (raw, json)
Hash identifier:          g5lOyq2EA5jKdNoLw3bM907oA1fUq2wCXnn4+PfQSDQ=
Subject key identifier:   C5:B5:80:46:B4:20:C2:3F:FC:66:5E:80:43:43:38:A3:E4:E2:AC:52
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       20B5B046CC110C76CD90B8DF2E6B9CC7220E9851
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa
Signing time:             Fri 31 May 2024 20:45:01 +0000
ROA not before:           Fri 31 May 2024 20:40:01 +0000
ROA not after:            Fri 30 May 2025 20:45:01 +0000
asID:                     265728
IP address blocks:        2803:3c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b5:b0:46:cc:11:0c:76:cd:90:b8:df:2e:6b:9c:c7:22:0e:98:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May 31 20:40:01 2024 GMT
            Not After : May 30 20:45:01 2025 GMT
        Subject: CN=C5B58046B420C23FFC665E80434338A3E4E2AC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:e6:6e:76:a2:e4:ac:0a:2a:e3:cd:cc:3a:
                    5c:15:09:45:17:a0:17:b2:6a:0e:96:e3:36:4c:ee:
                    32:e7:00:81:d9:d4:eb:ca:06:aa:bc:26:b8:e8:6e:
                    72:b0:72:52:5b:ac:fd:51:91:67:7c:7c:8f:3c:73:
                    92:4c:c7:78:db:7e:f0:aa:21:91:bf:99:01:8e:19:
                    ef:99:78:5b:d4:cd:e2:4a:a5:82:ad:d0:b9:80:ff:
                    c9:04:b9:c6:0e:fb:f4:39:53:90:95:58:0e:4e:b5:
                    e1:67:e1:3f:17:87:fe:97:c4:45:ff:40:cb:77:89:
                    52:2b:90:f1:71:7c:65:8f:83:aa:01:f1:83:32:d1:
                    ed:78:ea:46:fd:b2:e2:5a:2d:7c:0a:ed:e8:ae:04:
                    cb:65:07:3f:e2:de:a6:66:34:0a:d3:84:3e:83:c8:
                    ce:28:52:d9:87:8f:7c:dc:3e:b6:34:44:8f:c1:1b:
                    87:6c:69:f3:e7:08:4e:14:93:37:f1:bd:56:0a:77:
                    b3:24:78:36:db:b7:01:17:31:88:23:ae:17:62:83:
                    c6:cf:81:0b:5b:47:80:d3:e0:44:5b:7f:47:78:f3:
                    56:fd:e4:36:f8:e5:54:42:49:04:c1:4c:19:c5:f0:
                    16:7b:e2:07:28:da:ea:a4:e5:b0:c1:d8:4e:21:57:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:80:46:B4:20:C2:3F:FC:66:5E:80:43:43:38:A3:E4:E2:AC:52
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/323830333a3363303a3a2f33322d3332203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:48:51:05:05:b8:e1:2e:31:d0:a2:ac:d4:0f:3c:61:6f:07:
         0c:4e:2e:37:3b:22:a4:ea:e7:3d:24:97:6d:c1:27:0e:c2:3b:
         3c:d9:e4:ad:ae:ac:5c:e6:e9:6a:21:4f:9e:5b:14:bb:46:03:
         e5:2a:ea:9c:d4:6d:07:6c:41:96:2e:b6:8f:fe:87:56:25:ae:
         e8:57:d1:87:3d:1e:e4:52:15:bf:de:fb:16:23:c7:bd:62:45:
         65:ba:c7:51:7f:21:4b:2f:d8:df:51:be:25:f0:9e:a7:b0:5a:
         bd:0b:44:7e:ff:94:02:27:6e:2d:be:3e:61:e5:b8:e2:d0:17:
         6f:3c:5f:93:f4:66:4e:28:d9:30:5b:15:38:69:37:d3:74:a0:
         e3:17:f7:3b:ca:04:5c:44:a4:68:b8:d8:db:06:3f:ab:62:21:
         80:33:27:37:d9:3c:ce:16:ef:72:95:6b:62:a1:95:13:d4:b8:
         79:67:64:c8:1e:e8:dc:7e:59:26:ad:d8:4f:d6:3d:e5:a9:36:
         2e:85:55:a7:1d:05:1f:60:28:56:55:ff:17:f1:08:02:03:f9:
         f2:55:75:30:77:d8:f2:af:cb:70:a3:85:7e:a6:0d:fd:20:63:
         2c:c1:35:ba:47:0e:2e:e9:a2:75:d8:4d:5f:cd:04:84:36:5b:
         78:a7:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org