Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663030303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663030303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          BSL/C9yqZIoBe+BkgSD21gHFQIlxhgp55sAkqphhhm4=
Subject key identifier:   7A:61:AB:82:54:C9:1B:AB:B8:EC:95:FC:D9:35:C7:F4:75:88:E1:50
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       0B6083A384416289A384C632A6764AE41C99B4A5
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663030303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 18:04:46 +0000
ROA not before:           Tue 05 Mar 2024 17:59:46 +0000
ROA not after:            Tue 04 Mar 2025 18:04:46 +0000
asID:                     264830
IP address blocks:        2803:2c0:f000::/41 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:60:83:a3:84:41:62:89:a3:84:c6:32:a6:76:4a:e4:1c:99:b4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar  5 17:59:46 2024 GMT
            Not After : Mar  4 18:04:46 2025 GMT
        Subject: CN=7A61AB8254C91BABB8EC95FCD935C7F47588E150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:72:98:65:b4:61:b4:d5:bd:12:f4:97:57:
                    2e:5e:a5:70:10:b0:27:d7:67:2f:dc:5c:d0:68:35:
                    7f:e3:09:68:48:d7:9f:38:0b:1e:ba:42:6e:be:ac:
                    c2:f9:87:4f:16:20:eb:90:92:68:5c:07:a1:48:77:
                    2b:7f:f5:ca:22:fa:e7:fe:ca:56:26:31:5d:6e:51:
                    ea:9c:a7:56:98:af:2b:d6:95:cf:9d:27:6b:e0:ef:
                    70:39:05:ac:68:71:fa:34:74:f1:14:1a:5e:1e:82:
                    db:18:92:17:66:77:5f:0b:0c:ad:dc:ea:c2:30:e1:
                    f5:61:d6:2d:ea:c5:d9:91:a3:1d:b1:3f:6c:4c:f1:
                    7c:6d:d7:bb:e7:dc:3f:88:00:70:d7:c1:a3:5e:26:
                    48:fe:c6:cc:14:39:19:3a:3e:25:b7:da:6c:0c:f0:
                    c1:0b:55:51:d2:1e:68:78:2e:23:11:f0:75:3f:2d:
                    c5:6d:f3:3f:54:61:c8:ec:93:9a:af:7e:4d:cf:4e:
                    a1:e0:cb:37:7f:7e:6e:46:79:9b:4d:35:1a:9e:92:
                    52:d3:25:e0:95:d5:d0:c3:ce:bb:8d:37:10:b6:34:
                    d7:aa:74:e9:50:16:fe:d9:2b:cf:10:61:9d:5b:82:
                    fe:55:83:87:5e:ba:b1:7d:71:96:7d:17:88:8d:bb:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:AB:82:54:C9:1B:AB:B8:EC:95:FC:D9:35:C7:F4:75:88:E1:50
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663030303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f000::/41

    Signature Algorithm: sha256WithRSAEncryption
         a2:d9:44:09:51:e8:1a:a6:78:b0:d8:b0:55:75:68:1a:93:05:
         32:f0:16:69:b8:86:77:f7:fc:4f:f7:52:e7:71:c3:b4:c0:38:
         91:b0:bd:7b:ec:e0:a0:4d:60:eb:7c:06:5a:11:40:28:88:9d:
         51:53:8e:f6:20:7f:5e:cb:2e:a4:0c:b6:97:db:f5:a1:3b:7e:
         fa:5a:27:e3:c8:80:28:4d:42:1b:da:57:f5:a8:2c:1c:ab:11:
         58:3e:48:24:8f:ac:12:4b:3f:32:2b:65:cd:af:c8:67:54:97:
         f0:67:c1:fe:ed:ca:62:8a:45:81:6a:11:9b:a4:60:b3:d5:07:
         ab:dd:11:c2:6f:06:a3:44:29:3d:36:90:23:71:8a:fc:b4:02:
         d0:e4:a7:d4:62:7c:5d:1a:a2:aa:50:26:be:63:7d:c4:37:25:
         7f:d5:a6:5e:81:58:6a:e4:ee:8d:24:24:79:bb:bc:5a:40:99:
         0a:8f:ca:96:f3:36:cd:7f:72:c4:9b:5a:f6:65:44:50:82:20:
         0c:e9:60:c0:42:cf:1e:78:c4:cf:6f:ec:f9:4e:96:3e:33:91:
         f2:d1:3d:53:19:52:0b:7b:2b:83:7a:9c:e5:ca:aa:b0:0e:1f:
         59:90:2a:1c:65:10:e2:80:d5:d6:1f:5f:17:4a:4f:42:09:00:
         b4:c9:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org