Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663330303a3a2f34312d3432203d3e20323634383330.roa
File:                     323830333a3263303a663330303a3a2f34312d3432203d3e20323634383330.roa (raw, json)
Hash identifier:          sF/to/RAgBewA6xgn0BkKp1CGE0Hc+HpE3Si2QbPuWA=
Subject key identifier:   12:8D:42:E8:F5:D7:C0:96:97:D6:53:66:4D:AF:A0:6E:11:86:2F:60
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       581F1F4621FA2567985F114F6029A756A73C671C
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663330303a3a2f34312d3432203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 18:04:47 +0000
ROA not before:           Tue 05 Mar 2024 17:59:47 +0000
ROA not after:            Tue 04 Mar 2025 18:04:47 +0000
asID:                     264830
IP address blocks:        2803:2c0:f300::/41 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1f:1f:46:21:fa:25:67:98:5f:11:4f:60:29:a7:56:a7:3c:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar  5 17:59:47 2024 GMT
            Not After : Mar  4 18:04:47 2025 GMT
        Subject: CN=128D42E8F5D7C09697D653664DAFA06E11862F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:2a:95:c3:cf:59:70:92:d8:56:4e:03:42:
                    2f:4e:76:70:d2:82:01:d9:8a:40:f9:13:22:5e:a6:
                    ee:7e:48:d5:64:5b:7d:1e:68:20:75:2c:b0:31:77:
                    08:4f:b1:ce:91:19:07:5e:ba:66:b4:02:90:c8:c4:
                    65:5f:37:c6:79:c9:ce:9a:bd:a8:ff:2e:b9:74:94:
                    af:5c:2b:6c:18:01:15:31:14:dc:68:71:a7:ff:48:
                    f6:32:9a:e3:24:e0:77:bb:17:c6:e1:e7:ce:3b:39:
                    67:0c:67:65:a3:87:6c:88:92:4d:b1:bd:03:b9:63:
                    f0:b7:0d:5f:51:de:20:a2:32:15:48:59:4c:86:3c:
                    cf:ca:12:b1:36:d4:be:57:69:a6:ad:a9:14:8c:60:
                    7c:7e:36:24:55:63:4d:f9:45:50:3f:d0:c7:c5:6c:
                    73:ff:c7:35:c3:0e:10:c6:43:c7:b8:5b:a8:a9:a3:
                    70:cf:0e:77:fe:e0:1f:5d:5a:2b:85:c3:0d:d3:4b:
                    7e:13:e0:65:c8:f9:53:e2:62:95:79:9f:2b:40:05:
                    14:85:8f:f1:65:bb:47:34:d6:62:dc:55:7e:db:24:
                    de:bc:f5:0e:f3:a2:bc:87:af:4b:2c:73:a2:7d:f3:
                    e2:b0:7d:27:70:b9:fa:2b:7b:25:09:25:66:22:13:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:42:E8:F5:D7:C0:96:97:D6:53:66:4D:AF:A0:6E:11:86:2F:60
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a663330303a3a2f34312d3432203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f300::/41

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:55:76:7e:c8:a7:ac:05:58:b6:4c:39:d6:c8:bf:77:94:
         09:8f:29:c2:97:f8:3e:ae:07:8b:91:1d:e0:a0:df:1e:f6:9f:
         66:83:9d:ae:25:aa:44:33:08:2f:94:2c:1a:47:8a:84:ba:fd:
         46:c8:47:4d:04:1d:58:f5:13:af:b0:3e:a7:88:79:b1:b8:49:
         85:cc:73:45:cc:4f:a2:b9:c0:d8:a9:74:a9:46:c5:ff:96:8c:
         e4:ea:a0:4d:b7:b6:2e:96:91:16:da:c7:27:03:b7:44:39:fe:
         cc:cd:7e:9a:29:b6:df:31:fc:25:84:69:2d:b1:a5:ed:4e:9a:
         b9:68:70:a5:90:96:34:a5:76:67:54:64:d4:c1:34:de:d5:83:
         53:9a:ed:36:be:5b:2e:59:e3:6c:92:e1:6c:22:69:3c:11:39:
         4a:af:c6:72:ab:46:9e:f0:58:fe:d6:a2:f7:69:42:53:9a:3c:
         fa:ff:a1:40:9e:b7:cc:e4:26:72:84:53:2c:5d:d4:9a:33:29:
         c9:99:c3:17:de:af:50:a5:61:92:ef:e9:68:b0:09:d7:e5:24:
         32:d6:aa:d9:1f:60:b5:9b:e7:61:cf:e3:c7:53:69:44:58:5f:
         35:30:30:13:7a:1c:dd:d4:e0:9e:20:71:4f:a7:5b:3a:f8:3a:
         9b:e2:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:58:52 2024 by rpki-client on console-fra.rpki-client.org