Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/323830333a323261303a3a2f33322d3438203d3e20323636383533.roa
File:                     323830333a323261303a3a2f33322d3438203d3e20323636383533.roa (raw, json)
Hash identifier:          jxunO0ES3E38fhz+nU/MI44wjL8i1IG/1+GmwjBdQfI=
Subject key identifier:   04:F2:CB:23:13:3D:D7:9C:54:8F:FF:93:1E:58:41:94:70:46:B7:28
Certificate issuer:       /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial:       526B38224961F65BEDC1C08E5F41AE2302C4F32F
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/323830333a323261303a3a2f33322d3438203d3e20323636383533.roa
Signing time:             Tue 05 Mar 2024 18:11:37 +0000
ROA not before:           Tue 05 Mar 2024 18:06:37 +0000
ROA not after:            Tue 04 Mar 2025 18:11:37 +0000
asID:                     266853
IP address blocks:        2803:22a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 01:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:38:22:49:61:f6:5b:ed:c1:c0:8e:5f:41:ae:23:02:c4:f3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
        Validity
            Not Before: Mar  5 18:06:37 2024 GMT
            Not After : Mar  4 18:11:37 2025 GMT
        Subject: CN=04F2CB23133DD79C548FFF931E5841947046B728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:0d:20:20:34:f6:d3:16:2e:6a:71:8f:91:
                    ba:5b:54:d5:aa:c7:24:aa:d8:f4:65:23:e3:26:04:
                    18:c5:e6:7e:28:61:45:20:43:2a:47:34:4f:7b:eb:
                    05:ec:24:b5:4e:aa:4e:ae:a0:e2:07:21:69:d8:a6:
                    95:d9:97:ac:46:27:db:3e:8b:7b:70:ae:37:8b:27:
                    1d:86:d5:46:3e:59:56:42:20:b2:6d:0f:07:bc:b2:
                    7f:99:3c:25:4f:7f:6f:39:22:68:bd:b5:dc:24:33:
                    3e:75:dc:b8:41:8f:94:b5:53:10:a6:7a:5d:16:5c:
                    af:85:80:6c:86:16:1c:11:9b:82:25:2a:77:7b:45:
                    48:62:6b:c0:c5:0d:17:92:4c:3d:42:64:54:a9:a9:
                    74:07:3e:27:e7:86:68:ce:d3:f0:b0:96:71:4e:e4:
                    67:24:a0:fa:fa:33:35:4e:48:79:48:ac:ef:68:23:
                    28:76:76:86:35:c8:f0:7d:d1:2d:2e:2c:7c:8d:40:
                    47:8c:65:9e:5c:fb:10:ad:11:b5:c0:0a:bd:66:ad:
                    45:eb:95:f4:1c:c5:58:09:ff:dd:f3:c3:f2:b4:82:
                    88:da:19:1d:e8:10:ca:58:58:00:f7:83:d8:f9:1e:
                    5b:dc:e5:36:5f:10:2a:67:cf:90:89:cd:81:9d:41:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F2:CB:23:13:3D:D7:9C:54:8F:FF:93:1E:58:41:94:70:46:B7:28
            X509v3 Authority Key Identifier:
                keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/323830333a323261303a3a2f33322d3438203d3e20323636383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:8f:77:ed:52:cb:f2:24:a1:d2:bb:fd:74:97:e4:20:ce:
         a1:e5:35:24:c7:8b:05:61:85:98:8c:59:76:a3:b0:9c:c2:9c:
         ec:5e:88:4d:d1:b8:05:92:8e:0e:a9:cf:68:57:11:f7:6d:5e:
         d7:66:07:3a:ec:91:da:ac:b7:35:58:78:25:e3:b8:81:0f:3f:
         0d:ac:86:6b:b0:89:5b:de:ac:08:df:51:2e:1c:87:98:4e:a7:
         32:72:be:a1:23:6c:95:6d:13:a9:23:e9:06:8b:bc:6d:b2:e0:
         bb:a5:c3:d2:86:ef:12:28:85:0b:dd:13:78:d7:30:03:4c:da:
         90:d2:ef:6e:4c:07:c7:43:9a:75:e9:b0:29:f5:67:7a:59:80:
         0f:dd:b9:81:4e:fb:01:c4:17:be:d2:b2:35:37:45:68:a8:c1:
         ca:07:ca:38:aa:a5:66:17:82:a1:00:b2:71:f0:06:aa:0a:8a:
         e3:d5:1d:ab:0c:b2:9c:d7:46:db:d4:a5:50:54:6d:40:67:e8:
         c3:fb:b0:ee:39:7a:16:be:27:60:23:a0:7c:83:f8:85:27:52:
         37:53:8a:b7:94:4d:11:e7:ef:7e:6b:7b:36:15:ff:c0:4a:ff:
         04:81:d5:c5:f3:78:97:86:ed:b7:6b:92:cc:09:e4:e7:be:cd:
         4b:e1:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:12 2024 by rpki-client on console-ams.rpki-client.org