Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa
File:                     323830333a336532303a3a2f33322d3334203d3e20323635383830.roa (raw, json)
Hash identifier:          NTK4YWFIWgI4jxmcMNiAfvq431S7NO9GZwNBPa32D1E=
Subject key identifier:   A1:58:BB:68:A4:D2:D8:43:F1:B9:27:23:12:D7:03:CA:81:11:BD:B4
Certificate issuer:       /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial:       085765AE767E14169AF17B3667549CC787543050
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa
Signing time:             Mon 07 Oct 2024 18:00:40 +0000
ROA not before:           Mon 07 Oct 2024 17:55:40 +0000
ROA not after:            Mon 06 Oct 2025 18:00:40 +0000
asID:                     265880
IP address blocks:        2803:3e20::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:57:65:ae:76:7e:14:16:9a:f1:7b:36:67:54:9c:c7:87:54:30:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
        Validity
            Not Before: Oct  7 17:55:40 2024 GMT
            Not After : Oct  6 18:00:40 2025 GMT
        Subject: CN=A158BB68A4D2D843F1B9272312D703CA8111BDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:3c:7f:c2:50:1d:7c:d0:2b:b1:06:5b:3c:
                    44:99:3e:6a:fb:4f:f0:f7:97:1e:b0:74:9a:c0:c9:
                    1d:91:24:b8:63:d9:97:85:95:e1:f7:a7:cf:bd:04:
                    52:61:0a:3e:0a:91:78:01:06:00:36:57:7b:26:af:
                    d3:34:1c:5c:2b:72:71:22:61:bc:7a:5f:44:f5:d2:
                    df:2a:2e:78:ad:11:9e:d0:93:cb:dc:ce:10:5e:f9:
                    52:6c:a2:73:47:e9:59:8e:f7:f0:3a:af:37:9d:f4:
                    ce:9f:fb:1b:f8:c7:d7:0b:37:22:02:7a:04:07:20:
                    ba:d0:93:5e:61:d0:73:49:6f:7f:53:2b:52:79:a0:
                    51:c2:ba:89:92:69:63:78:c3:66:f3:af:f5:35:19:
                    e1:5a:f6:44:66:34:86:62:a3:eb:7d:9e:3e:7e:97:
                    a8:fd:f2:2a:4d:0e:ea:35:8c:73:cf:8b:16:be:36:
                    94:01:34:26:be:45:51:75:05:a9:20:91:f4:c2:be:
                    d4:b2:aa:67:4e:87:18:ed:8d:87:88:91:64:c4:e6:
                    c6:7c:38:24:4d:71:fc:fd:bc:68:65:ff:2f:56:97:
                    3a:c5:cf:83:79:41:70:49:ec:a1:2b:39:3b:d7:b5:
                    e8:07:9f:22:79:a6:2b:36:a0:ed:e3:9f:d3:9a:53:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:BB:68:A4:D2:D8:43:F1:B9:27:23:12:D7:03:CA:81:11:BD:B4
            X509v3 Authority Key Identifier:
                keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/323830333a336532303a3a2f33322d3334203d3e20323635383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:71:87:38:70:aa:38:3f:0c:81:e7:1f:4a:87:46:0f:69:
         cf:46:1f:dc:0f:7b:d5:a5:7f:0d:13:43:db:a9:76:6b:e4:18:
         d5:de:5d:7c:2b:7d:4e:ad:9d:02:37:1d:c2:be:a8:72:05:b4:
         a5:4d:2d:b2:4e:62:96:e5:12:86:67:42:9a:38:b3:1e:7b:7b:
         a7:c5:08:c3:d2:cd:1e:db:25:a2:4d:a3:5f:89:3a:92:fa:51:
         f7:ac:69:08:81:2e:1a:61:8b:ea:c3:de:44:cc:0b:5e:24:81:
         f5:3b:5a:62:92:cb:ed:3d:10:af:93:58:44:ae:c7:44:30:33:
         58:d4:82:50:1e:11:7e:b1:0a:73:ed:80:b4:37:76:a5:e1:b8:
         99:1e:67:4a:18:18:84:2c:b5:29:44:3c:e8:d9:f6:44:50:9b:
         70:e7:a6:38:50:89:48:ba:b4:79:c8:4f:72:c0:23:a4:77:f6:
         9c:7c:f2:93:3e:89:e5:2d:03:a4:12:bd:6d:61:95:47:14:f1:
         24:f1:a2:d3:9b:b8:9c:d3:7e:46:b9:43:da:93:06:34:95:55:
         22:5c:e9:3c:03:7a:5f:36:92:8d:0f:97:c4:b3:b6:ce:fd:a3:
         b5:d3:6a:f4:1f:3f:b5:fe:21:2c:db:32:e0:ba:96:5c:41:0a:
         e8:17:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:56 2024 by rpki-client on console-ams.rpki-client.org