Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/323830333a663565303a3a2f33322d3438203d3e20323730303432.roa
File:                     323830333a663565303a3a2f33322d3438203d3e20323730303432.roa (raw, json)
Hash identifier:          5X+1elUfZYlkMNUcLPFfjiStuUPYbf5VnGE09QKNNJc=
Subject key identifier:   DB:70:77:23:38:F9:B8:A6:92:3A:AB:FE:04:BE:44:85:65:78:77:EB
Certificate issuer:       /CN=694A9B567DC84442DF416235D33074B005F7A672
Certificate serial:       5F63D54FFF299644DC4BCF3D27541C9093037B97
Authority key identifier: 69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/323830333a663565303a3a2f33322d3438203d3e20323730303432.roa
Signing time:             Tue 05 Mar 2024 17:40:32 +0000
ROA not before:           Tue 05 Mar 2024 17:35:32 +0000
ROA not after:            Tue 04 Mar 2025 17:40:32 +0000
asID:                     270042
IP address blocks:        2803:f5e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:63:d5:4f:ff:29:96:44:dc:4b:cf:3d:27:54:1c:90:93:03:7b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694A9B567DC84442DF416235D33074B005F7A672
        Validity
            Not Before: Mar  5 17:35:32 2024 GMT
            Not After : Mar  4 17:40:32 2025 GMT
        Subject: CN=DB70772338F9B8A6923AABFE04BE4485657877EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:e7:d9:26:d8:2f:aa:64:f7:20:40:1b:d3:8c:
                    ac:89:b9:2f:3b:e1:65:5e:b7:b5:3c:36:58:e4:9e:
                    2e:5e:72:24:c9:95:f2:d5:ac:0c:3c:e6:81:d4:37:
                    8b:6c:b4:e6:95:3b:63:f9:90:0d:de:33:6b:24:46:
                    f7:57:9d:0d:3a:a4:88:d6:d8:1e:38:75:37:45:46:
                    cc:cc:05:e4:97:ba:f7:ad:47:60:12:90:0c:8b:5e:
                    fe:e7:58:0a:77:d8:1b:9a:5f:a5:f4:e7:62:71:bb:
                    6a:20:a6:48:84:b1:ef:e3:76:5b:f7:ed:8e:fb:62:
                    70:02:dc:4c:52:f7:f9:f6:b6:7a:10:a7:4d:50:f5:
                    89:0c:bb:81:15:fc:0a:95:00:08:cd:82:51:03:a7:
                    01:81:95:82:c7:78:ee:21:a9:50:cf:ef:c3:19:a9:
                    c8:fa:c0:83:23:cf:c4:88:34:8c:14:c4:bc:85:36:
                    5b:2c:d7:01:49:d8:d7:6a:9c:cb:e6:7e:61:af:ed:
                    b7:cf:f3:5b:5a:d2:58:f9:f5:d5:e3:95:4b:d8:04:
                    7c:74:61:6c:44:ec:24:3a:6d:8e:ff:fd:28:94:8e:
                    ff:26:03:22:55:23:8e:8c:04:c8:a6:6f:7c:f5:df:
                    b2:7f:78:74:8d:8b:4a:31:f0:e7:63:f9:97:85:8c:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:77:23:38:F9:B8:A6:92:3A:AB:FE:04:BE:44:85:65:78:77:EB
            X509v3 Authority Key Identifier:
                keyid:69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/323830333a663565303a3a2f33322d3438203d3e20323730303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:f9:64:9b:c8:14:2e:f0:a5:8a:f4:19:59:1b:1d:76:70:
         6d:2f:67:3b:cb:d1:3b:4d:37:a2:91:5b:14:bd:0e:b5:93:78:
         dc:a0:d9:87:05:11:cd:6b:5c:7e:af:86:46:49:c7:ba:af:af:
         97:cc:2d:e8:1a:8f:96:9b:d2:75:94:f5:6c:eb:09:65:e6:f9:
         d3:98:2a:0b:26:29:c6:1a:2e:3a:e8:db:fa:bc:66:f3:bc:a8:
         b7:4a:9b:1c:70:cf:c6:67:59:09:66:37:13:2e:11:00:4f:59:
         41:a0:b3:95:6b:8a:fc:eb:a0:8e:28:19:aa:9e:5e:0c:d8:40:
         8a:5f:81:25:4b:61:6c:2d:82:8d:45:45:28:92:57:59:00:66:
         ed:9c:10:b8:bc:a4:35:7c:33:cd:0d:21:2a:81:fa:c9:d5:cf:
         1b:55:a5:6b:3c:aa:44:83:ca:5c:b9:c8:79:84:30:15:59:60:
         95:27:7c:a4:e3:eb:e8:a9:1d:14:5e:73:53:88:e0:50:f7:a8:
         c3:ef:75:34:95:92:6d:ea:89:0c:26:c3:56:f6:c7:f5:13:1e:
         31:74:35:9b:52:18:06:1e:ae:b1:d7:a1:0b:64:a3:c8:f0:2b:
         4f:fb:5a:0e:64:a7:9c:91:5a:17:21:e8:71:c2:dc:85:fd:2f:
         3c:c2:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org