Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa
File:                     323830333a313532303a3a2f33322d3332203d3e20323636363838.roa (raw, json)
Hash identifier:          5PeZ6Cq3Bvvdm/1pD6LVVKSGg1a/RpzGRRJhsUa7rvM=
Subject key identifier:   BE:DC:0C:25:CE:7A:D3:BC:0D:26:12:86:BD:63:C8:F7:3B:0F:6D:ED
Certificate issuer:       /CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
Certificate serial:       11CF0C17B9A55190E39A6B02FCEBB44EE8B36B1F
Authority key identifier: 65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa
Signing time:             Tue 05 Mar 2024 17:48:55 +0000
ROA not before:           Tue 05 Mar 2024 17:43:55 +0000
ROA not after:            Tue 04 Mar 2025 17:48:55 +0000
asID:                     266688
IP address blocks:        2803:1520::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:0c:17:b9:a5:51:90:e3:9a:6b:02:fc:eb:b4:4e:e8:b3:6b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
        Validity
            Not Before: Mar  5 17:43:55 2024 GMT
            Not After : Mar  4 17:48:55 2025 GMT
        Subject: CN=BEDC0C25CE7AD3BC0D261286BD63C8F73B0F6DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:10:e5:18:a9:96:7b:34:1a:1c:01:d9:38:
                    db:56:6b:d9:c6:ba:4a:45:e0:16:32:e6:69:8b:35:
                    96:47:d5:87:92:6b:af:8b:ed:1a:89:9d:7c:a3:67:
                    3b:f0:2b:a3:82:ba:34:9b:53:32:c0:1f:b1:15:75:
                    26:ee:3f:9b:2b:a5:b3:41:66:e0:d3:18:d1:34:1d:
                    2b:15:76:7f:a2:de:f6:f2:38:ad:86:e6:e9:7e:66:
                    bb:b6:84:47:08:af:76:70:d6:ef:8c:40:bb:1e:e6:
                    15:45:39:5e:f6:6a:d6:69:c0:a5:32:8c:b8:cd:af:
                    a4:64:3a:1e:55:a2:1b:63:ae:8a:cd:56:b8:8b:bc:
                    e9:ca:e5:4c:1b:40:53:3a:23:c3:c7:60:30:0c:86:
                    2a:7c:4f:9b:4d:64:44:5b:d7:e5:ad:61:69:5e:4e:
                    90:a6:cf:8d:a7:a9:fd:88:52:ba:b1:ec:28:ce:ad:
                    94:6f:95:af:5d:eb:e8:09:45:0a:01:80:84:d2:f8:
                    23:d6:48:f2:ea:69:e5:72:ad:a1:b7:50:74:c2:1c:
                    56:eb:d7:b8:3d:89:a5:f5:63:92:50:bc:09:59:a6:
                    b9:bc:65:72:67:1e:d4:07:4c:99:d9:40:64:d1:c5:
                    df:02:9b:4d:84:d0:9f:41:a8:c7:f0:3b:a5:04:43:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DC:0C:25:CE:7A:D3:BC:0D:26:12:86:BD:63:C8:F7:3B:0F:6D:ED
            X509v3 Authority Key Identifier:
                keyid:65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/323830333a313532303a3a2f33322d3332203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1520::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:83:9f:61:cf:6e:44:28:62:94:dc:50:6b:eb:28:fd:b5:40:
         88:69:1f:03:f7:48:80:f0:ab:1d:ce:f7:fa:32:54:bb:67:84:
         e6:1c:57:a5:c2:7d:dc:9f:c4:a5:c7:71:5d:b6:88:8a:a1:1b:
         cc:fa:6e:01:2c:32:f4:86:00:2e:e6:0e:2f:7d:9f:cc:ba:71:
         a0:4c:30:de:71:f1:2e:3d:09:44:0b:8e:38:96:c8:16:aa:60:
         20:2c:18:00:62:02:09:1c:ea:d0:0c:ae:46:77:54:d1:19:fe:
         63:68:0f:3d:65:97:40:ff:d0:6a:36:cf:b8:c3:41:17:71:ce:
         f4:28:41:f9:79:f4:bf:49:7b:e8:85:5c:92:fb:ca:7a:a9:39:
         59:dc:cf:1b:87:4d:81:24:df:9a:62:f4:2d:6a:d1:e7:27:b4:
         60:ad:f9:91:e7:93:c6:6e:3a:56:c1:64:5a:f1:aa:47:31:87:
         3f:4c:5e:ec:8d:f6:60:84:45:ef:5f:b1:11:62:03:03:ce:82:
         ef:5c:a3:e2:4c:84:2c:0a:01:1f:b5:f7:5c:af:db:45:cc:f5:
         aa:08:1e:30:cb:e1:e7:a5:bb:7b:e6:f0:09:00:66:0a:fc:e5:
         8d:04:c3:d0:94:95:0b:68:ce:a0:57:5d:3d:c4:e1:f2:92:f5:
         63:11:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org