Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
File:                     323830333a653265303a3a2f33322d3332203d3e20323639393233.roa (raw, json)
Hash identifier:          u9yoXGZQOE0nHhW3bOc2579aunofN2O8skKOBKvCpvI=
Subject key identifier:   E5:20:0A:B4:CC:56:55:2F:B3:F7:54:F6:3C:D0:22:A9:CC:14:45:43
Certificate issuer:       /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial:       1F1B520C0DA44A1C3A48ED92521B7B066D7F8BAA
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa
Signing time:             Tue 05 Mar 2024 18:14:02 +0000
ROA not before:           Tue 05 Mar 2024 18:09:02 +0000
ROA not after:            Tue 04 Mar 2025 18:14:02 +0000
asID:                     269923
IP address blocks:        2803:e2e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1b:52:0c:0d:a4:4a:1c:3a:48:ed:92:52:1b:7b:06:6d:7f:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
        Validity
            Not Before: Mar  5 18:09:02 2024 GMT
            Not After : Mar  4 18:14:02 2025 GMT
        Subject: CN=E5200AB4CC56552FB3F754F63CD022A9CC144543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:2a:09:3d:cc:4f:6e:2a:a1:14:06:9d:01:
                    10:ec:c0:a0:85:ab:39:0c:96:5b:b8:0e:37:ff:e4:
                    5d:f6:54:53:1c:58:82:c5:19:20:75:6e:72:38:f1:
                    0e:b2:75:0e:2d:92:db:c9:80:58:fb:52:5b:10:5a:
                    55:b4:dd:ee:d4:d6:bd:27:4f:66:43:9f:4f:1c:7f:
                    26:66:71:13:c6:02:29:45:86:38:60:8c:d8:d8:30:
                    ff:b5:b5:ae:60:05:87:ae:69:ac:03:e4:c7:ef:bd:
                    96:a1:65:4a:18:f5:99:d2:48:fa:b6:72:61:72:62:
                    51:cb:50:2e:ca:8c:2d:04:cb:35:40:9e:38:b2:8b:
                    52:4d:50:c1:db:c7:57:1d:16:db:43:67:53:df:8c:
                    79:2a:d0:79:4e:ab:dd:0b:b7:9a:ae:9e:b8:55:e3:
                    70:8e:da:f4:32:b1:91:13:1b:af:61:06:2f:b3:d9:
                    59:bb:5f:b4:9f:89:34:8e:6c:da:a5:26:ad:4e:1e:
                    35:ab:72:e9:9c:cb:c5:b2:41:d0:ad:39:2d:25:cf:
                    91:b3:ad:35:1d:73:c5:50:b8:19:37:c1:1f:6c:f0:
                    64:38:f4:d6:dc:da:7a:a4:9f:f8:1d:46:eb:af:e5:
                    6f:24:53:3d:54:10:d2:e2:e3:0b:d8:78:bf:12:83:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:0A:B4:CC:56:55:2F:B3:F7:54:F6:3C:D0:22:A9:CC:14:45:43
            X509v3 Authority Key Identifier:
                keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/323830333a653265303a3a2f33322d3332203d3e20323639393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:83:2e:a2:ba:e6:fd:f9:e3:33:f3:61:73:19:5a:66:76:a9:
         41:25:8f:91:11:f4:f5:69:c5:eb:c5:87:58:dd:b7:8e:00:8f:
         a9:50:15:39:d3:70:e3:00:55:91:5f:6f:98:60:8c:b9:5a:50:
         6d:93:69:a4:1a:8f:be:be:0d:b1:15:dd:93:69:74:9a:c2:cb:
         bd:40:f2:3d:46:c8:7e:ed:e1:b7:05:2d:91:19:e1:d0:0c:29:
         e5:c2:24:be:62:b8:63:90:87:ae:32:21:92:fd:cb:03:18:d0:
         29:1e:2a:c6:49:ed:93:c6:db:9b:5f:63:6e:a8:5b:55:68:1d:
         9a:55:7a:b9:b9:0c:16:39:ca:48:1c:bb:30:55:29:19:5e:7e:
         ac:d1:66:89:c9:85:fb:37:10:ba:a5:5b:13:d0:f3:4e:ca:62:
         71:4e:9f:4d:95:86:85:8f:b3:9b:a4:09:1d:e8:32:03:67:91:
         67:cd:3a:3f:52:2e:a9:fa:60:b4:04:69:5b:90:68:42:4e:58:
         6f:59:2d:bf:b4:bb:d0:15:92:86:b9:e0:54:c9:32:6e:07:4b:
         09:ad:16:72:9f:57:62:79:4d:2e:d1:99:74:72:aa:39:f9:27:
         a6:07:1c:b5:bd:bc:ec:dd:73:e7:de:85:76:7e:c9:c7:d3:47:
         52:2f:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org