Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
File:                     323830333a333936303a3a2f33322d3332203d3e20323632313836.roa (raw, json)
Hash identifier:          bnCiLAiIDziBWaDEAgrSO6Mncw0KcOlchd8Vvnv990g=
Subject key identifier:   E9:ED:1F:0F:65:EC:53:E3:8B:FC:E6:9B:3B:CE:B2:CA:97:0A:71:B2
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       3EAFE41142C9FAAD2444A0FACD994817B56B3F17
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:05:37 +0000
ROA not before:           Tue 05 Mar 2024 18:00:37 +0000
ROA not after:            Tue 04 Mar 2025 18:05:37 +0000
asID:                     262186
IP address blocks:        2803:3960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:af:e4:11:42:c9:fa:ad:24:44:a0:fa:cd:99:48:17:b5:6b:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Mar  5 18:00:37 2024 GMT
            Not After : Mar  4 18:05:37 2025 GMT
        Subject: CN=E9ED1F0F65EC53E38BFCE69B3BCEB2CA970A71B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:61:1b:68:a9:0d:d7:3f:ee:8b:eb:18:41:
                    72:af:fa:e7:78:fd:f6:1c:02:68:06:b8:66:ef:30:
                    88:5c:98:3f:0d:bb:29:5c:1f:47:64:9b:ff:e5:4d:
                    df:37:10:b8:22:bf:4e:e1:1f:cf:2f:32:53:15:e3:
                    5e:db:be:be:fa:4c:93:51:53:50:2a:8b:eb:9f:8e:
                    2e:3d:7a:c3:35:ac:13:25:32:01:24:e9:8e:86:7f:
                    20:e2:f5:f4:31:b4:af:18:ca:31:c5:32:7b:57:d5:
                    4b:42:e2:10:43:1f:ef:8e:fb:6d:c7:83:27:4d:78:
                    c7:65:33:95:e6:0c:fe:3c:18:00:c9:5d:ed:20:bd:
                    75:22:cf:62:1a:ed:b7:3b:d5:08:d7:93:ec:09:1b:
                    b8:b6:e1:c8:47:2c:f1:d5:24:fd:ea:72:31:79:fd:
                    5c:3d:07:fe:ae:09:c6:b9:9f:a1:de:0e:b7:87:99:
                    c1:85:64:9b:b6:af:21:d3:a3:85:e2:37:58:b1:88:
                    6e:6a:5b:73:5b:5e:a5:16:d5:05:5c:fe:99:f7:74:
                    f8:9c:fe:b5:53:f6:2b:63:2a:9d:e1:0a:3f:e2:ca:
                    6a:3f:c3:a0:d5:e1:e2:18:5e:9b:dc:0c:c5:64:19:
                    05:86:30:9d:b9:49:9e:a6:5c:62:1f:5c:3a:f4:7f:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:ED:1F:0F:65:EC:53:E3:8B:FC:E6:9B:3B:CE:B2:CA:97:0A:71:B2
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:43:7f:3f:69:8d:44:f7:d7:b7:4d:22:a9:ca:30:dd:74:
         cb:23:3a:b0:31:8f:c2:27:b4:8d:81:4e:9f:60:63:a9:b1:51:
         33:9c:65:1e:36:f1:5e:25:f3:ff:b2:04:84:6b:70:0d:ed:ca:
         21:ad:a2:bd:b7:57:74:eb:1b:47:aa:52:d1:9f:7d:67:e9:e1:
         c7:c0:08:e1:65:0c:9d:e2:dc:e8:e3:a1:c5:3c:eb:22:e9:ab:
         e0:c9:3f:68:8e:2a:1e:bf:be:aa:46:2d:df:c1:3d:6c:6d:1c:
         5b:89:72:42:8e:a6:3d:08:6c:50:ab:b0:6a:3a:37:6a:83:b8:
         9e:98:af:ec:6e:d2:76:3b:38:9c:2d:e7:3e:52:21:bb:40:49:
         5f:4f:2d:5b:4f:25:f0:2f:a2:4d:53:a7:47:71:4a:a4:78:77:
         5c:8d:26:af:05:f5:0d:98:84:0f:6f:05:dc:3a:22:d1:20:b6:
         8d:24:0e:80:a7:91:1a:51:c8:1e:43:12:81:e0:0c:c5:d7:44:
         49:46:a1:4c:06:9b:32:2b:6a:3f:20:0d:31:6f:9d:e2:c0:72:
         3e:c0:13:c2:3c:f8:3c:e8:5c:9d:6b:0e:91:a2:96:38:8d:7c:
         a4:1e:c3:da:f8:b2:a7:0f:6a:69:42:c4:34:74:72:4c:66:06:
         25:c3:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:57 2024 by rpki-client on console-ams.rpki-client.org