Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/323830333a653936303a3a2f33322d3332203d3e20323639373338.roa
File:                     323830333a653936303a3a2f33322d3332203d3e20323639373338.roa (raw, json)
Hash identifier:          oOPCVYrIG0v1AXTpdjN2qjhIsZHq0CQx9ue0YlbTWkY=
Subject key identifier:   52:52:B8:C9:C1:01:DF:35:DC:67:81:66:E6:20:F4:90:36:FE:8B:45
Certificate issuer:       /CN=77E2A219521149A9ACFA935AA2B306003A25D8B7
Certificate serial:       4EEBD23CD99C4D6DAF5EA7447D5A9BCE1B34ACE4
Authority key identifier: 77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/323830333a653936303a3a2f33322d3332203d3e20323639373338.roa
Signing time:             Tue 05 Mar 2024 17:44:23 +0000
ROA not before:           Tue 05 Mar 2024 17:39:23 +0000
ROA not after:            Tue 04 Mar 2025 17:44:23 +0000
asID:                     269738
IP address blocks:        2803:e960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 08:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:eb:d2:3c:d9:9c:4d:6d:af:5e:a7:44:7d:5a:9b:ce:1b:34:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E2A219521149A9ACFA935AA2B306003A25D8B7
        Validity
            Not Before: Mar  5 17:39:23 2024 GMT
            Not After : Mar  4 17:44:23 2025 GMT
        Subject: CN=5252B8C9C101DF35DC678166E620F49036FE8B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:7c:62:91:55:f8:38:82:7e:80:cb:1c:8c:
                    e3:95:a0:b7:62:25:af:b9:ea:bb:0e:d9:59:ec:b6:
                    bd:d1:60:f9:86:2b:13:1a:18:fd:b8:1e:31:0f:49:
                    65:fa:7a:b7:f7:a2:fb:00:e9:d9:b1:a6:7b:d6:fe:
                    a6:54:51:1d:10:08:37:95:d6:bb:b4:32:05:39:73:
                    37:6d:52:63:f2:54:2e:29:fa:bb:a5:a8:b2:2c:fb:
                    98:ae:a4:38:f7:de:99:89:64:4b:49:88:f2:ff:cc:
                    13:b1:34:52:c2:1b:a3:d4:70:6a:fe:58:77:d2:fc:
                    ac:df:cc:14:c7:14:fb:ff:aa:b3:cc:70:d0:1c:73:
                    0c:73:bf:37:41:34:06:e7:e2:90:80:b5:12:c4:d8:
                    6c:b8:81:bf:0e:83:0b:aa:c2:ad:2c:0d:b2:31:6b:
                    63:6e:31:bb:f1:7c:8f:fc:fb:17:24:2c:f3:47:1f:
                    ce:33:1f:2a:36:41:d2:cd:f4:d3:67:d3:35:24:66:
                    c0:9e:7e:02:fb:33:df:f6:60:bd:92:71:b0:32:48:
                    78:cd:90:2f:39:25:c6:d0:2f:55:88:2c:ac:06:ae:
                    4b:54:18:b9:74:0b:be:bb:28:a6:d4:8f:ba:50:12:
                    4a:05:a8:1e:01:10:3d:df:28:1a:ef:4c:36:2b:d5:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:B8:C9:C1:01:DF:35:DC:67:81:66:E6:20:F4:90:36:FE:8B:45
            X509v3 Authority Key Identifier:
                keyid:77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/323830333a653936303a3a2f33322d3332203d3e20323639373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e960::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:8c:aa:46:75:1b:b4:bb:25:62:c3:9b:b4:37:59:7d:30:
         d4:d8:42:8f:be:af:4f:45:09:59:8b:04:44:8b:ba:9e:10:a6:
         c2:7d:ad:eb:0c:e2:4f:bb:06:fe:ee:2f:0e:4e:5a:23:8c:a9:
         f6:70:dc:1a:cf:4f:4b:6d:58:1a:64:42:4d:ac:13:c3:99:2d:
         1f:01:52:8a:11:1c:95:84:6c:17:42:27:ab:b7:16:0f:68:e7:
         79:d6:47:0d:cf:2c:d1:10:14:c6:06:c2:17:56:d8:8b:c6:07:
         ec:b4:1a:50:b8:08:d1:55:6f:0a:cc:98:05:d2:00:c8:64:d4:
         3e:46:6e:59:16:4d:02:e7:cc:57:34:a3:dc:8b:5f:ea:d2:be:
         66:5e:0c:bc:c6:8f:03:d0:e7:1c:79:88:4e:74:58:2b:83:74:
         d6:19:ca:a9:36:b2:c4:f5:12:89:28:8d:9f:3d:20:36:4c:a7:
         bb:e2:99:0a:4f:e7:1c:76:16:b6:8d:ce:e9:7d:4f:98:34:f8:
         12:22:24:6b:03:bf:99:b6:85:44:92:2a:db:7e:31:06:2b:96:
         f7:f2:cf:ae:a6:96:25:d0:ce:97:97:b1:23:2c:c9:ba:5c:29:
         4e:4a:a9:77:68:d0:22:f3:5c:e0:f0:a1:69:4b:2a:1a:98:47:
         13:20:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org