Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/323830333a653532303a3a2f33322d3438203d3e20323636363837.roa
File:                     323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (raw, json)
Hash identifier:          GRwf/zyLUHCcvXDdbVw+iik/FLvvamhusE+Sxyd5ICY=
Subject key identifier:   2F:B7:C4:0B:B1:EF:5B:2C:3D:39:CE:6E:09:33:42:55:DA:7A:B8:20
Certificate issuer:       /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
Certificate serial:       0F1F1C3690CBAD6F2D63582C894E0829F94B252A
Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/323830333a653532303a3a2f33322d3438203d3e20323636363837.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     266687
IP address blocks:        2803:e520::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1f:1c:36:90:cb:ad:6f:2d:63:58:2c:89:4e:08:29:f9:4b:25:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=2FB7C40BB1EF5B2C3D39CE6E09334255DA7AB820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:86:0c:54:5c:52:e1:33:9d:ff:26:71:3a:
                    98:25:5c:d9:7b:7b:2e:e6:a8:45:0b:ae:2e:be:ce:
                    2a:94:ca:7a:2b:d8:24:ec:f9:d4:69:eb:2b:9d:9c:
                    52:10:85:43:54:7c:c0:52:f5:fc:ee:5f:59:e1:2f:
                    71:46:00:0d:b3:ab:c3:4b:48:83:07:a1:9f:09:8d:
                    3d:30:8f:53:bc:e1:70:fb:4a:82:a0:a5:19:8d:74:
                    7d:da:e1:88:ee:ab:e8:64:16:20:22:7e:aa:e9:45:
                    ef:c9:a0:10:8d:b2:96:01:4b:c1:dd:cd:b6:f9:e9:
                    68:d6:0d:af:d5:21:9b:f6:08:6c:1b:b7:72:a6:05:
                    f7:45:99:04:03:72:d0:74:6d:ee:30:84:5b:c3:ab:
                    f7:3c:c3:9d:a7:80:4a:2d:dd:c7:38:0f:fe:1f:6c:
                    e3:4c:27:04:79:5b:2d:a3:2d:f4:04:ea:e0:ea:29:
                    b3:92:77:ce:61:21:f6:ca:ef:06:88:5f:b2:b3:3d:
                    f5:8b:e8:e2:6f:c7:be:79:88:a9:0f:dd:49:a4:07:
                    ef:13:fe:3d:94:16:fc:01:8f:76:63:5d:cd:5d:67:
                    d5:15:0a:bf:3e:9a:7b:1b:37:70:14:16:45:ed:19:
                    1d:be:99:8e:8a:41:9c:78:1c:53:05:c3:75:7e:79:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B7:C4:0B:B1:EF:5B:2C:3D:39:CE:6E:09:33:42:55:DA:7A:B8:20
            X509v3 Authority Key Identifier:
                keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/323830333a653532303a3a2f33322d3438203d3e20323636363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e520::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:b8:45:fd:01:d2:d1:4b:40:94:6d:1a:54:5c:69:93:dc:
         f8:73:4d:8d:62:58:84:44:e2:46:a8:05:53:41:ac:56:60:c7:
         c7:71:b0:9e:07:d1:6e:6e:7b:1c:d4:6b:c5:a4:a8:6c:dc:a5:
         cf:63:05:32:39:c7:8a:e1:d8:bc:cc:96:81:79:db:90:14:9f:
         e1:b8:57:27:5b:86:3b:c6:f3:a4:d8:0f:16:69:48:ae:e3:08:
         eb:4c:59:6e:25:09:96:2b:53:03:1a:8f:bc:50:31:7f:e1:68:
         24:c6:db:71:05:be:dd:58:42:86:23:6b:00:09:f9:c3:f4:ca:
         ab:29:c3:f6:dd:7f:bb:f8:7a:e4:03:db:89:2b:28:32:6c:19:
         66:06:37:df:89:01:3b:92:fd:02:60:8f:f7:8e:1a:2c:29:1b:
         f2:d7:8b:b0:79:70:5c:7f:9c:31:10:06:db:67:27:60:e1:79:
         07:a5:1f:2d:cd:5b:13:bb:44:5c:7f:b4:92:bb:33:4c:a2:55:
         b1:6d:7e:bf:92:5f:28:3e:d6:52:c8:c9:28:15:c6:08:d4:a2:
         bf:ad:25:87:f4:d0:93:cd:c4:24:99:9f:3f:f9:6a:74:19:9d:
         c8:ad:70:08:a2:2d:84:89:47:6e:31:71:c0:b9:45:62:c0:81:
         30:ea:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org