Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa
File:                     323830333a656138303a3a2f33322d3438203d3e203238303438.roa (raw, json)
Hash identifier:          +j/7GY2L1CUXiEu1HLPyC4FYGmPLL/69mJHrCQsJ43E=
Subject key identifier:   B7:D6:1D:DC:10:9B:D1:A5:4B:28:3A:98:2A:37:7D:E6:E2:33:F1:BB
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       6F2DF45FD71D9EE255D96EBC265E625861D68BFD
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa
Signing time:             Tue 05 Mar 2024 18:04:53 +0000
ROA not before:           Tue 05 Mar 2024 17:59:53 +0000
ROA not after:            Tue 04 Mar 2025 18:04:53 +0000
asID:                     28048
IP address blocks:        2803:ea80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2d:f4:5f:d7:1d:9e:e2:55:d9:6e:bc:26:5e:62:58:61:d6:8b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Mar  5 17:59:53 2024 GMT
            Not After : Mar  4 18:04:53 2025 GMT
        Subject: CN=B7D61DDC109BD1A54B283A982A377DE6E233F1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:74:cc:38:80:38:9a:7c:09:f9:f9:f5:11:
                    26:8f:a1:60:c6:4a:d8:f8:66:ad:c8:a8:24:fa:c7:
                    78:c4:0e:4c:fa:e5:4e:23:56:1b:3a:0c:b0:6b:21:
                    f8:86:7c:7f:b8:20:df:4c:48:6e:f5:78:e7:79:02:
                    b9:cb:0f:85:b7:dc:a1:fb:9c:e9:36:f6:8c:d0:16:
                    ee:fe:af:38:ec:5b:b0:3e:72:e7:97:74:b4:fd:69:
                    fc:0b:e3:1d:ce:a5:2e:40:eb:f4:bf:f1:be:0e:cc:
                    93:7f:d4:71:45:34:4e:cd:5d:9f:a6:da:21:33:ca:
                    f7:6c:b6:dc:42:d5:40:d5:e6:f5:04:6b:80:a1:ee:
                    f4:de:ef:29:1b:3d:81:17:aa:4d:7b:cc:97:15:d3:
                    5c:50:34:a9:a3:fd:bb:83:7e:dc:ce:c2:6d:83:01:
                    7b:47:31:fc:5c:11:f2:60:6a:aa:83:26:b4:f2:4a:
                    7b:d8:63:89:71:af:5c:84:9d:34:78:e7:f0:48:38:
                    de:6d:fa:ce:50:e2:af:22:ce:cb:ae:83:f4:39:c8:
                    b4:ba:cf:ba:51:11:44:72:2a:34:43:55:04:51:74:
                    21:b5:2b:f2:70:d3:65:b7:4e:fe:8c:65:27:f9:4e:
                    b3:f4:8d:c5:1d:bc:eb:68:2c:c7:a9:70:58:ca:2b:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:1D:DC:10:9B:D1:A5:4B:28:3A:98:2A:37:7D:E6:E2:33:F1:BB
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/323830333a656138303a3a2f33322d3438203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea80::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:fa:2b:b8:53:17:64:0b:89:09:2c:0a:59:b9:3c:e4:f2:
         4a:ab:64:97:9f:61:97:23:28:89:4c:42:f7:b3:3c:3d:dd:4c:
         ac:d3:38:33:2d:17:5d:69:16:b3:16:3b:22:9e:f5:62:30:fd:
         16:80:70:5c:67:90:a1:6c:9c:32:12:24:ce:d4:24:82:93:0f:
         5a:fd:81:91:23:15:f5:be:13:00:ed:81:60:bc:65:5d:ef:02:
         72:2d:14:8b:a0:c7:7c:01:bd:ce:50:30:b5:bc:6f:86:1a:c5:
         36:cc:5d:ce:cf:ab:95:1a:4a:a8:66:2f:d5:fc:80:ac:d9:4d:
         7e:ca:de:1d:7c:91:6e:b1:a6:0c:28:ac:f0:e7:55:cb:88:2f:
         4f:f0:fd:01:57:9a:af:27:3a:05:cb:15:1b:8a:30:fb:27:a0:
         63:a9:b3:cd:ed:b4:56:6f:34:4e:86:33:41:62:a3:a4:6e:57:
         ec:5f:b1:98:10:cd:0b:2a:a4:9b:54:c7:7a:66:e8:ef:c0:a5:
         fc:41:81:18:4b:ea:02:06:a6:66:dd:0d:74:25:3b:f9:9c:66:
         43:1f:5f:16:21:7f:cc:0a:c1:dd:ee:35:e0:5b:99:d1:de:3f:
         ec:04:fc:36:d8:a9:c8:10:7d:9e:f6:cb:b5:45:6e:89:c2:d7:
         cb:d3:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org