Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa
File:                     323830333a373863303a3a2f33322d3332203d3e20323634373931.roa (raw, json)
Hash identifier:          6P02ivJffWTEHFhbA344VpOUyP/h7NYP8iIhSLhQ4XU=
Subject key identifier:   69:C8:08:FB:AD:81:29:1A:20:06:DE:EB:6E:CD:5D:82:6D:E3:F7:6A
Certificate issuer:       /CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
Certificate serial:       5595B62EFBEBB221C7C6AD7A8A54E3F432360F4A
Authority key identifier: 33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa
Signing time:             Tue 05 Mar 2024 17:50:40 +0000
ROA not before:           Tue 05 Mar 2024 17:45:40 +0000
ROA not after:            Tue 04 Mar 2025 17:50:40 +0000
asID:                     264791
IP address blocks:        2803:78c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:b6:2e:fb:eb:b2:21:c7:c6:ad:7a:8a:54:e3:f4:32:36:0f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
        Validity
            Not Before: Mar  5 17:45:40 2024 GMT
            Not After : Mar  4 17:50:40 2025 GMT
        Subject: CN=69C808FBAD81291A2006DEEB6ECD5D826DE3F76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:a5:c7:52:e8:51:06:df:b5:68:ff:b0:b9:
                    9b:56:11:8c:00:49:6b:a3:fa:08:d2:a7:e9:13:57:
                    97:81:cc:4d:58:10:81:82:6b:69:5d:0a:50:aa:58:
                    5f:f0:7a:92:7e:75:de:09:35:e2:9b:20:3b:4b:3f:
                    40:a0:70:48:9c:41:a3:9c:e2:cf:f6:d9:de:ae:92:
                    ad:9c:85:50:72:c2:5a:e3:c6:50:f7:08:fd:ba:fb:
                    ff:f6:7b:6f:31:67:ce:36:f7:78:0b:30:f7:48:05:
                    a2:c6:06:7b:90:56:1f:2b:e4:c7:9c:2f:7c:16:38:
                    3e:d6:23:dc:a8:a4:09:da:e2:fc:d7:96:1d:44:fe:
                    87:bc:99:dc:5e:c7:f6:67:89:48:c7:71:7e:bb:da:
                    de:aa:57:60:9a:f0:a1:bc:de:bc:b2:f0:07:6f:44:
                    73:13:63:5b:e7:7f:40:ec:bb:8f:49:84:17:59:1e:
                    90:3b:16:56:51:22:e1:85:d2:ad:1f:d9:50:ef:7c:
                    fc:49:b6:cf:f5:e6:4c:4e:1a:4e:cc:85:a0:45:4f:
                    28:a2:c7:75:01:68:a3:ec:9f:82:be:46:40:18:47:
                    09:ee:a2:22:b3:8d:40:70:42:7a:26:66:4b:77:64:
                    aa:de:1e:04:28:0d:3e:7a:19:c7:cc:29:46:4c:51:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:08:FB:AD:81:29:1A:20:06:DE:EB:6E:CD:5D:82:6D:E3:F7:6A
            X509v3 Authority Key Identifier:
                keyid:33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/323830333a373863303a3a2f33322d3332203d3e20323634373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:78c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:56:11:d9:b1:54:f4:fe:bc:41:79:83:99:c0:a0:29:64:4e:
         11:17:65:9f:90:62:02:87:a5:74:dd:4e:7d:bf:84:b2:80:14:
         85:c2:92:91:89:6c:21:e2:fe:74:af:b7:88:f0:17:0c:a1:a9:
         6d:3a:32:69:6b:8d:23:50:24:93:c6:8c:2f:de:7f:7e:53:88:
         7e:10:8e:d9:36:b3:0f:59:b1:10:f0:f8:6d:8a:0b:a8:e6:1a:
         af:cb:c9:d1:b1:05:32:3c:33:85:1b:66:40:58:2f:2d:d0:fb:
         fc:60:1b:ec:bb:9b:16:b6:4e:3e:91:b7:2f:f6:1d:ad:c0:b3:
         bc:3b:a4:86:f0:53:2a:f0:0f:dd:a2:22:bb:d2:cc:a0:4d:2f:
         ab:09:af:cc:1c:d6:40:98:27:b0:76:68:18:8b:93:19:c8:9a:
         0c:0e:c6:c1:6e:bc:a0:ca:74:1b:2a:ba:82:c2:c2:b8:11:b4:
         eb:fa:37:1b:53:88:dc:68:86:3a:4d:78:54:9e:ea:60:fd:ee:
         15:6b:80:5c:b4:e4:35:7a:cd:dc:a4:90:3c:a7:8c:ce:78:1e:
         c2:db:08:25:25:2d:45:36:48:6e:63:bd:14:df:77:dc:2d:70:
         c1:28:fc:73:4a:8f:92:dc:8a:19:01:29:68:7b:e5:e0:c3:31:
         7c:34:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org