Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
File:                     323830333a353363303a3a2f33322d3332203d3e20323635373435.roa (raw, json)
Hash identifier:          8VnxQrL55OpqaLOQY64290g9XPoLMP54L3AIUsbCf0I=
Subject key identifier:   C5:6D:03:CB:D4:76:DA:AA:80:87:CE:C4:1C:E3:89:DF:92:57:AD:FA
Certificate issuer:       /CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
Certificate serial:       0387F63849BCFD9591F3CB1F0B913CEE11A9B4F6
Authority key identifier: B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa
Signing time:             Tue 05 Mar 2024 17:55:35 +0000
ROA not before:           Tue 05 Mar 2024 17:50:35 +0000
ROA not after:            Tue 04 Mar 2025 17:55:35 +0000
asID:                     265745
IP address blocks:        2803:53c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:87:f6:38:49:bc:fd:95:91:f3:cb:1f:0b:91:3c:ee:11:a9:b4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5D842BD397DD5D3B222DB13AB60EB744BA890
        Validity
            Not Before: Mar  5 17:50:35 2024 GMT
            Not After : Mar  4 17:55:35 2025 GMT
        Subject: CN=C56D03CBD476DAAA8087CEC41CE389DF9257ADFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:aa:f1:16:f3:8d:a6:25:11:e1:94:0e:0d:
                    72:ff:87:02:51:f0:0f:8e:0a:18:5a:4b:72:0a:34:
                    6e:bf:37:60:99:0d:24:d0:54:24:24:6e:6f:e5:b3:
                    15:27:67:b8:4c:69:7a:ec:36:2e:df:b2:cb:65:8e:
                    86:9e:a5:67:d3:ad:cb:80:a7:3c:7a:85:51:f3:88:
                    19:54:11:d3:af:23:4d:0b:f1:64:ed:c3:e8:59:ea:
                    79:fd:01:e1:20:53:3a:94:f6:6a:70:16:50:b0:58:
                    a3:5b:48:39:d1:e9:1b:8d:60:c5:a7:be:b4:f4:e1:
                    69:8d:c4:46:6d:b4:31:d8:07:ba:65:a2:c0:f3:60:
                    e7:e0:f6:9d:5b:fb:3f:96:3e:af:ea:1e:d3:40:8b:
                    6e:db:39:a7:d0:bf:ff:df:f2:fe:e1:3d:ac:5f:68:
                    fd:c2:77:59:4f:ba:bd:67:7f:c6:79:e5:15:fc:81:
                    cb:c8:41:6e:3c:90:7d:37:92:d7:a7:2f:6d:ba:54:
                    64:fa:ed:61:1f:2c:33:00:7b:68:a7:6c:e6:62:f1:
                    29:e6:ee:e1:22:8f:1e:20:f6:00:6c:c6:5d:95:4a:
                    8d:ff:60:a9:c6:15:26:ba:d4:b0:37:23:10:2e:bd:
                    88:47:45:b3:86:c0:0b:1e:a0:e2:86:2d:da:cc:88:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:03:CB:D4:76:DA:AA:80:87:CE:C4:1C:E3:89:DF:92:57:AD:FA
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D8:42:BD:39:7D:D5:D3:B2:22:DB:13:AB:60:EB:74:4B:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A5D842BD397DD5D3B222DB13AB60EB744BA890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA05E9892CDA4FDBA9721F67CAF8F4346D71C6856EBE2BF3FAE80696979D607/0/323830333a353363303a3a2f33322d3332203d3e20323635373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:c8:cb:5c:73:ca:ef:17:80:e2:bc:73:14:a8:82:97:29:
         d4:7c:82:17:bb:b5:0b:5e:d8:34:74:60:f8:fe:cc:a7:82:f2:
         91:dd:20:19:1c:bf:af:bc:6b:02:b7:cf:b9:e8:85:70:2c:66:
         c2:d4:61:15:12:24:35:a1:ed:a1:e3:ad:c2:79:29:1b:6c:fb:
         ba:0d:55:35:42:50:df:b1:47:ca:63:36:83:62:3e:70:a2:8c:
         20:d4:0c:63:0f:66:eb:d1:e5:a1:e8:13:52:10:51:81:17:80:
         25:24:85:64:9e:b3:4d:62:fb:55:1c:a0:72:8e:9f:4e:9f:99:
         c6:01:78:97:8b:db:8f:8b:c4:cc:8f:98:07:a8:66:16:3c:cd:
         52:39:e5:93:57:39:92:37:09:de:63:0c:cd:be:c1:ea:f3:68:
         e9:30:f9:5e:f9:cc:36:32:eb:f9:d4:58:b9:02:c5:63:19:3e:
         d0:0c:80:4d:16:f9:83:05:d6:dd:7d:ee:d3:82:eb:3a:aa:4b:
         5f:d4:ef:a8:34:2b:93:f8:a4:93:86:02:20:7d:7c:0c:5d:7b:
         75:03:18:88:82:ea:7b:21:e5:58:bc:d5:35:0c:19:8e:30:de:
         12:70:a5:a1:35:e1:a7:d5:4c:46:d9:d8:e3:57:de:23:f9:72:
         06:44:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org