Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
File:                     323830333a386663303a3a2f33322d3438203d3e20323636373637.roa (raw, json)
Hash identifier:          RBzs7aaE42eAhWyF7XfLhamiHvpMhTToiIiW7e+UcV4=
Subject key identifier:   D5:E4:3D:B1:40:94:64:A5:F5:A8:2D:11:5B:C7:4F:BB:A9:73:D7:3A
Certificate issuer:       /CN=B639E65ACFC73F2B9C830A20801066140D1966F6
Certificate serial:       610988C0292843A7F9577586A40D8E013B222F8A
Authority key identifier: B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     266767
IP address blocks:        2803:8fc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:88:c0:29:28:43:a7:f9:57:75:86:a4:0d:8e:01:3b:22:2f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B639E65ACFC73F2B9C830A20801066140D1966F6
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=D5E43DB1409464A5F5A82D115BC74FBBA973D73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:8b:f5:cb:a9:4c:fb:92:41:6b:4f:ef:90:
                    15:c2:f9:7f:7a:05:b5:ec:19:a8:70:67:92:e9:d0:
                    9a:d3:63:91:71:c4:68:ef:d1:a1:4f:e8:7a:c1:c9:
                    b1:96:30:5d:30:d8:60:22:03:3e:23:21:b0:f2:33:
                    71:d1:17:df:9a:5a:95:30:2d:5f:10:4b:0c:50:4d:
                    8e:0c:1c:6a:e8:0f:83:f5:36:3b:2a:94:72:16:df:
                    06:dd:a1:f1:13:4a:4b:d2:1a:d7:45:6e:36:fa:dd:
                    4e:3f:80:7a:90:c7:3d:ce:6d:17:7f:fd:2f:ad:72:
                    6a:64:5b:2d:12:ef:7a:d8:71:05:c0:06:3d:d2:3f:
                    09:08:58:0a:de:b9:e2:5e:93:72:06:69:77:ff:6c:
                    08:69:f8:f2:c7:1c:83:a7:03:aa:cc:6c:8b:f4:0a:
                    49:c9:ea:97:df:7a:44:3f:99:2e:9c:93:c8:10:85:
                    a0:79:d0:c8:ef:1d:22:79:62:cb:7e:83:ea:36:db:
                    d8:8e:ae:9f:d7:ba:ec:8b:34:8d:57:ca:45:c8:1c:
                    b2:8a:b6:fb:71:df:5b:e5:71:14:56:56:cb:c4:77:
                    83:1c:0e:c9:27:c6:af:e3:cf:71:c9:8a:f5:78:17:
                    00:50:44:0e:63:eb:42:57:10:c1:4d:32:d4:2c:8a:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:3D:B1:40:94:64:A5:F5:A8:2D:11:5B:C7:4F:BB:A9:73:D7:3A
            X509v3 Authority Key Identifier:
                keyid:B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/323830333a386663303a3a2f33322d3438203d3e20323636373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:56:27:63:47:be:3b:fb:c7:54:c7:93:c9:29:fb:23:56:e1:
         f1:8b:18:19:b6:9a:49:b3:93:e7:c3:04:f0:68:d1:9f:97:37:
         99:d9:a0:89:a6:5e:a8:b9:10:b4:05:be:3a:6b:8d:4c:df:ad:
         2f:23:07:f1:92:86:27:5c:fc:7a:95:a3:66:86:b7:41:93:aa:
         34:b6:1f:07:51:47:77:06:22:2a:24:db:39:6c:d4:8d:36:f1:
         d9:ea:b5:64:30:19:86:b8:f8:21:16:dd:f1:2d:38:fd:12:3f:
         09:d7:1a:47:54:a5:5a:34:68:2b:7d:bc:97:54:0b:f5:72:95:
         df:4f:d7:62:bd:24:89:98:ca:3e:8d:e3:91:f2:e0:f1:58:4d:
         f6:02:1e:d9:cc:6a:7f:99:ce:cb:6e:24:b5:14:a7:a1:f4:50:
         de:05:7c:42:bc:93:6d:9f:0b:43:ec:bb:2a:ea:0f:32:19:7e:
         91:e4:aa:44:41:ee:c7:02:ea:fb:28:93:10:33:cc:2e:4c:b2:
         2a:a1:8d:b8:9b:b7:5c:9d:78:6a:f2:15:ec:77:bf:b8:9a:7b:
         3f:8f:f6:f8:19:c2:fb:9b:bd:aa:25:41:6b:c1:35:85:c0:fc:
         53:e3:12:9d:6a:b0:7a:ab:40:6f:14:c2:2e:76:f1:a3:65:d0:
         2c:b2:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org