Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
File:                     323830333a353834303a3a2f33322d3438203d3e20323632313435.roa (raw, json)
Hash identifier:          Lblhokqw0Umg4tHDHsKvzHuAO1/6FoVw5JVL1rs7RNk=
Subject key identifier:   AF:39:36:4B:B7:9C:23:F4:E7:6F:83:C1:F9:03:FB:E1:02:E2:9D:76
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       273F8BDF3E704AE8D7D0BCA3B6F08AD702C18F11
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa
Signing time:             Thu 08 Aug 2024 21:30:00 +0000
ROA not before:           Thu 08 Aug 2024 21:25:00 +0000
ROA not after:            Thu 07 Aug 2025 21:30:00 +0000
asID:                     262145
IP address blocks:        2803:5840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3f:8b:df:3e:70:4a:e8:d7:d0:bc:a3:b6:f0:8a:d7:02:c1:8f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Aug  8 21:25:00 2024 GMT
            Not After : Aug  7 21:30:00 2025 GMT
        Subject: CN=AF39364BB79C23F4E76F83C1F903FBE102E29D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:60:67:f4:14:8f:43:e0:41:13:c8:ba:55:
                    a1:9e:08:68:44:1e:6a:24:91:fd:af:31:e0:50:0c:
                    fe:4e:42:10:9f:66:c7:93:c8:58:b4:aa:0a:1d:77:
                    f5:a6:9c:1a:56:22:71:45:f1:7a:34:ee:b2:68:8a:
                    2b:4e:32:e9:46:a6:04:c6:b5:30:3b:ba:41:94:46:
                    15:93:9f:10:65:88:33:6a:0f:fd:1c:c9:bd:28:06:
                    c1:66:56:ef:37:c3:8e:41:02:25:e4:c6:1c:a2:36:
                    ed:16:2f:49:fa:d4:3c:33:79:e7:1a:44:3f:ba:40:
                    66:6f:26:2b:e8:65:c1:9a:b2:ec:26:4e:72:16:e2:
                    85:b5:be:74:f9:a7:59:8c:71:e1:16:db:04:04:a6:
                    4b:ba:cf:2b:98:2f:47:06:25:5c:20:77:74:78:5d:
                    d6:e3:a2:e4:a2:cc:1d:05:22:3b:9a:28:9a:c3:2f:
                    64:7c:ac:87:dd:04:e0:83:e0:34:f2:8a:e5:9d:c3:
                    b9:2b:b2:59:ae:8a:55:20:3f:b5:b9:14:15:99:2f:
                    7d:5e:c8:ab:64:7e:da:dc:ed:8d:e7:fc:ce:ce:72:
                    c6:05:97:06:90:b6:75:82:d9:1b:4d:66:c4:85:5b:
                    41:a4:56:91:8c:2f:5b:fa:d5:c3:5b:f8:8f:01:03:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:36:4B:B7:9C:23:F4:E7:6F:83:C1:F9:03:FB:E1:02:E2:9D:76
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3438203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:74:9c:66:56:ed:e1:b8:e6:85:1a:94:5c:14:f0:9d:bb:
         24:8e:3e:7d:69:9d:97:d9:4c:a1:c5:46:5d:03:af:d0:7d:d1:
         66:93:14:cd:ba:00:7a:3b:88:4b:62:37:fc:ad:12:38:44:9a:
         9f:ed:62:c3:f9:42:3b:f3:39:e2:c1:7d:d5:2f:a7:fd:5e:77:
         f5:d4:c3:ba:8e:43:36:a8:80:61:9f:f1:18:7b:b4:27:d8:6b:
         d6:1f:14:f6:74:45:a7:72:0b:f4:fb:3b:40:d0:67:86:05:4c:
         24:08:93:fb:39:55:22:b2:c1:c9:7e:21:cb:ab:15:27:c1:d4:
         b3:1f:c4:20:26:36:18:66:e8:cf:ed:ec:56:a1:be:ed:ec:9e:
         c3:11:d3:ad:48:88:90:05:95:63:b7:f8:25:a4:5e:c5:c5:88:
         4f:4c:ac:2c:09:30:c0:1d:39:98:df:da:18:a0:63:d1:b7:9d:
         e5:a5:1d:b4:eb:59:dd:7b:2e:59:99:a2:55:71:7f:25:e6:eb:
         a1:74:76:21:d3:f4:3e:f1:f9:97:a6:d9:24:bf:d9:eb:c4:1e:
         3c:bc:87:fc:47:25:69:53:f0:f9:ad:13:62:c6:d5:bc:83:5a:
         a3:c3:02:a4:41:d3:d6:a2:e5:87:78:fe:fd:fa:2e:2c:a5:a7:
         fd:fd:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org