Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa
File:                     323830333a376334303a3a2f33322d3536203d3e20323633383031.roa (raw, json)
Hash identifier:          CoNcAQwQ/kUkEA+d/HITEpogY8zpi0KtYAVT0O6FNDo=
Subject key identifier:   52:19:DF:1D:0F:9E:F4:28:93:80:1D:92:8F:DE:45:42:F1:BF:B2:BC
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       4322365D9CB41A7AAE8725806873198BC6503CA4
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa
Signing time:             Tue 05 Mar 2024 17:48:46 +0000
ROA not before:           Tue 05 Mar 2024 17:43:46 +0000
ROA not after:            Tue 04 Mar 2025 17:48:46 +0000
asID:                     263801
IP address blocks:        2803:7c40::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:36:5d:9c:b4:1a:7a:ae:87:25:80:68:73:19:8b:c6:50:3c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Mar  5 17:43:46 2024 GMT
            Not After : Mar  4 17:48:46 2025 GMT
        Subject: CN=5219DF1D0F9EF42893801D928FDE4542F1BFB2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:02:6e:18:a6:8a:9f:74:05:48:7c:26:18:
                    d4:84:ab:28:4c:83:c6:e1:79:7b:81:98:aa:15:63:
                    b6:f7:a3:c6:ce:82:4c:92:d1:94:14:58:64:1a:16:
                    b7:c6:dd:43:e4:3d:16:c8:ee:78:8b:bd:2c:56:4e:
                    58:74:d2:82:dd:3a:9c:10:c1:7a:85:7b:05:75:bc:
                    dc:bd:7a:c4:76:a7:80:23:cd:3c:c8:b9:ee:cc:dd:
                    51:d6:90:5f:2c:4a:f3:4b:86:24:50:4b:fb:32:c5:
                    c4:be:03:23:50:05:c3:b9:72:27:40:27:76:85:0e:
                    8d:e6:0e:01:1d:a4:ad:c8:f8:3f:75:4b:61:d0:a7:
                    65:d0:fe:a0:e1:91:ac:3d:ef:a9:63:fd:42:cc:3d:
                    c3:ed:a4:e6:ef:b0:77:ad:b2:e6:7b:0e:21:0b:7b:
                    15:42:44:d5:c7:2f:b3:5a:6c:44:3f:dc:72:6f:5a:
                    85:16:9e:43:58:be:53:df:41:9d:86:73:73:58:2a:
                    3f:da:f0:ee:57:2d:69:c2:56:0b:1b:b1:d4:50:78:
                    8e:b3:4b:b3:dd:8e:97:a2:7f:ad:d2:1a:8a:94:fa:
                    f8:71:94:8e:0b:e7:52:55:e7:dc:6a:a0:2d:cf:24:
                    76:78:94:f3:0a:a3:d5:cf:bb:3a:04:25:b8:1b:78:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:DF:1D:0F:9E:F4:28:93:80:1D:92:8F:DE:45:42:F1:BF:B2:BC
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/323830333a376334303a3a2f33322d3536203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:45:50:b9:67:81:27:23:6a:4f:97:46:ea:bd:36:53:41:2f:
         eb:d0:3d:47:43:39:73:9b:1f:0f:b4:75:20:0c:67:a0:2b:4d:
         ac:be:11:22:13:c0:72:25:68:4d:a3:38:b8:7c:24:c3:e9:97:
         c2:76:72:b6:e2:92:1f:45:59:22:0f:81:63:96:eb:f1:cd:b0:
         e1:d8:75:42:5e:22:79:61:06:06:90:32:01:a5:7d:bd:10:8d:
         45:28:67:9f:25:73:16:98:06:9d:df:2f:cf:4f:d0:c8:ca:a2:
         26:0c:2a:6a:42:2d:06:4a:97:b1:2d:18:3c:fc:5a:b2:05:c7:
         cd:44:55:9e:3a:3a:57:20:5f:db:a8:81:99:8a:62:4b:16:c9:
         bb:f0:26:99:87:08:4c:d8:f7:8e:a0:96:37:ee:98:5b:aa:90:
         3d:03:98:2b:5c:b7:68:35:36:a9:f5:e2:38:a0:5b:ef:f3:80:
         67:62:b0:25:48:93:e7:ff:8d:74:3a:bd:39:7c:3d:23:82:0b:
         c6:44:f6:03:ea:85:ac:f8:8a:ac:1d:30:84:1f:18:df:92:e9:
         81:d7:f0:ac:05:e4:bb:b2:4e:8d:17:5f:82:b3:31:77:a8:11:
         c9:f4:b9:03:1a:e5:a3:b0:62:84:e3:c7:c2:c1:72:cf:39:22:
         48:91:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org