Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/323830333a363538303a3a2f33322d3332203d3e20323635383339.roa
File:                     323830333a363538303a3a2f33322d3332203d3e20323635383339.roa (raw, json)
Hash identifier:          bUCYF05RS3ClF28npQfJOeOuch4keuDwvpEF7jdlvcY=
Subject key identifier:   BC:32:42:AB:90:AC:E6:7C:BA:4E:1E:A7:AF:49:BE:8F:EC:1A:77:16
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       553E734185F410FEFCC2283B284C7A74D2B770F5
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/323830333a363538303a3a2f33322d3332203d3e20323635383339.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     265839
IP address blocks:        2803:6580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3e:73:41:85:f4:10:fe:fc:c2:28:3b:28:4c:7a:74:d2:b7:70:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=BC3242AB90ACE67CBA4E1EA7AF49BE8FEC1A7716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:72:98:94:de:75:2d:20:ad:b8:aa:fd:cb:
                    21:5a:ee:30:5c:db:3f:87:f0:b2:0c:ea:c5:92:79:
                    8c:37:7e:ce:4a:89:39:90:ca:a3:c8:66:58:88:d6:
                    3b:b7:c2:8d:72:c1:71:26:49:7d:55:47:17:18:92:
                    5d:1d:a7:29:54:12:c7:ef:9d:c6:dc:8c:68:5e:39:
                    e0:c3:60:6b:6e:13:17:fb:a2:33:e9:57:ee:30:46:
                    ab:55:53:a2:15:78:74:28:20:6f:c9:c3:99:15:ce:
                    25:cb:7a:7d:8a:33:95:f6:5a:62:bb:a7:61:09:7b:
                    ab:25:bc:33:cb:fa:4d:1f:68:50:94:23:35:23:ad:
                    2c:c4:00:39:aa:e8:a3:d9:21:cd:fa:46:b5:f1:00:
                    42:cd:c8:9f:1d:13:59:e1:e7:3c:a8:f4:b0:8b:8e:
                    61:d3:be:a2:41:16:02:93:88:eb:2f:9b:28:5d:98:
                    b6:cc:58:d2:59:b7:da:95:9f:43:98:d2:d4:ff:5f:
                    ce:c3:81:82:97:63:fa:30:5f:66:6e:a8:d9:eb:35:
                    de:43:9b:35:78:71:b2:40:cc:20:7a:d0:fd:2e:66:
                    20:06:43:24:1f:93:cc:95:c8:07:97:1d:83:17:8d:
                    fc:94:50:88:ca:78:d5:36:00:6f:6c:18:ee:40:96:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:32:42:AB:90:AC:E6:7C:BA:4E:1E:A7:AF:49:BE:8F:EC:1A:77:16
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/323830333a363538303a3a2f33322d3332203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6580::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:39:29:e1:51:0d:82:b9:ba:88:b4:da:cf:d6:9a:e9:47:3d:
         fc:e1:8f:3d:75:55:0a:db:58:ee:ef:bf:9a:f2:07:2f:ac:52:
         1d:2d:e7:74:bd:c0:09:00:6c:c0:e9:f0:dd:a4:27:c2:37:df:
         65:1e:2b:8a:b6:44:c4:54:e2:e0:ed:a6:10:22:85:1a:4e:67:
         d8:13:90:c4:b1:1c:7b:e1:66:c3:6b:23:61:f7:6c:17:16:03:
         19:b3:a5:bb:73:a3:7a:32:97:3d:a9:c2:fd:83:2d:52:ea:43:
         0a:ee:43:5f:19:0d:62:0b:d9:ed:5f:62:21:6c:07:38:f0:3a:
         77:0d:8b:9b:19:dc:1e:ba:a9:ce:79:78:e6:62:53:bb:3d:13:
         7a:4a:b2:f9:3a:00:ef:17:5d:58:76:f4:65:09:44:f6:12:17:
         c4:21:7f:30:27:cd:11:8f:b2:c1:8c:2a:11:ee:3b:be:11:10:
         14:a8:91:f0:c4:d6:fb:4f:39:2b:d3:f4:f8:20:e7:4a:64:8a:
         c2:f2:d8:d4:8b:4d:74:23:52:78:48:da:a6:e9:98:26:b3:a8:
         c1:65:fb:20:ea:47:63:cf:5f:92:3b:6d:58:91:62:32:27:b2:
         48:84:b2:15:af:2b:3d:4b:1a:6e:ee:f9:ad:58:a0:a9:c7:5c:
         e4:f2:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:48 2024 by rpki-client on console-ams.rpki-client.org