Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/323830333a646532303a3a2f33322d3332203d3e20323635383739.roa
File:                     323830333a646532303a3a2f33322d3332203d3e20323635383739.roa (raw, json)
Hash identifier:          1dQswGdMUOfFZzbK6ewTYxN4FU9a4F2wE078m7Qk6n8=
Subject key identifier:   F7:E0:1A:7A:0B:43:A5:80:27:B3:54:2C:7D:BE:55:F9:06:9E:FA:74
Certificate issuer:       /CN=0177C6B60623D01833350D5E67FA2F411729EA87
Certificate serial:       13A51A28A08F097551420E878C5FEFE6EDA86245
Authority key identifier: 01:77:C6:B6:06:23:D0:18:33:35:0D:5E:67:FA:2F:41:17:29:EA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/323830333a646532303a3a2f33322d3332203d3e20323635383739.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     265879
IP address blocks:        2803:de20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a5:1a:28:a0:8f:09:75:51:42:0e:87:8c:5f:ef:e6:ed:a8:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0177C6B60623D01833350D5E67FA2F411729EA87
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=F7E01A7A0B43A58027B3542C7DBE55F9069EFA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:ab:0f:18:3a:b0:11:53:24:36:5e:8e:e9:
                    2a:49:5d:6d:1d:d5:d0:bf:11:eb:d3:a8:2d:7c:70:
                    e0:d3:0d:18:6b:72:59:f9:c3:d0:5c:2c:53:fe:60:
                    04:b4:fb:b7:2d:7f:91:b8:f3:0f:c6:8a:57:0f:2a:
                    92:b5:35:73:1d:e4:eb:98:1c:0d:a9:37:06:76:bf:
                    c4:78:cc:e7:c5:52:72:0c:28:6e:d8:95:61:95:dc:
                    07:f1:9c:4e:23:2e:59:bf:8e:ea:b1:42:cd:6c:32:
                    92:ee:66:88:2a:18:7e:42:d9:d4:5d:81:16:8d:cc:
                    47:8f:4b:fb:eb:2c:f0:1e:cb:c1:33:7c:6e:1e:7b:
                    86:9b:66:58:ae:dc:95:51:eb:05:f1:56:7e:9d:42:
                    6c:6d:a7:6d:c0:47:38:da:e3:c1:4e:52:ba:fe:79:
                    56:b6:e1:61:3b:98:1a:2d:b5:43:27:41:28:4d:e3:
                    ef:e5:3b:11:8e:77:39:cb:4b:99:87:4d:91:17:b4:
                    a0:33:a1:b3:b1:f9:8f:d8:27:a3:80:cb:48:4d:93:
                    9b:6a:e0:23:e5:be:62:73:23:4c:6b:fd:59:5c:19:
                    26:db:bb:75:4a:90:6d:67:e1:3a:9a:84:55:bd:10:
                    70:84:6b:2d:69:4d:10:32:cb:02:b1:92:0a:55:93:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E0:1A:7A:0B:43:A5:80:27:B3:54:2C:7D:BE:55:F9:06:9E:FA:74
            X509v3 Authority Key Identifier:
                keyid:01:77:C6:B6:06:23:D0:18:33:35:0D:5E:67:FA:2F:41:17:29:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/323830333a646532303a3a2f33322d3332203d3e20323635383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:b1:ef:cb:73:9d:35:63:c6:6e:be:76:96:9d:ef:10:5a:
         dc:d4:db:a9:fd:18:da:5c:e9:de:33:33:f6:36:2c:11:6e:94:
         06:b3:b3:76:7e:5c:e0:3a:e7:5d:ec:40:c1:82:f7:65:a3:82:
         99:27:fe:1e:99:aa:99:07:4b:f0:9c:24:33:df:ac:56:4f:85:
         1b:44:a4:b3:10:99:4f:b4:22:36:8c:ff:a4:8e:83:0c:31:39:
         a0:95:d2:d5:b8:ae:2a:7d:5c:61:a7:da:24:c1:0e:36:d2:26:
         86:27:ae:e3:ae:b4:62:cd:5b:a3:04:8f:d0:b1:04:30:8a:f6:
         e8:3f:f8:ba:bb:4f:94:a5:be:41:db:a1:a6:8b:4f:66:ed:c4:
         7b:da:43:f8:89:af:34:de:bc:15:2d:58:73:6c:b5:c1:f3:b8:
         d4:7f:a6:8a:26:cc:77:bb:f7:dc:3e:f8:8d:03:e1:9e:fa:93:
         bf:a4:d8:18:b3:b9:e9:9a:46:a6:df:9b:5f:46:da:71:f4:8a:
         cc:f0:e4:80:c3:f4:c8:53:cb:33:2b:10:c9:23:fb:4c:63:84:
         27:8b:32:37:2a:a6:6c:3d:19:54:97:08:c3:23:3d:5e:cc:ec:
         2d:1b:54:e5:ac:67:5d:26:a4:e1:f6:d9:ed:ae:d3:39:5f:19:
         32:cc:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org