Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa
File:                     323830333a623330303a3a2f33322d3336203d3e203532343535.roa (raw, json)
Hash identifier:          LKA4HaRPoRLC6JfobK3IAUBwYbuLgZSPTVxLJL6IZBQ=
Subject key identifier:   EB:DA:0F:56:02:B3:F2:25:86:21:F3:6A:91:29:E7:11:81:47:50:FD
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       7535A24108F4531EFAA1BD88B99C3AA9F1F614C9
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa
Signing time:             Tue 05 Mar 2024 18:19:40 +0000
ROA not before:           Tue 05 Mar 2024 18:14:40 +0000
ROA not after:            Tue 04 Mar 2025 18:19:40 +0000
asID:                     52455
IP address blocks:        2803:b300::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:a2:41:08:f4:53:1e:fa:a1:bd:88:b9:9c:3a:a9:f1:f6:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Mar  5 18:14:40 2024 GMT
            Not After : Mar  4 18:19:40 2025 GMT
        Subject: CN=EBDA0F5602B3F2258621F36A9129E711814750FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:56:dd:10:8c:dc:22:2b:ec:12:6d:36:48:
                    82:1c:5c:72:bd:4a:46:b3:05:15:e2:fb:30:a7:0c:
                    47:5a:1c:68:a6:c3:29:18:41:ff:7f:80:04:ba:da:
                    f3:a6:41:29:bf:39:81:79:4d:2a:76:3d:55:03:44:
                    17:38:1b:cd:a1:1d:cc:09:d4:6f:15:00:f3:bf:9f:
                    61:49:46:d1:b9:ff:89:81:cd:ff:6e:b9:ef:8b:63:
                    4d:cc:62:5e:24:c9:c3:5d:8b:ce:43:de:15:47:99:
                    9b:29:6d:48:68:a2:f3:f5:e8:5c:f8:02:22:62:c4:
                    aa:ae:fb:79:49:6b:66:06:9f:28:5d:17:da:dd:ad:
                    3e:7a:bb:e5:28:73:a2:77:68:85:ab:d9:ee:2c:84:
                    a7:f7:dc:72:79:cc:f6:a7:47:7e:97:fa:2c:9f:fd:
                    fb:f6:f5:39:4d:63:f3:62:ef:b7:10:fc:f9:86:67:
                    c1:5d:fa:1d:04:31:ef:1e:a3:67:6b:c2:c2:cd:4f:
                    9d:ca:7f:d0:6a:92:80:e3:d6:65:85:a1:4a:0a:f6:
                    cb:83:d6:9d:30:a1:03:ef:8b:cc:03:d2:6c:1d:12:
                    6b:29:b9:f1:94:64:9a:7a:b3:69:2d:f8:2d:8d:f3:
                    10:87:4f:fe:76:98:08:84:7b:d6:99:b1:68:59:c7:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:0F:56:02:B3:F2:25:86:21:F3:6A:91:29:E7:11:81:47:50:FD
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/323830333a623330303a3a2f33322d3336203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:88:99:f5:9d:3f:5d:1d:f3:d9:71:8d:da:2f:50:1e:6b:c4:
         42:70:0a:02:61:41:68:c6:2b:3a:b5:cd:38:b9:cc:c6:0c:35:
         42:46:3a:11:bd:1c:e9:ae:60:81:9a:b5:ce:07:fe:70:b6:bf:
         90:ad:72:f9:10:22:07:9d:cd:00:2a:d6:2d:95:8f:70:86:cc:
         11:c2:ff:c5:5b:7b:9a:0b:04:49:e7:5f:40:26:93:6d:ab:ee:
         ca:21:22:3e:87:2c:c8:9a:98:f8:06:98:6c:31:af:8e:b2:37:
         07:3d:04:75:85:6d:3f:93:4f:d4:a5:bd:26:e8:91:f5:6b:a7:
         ce:bb:2b:76:d2:a5:83:4b:a4:7d:a2:f7:9f:af:28:a4:12:1c:
         f6:bb:ed:c3:db:d3:64:9c:6c:1a:fc:4a:4b:f2:27:62:be:aa:
         2a:ff:52:47:4c:b0:e5:fd:ce:0e:05:d2:84:d3:c7:58:62:75:
         2f:d6:a1:94:fe:cd:69:42:c5:a6:74:67:e6:79:19:4d:30:15:
         ab:3d:01:7b:90:7c:3b:f9:8d:e3:f3:11:b5:6c:4b:19:c6:60:
         b7:5a:e2:9e:3f:57:28:69:5f:5b:6c:af:de:83:0f:38:ef:4a:
         3a:a9:20:d4:d1:a8:4e:80:cd:4f:fc:30:e5:f0:04:19:04:94:
         ba:86:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org