Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/323830333a653561303a3a2f33322d3438203d3e20323637373239.roa
File:                     323830333a653561303a3a2f33322d3438203d3e20323637373239.roa (raw, json)
Hash identifier:          Mwyw9NMViAd3Z/JzIKE+R8/OwuIeU5qsbUW1hFkKocA=
Subject key identifier:   E3:5B:5A:17:27:E3:C1:57:D7:94:B0:D1:2E:FD:95:44:D6:87:38:7C
Certificate issuer:       /CN=F9CEC307FF91092A2F7FB4205641318B887562C4
Certificate serial:       017E822DAD99EFE3AFBCAE0F02187130D3DDEC61
Authority key identifier: F9:CE:C3:07:FF:91:09:2A:2F:7F:B4:20:56:41:31:8B:88:75:62:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/323830333a653561303a3a2f33322d3438203d3e20323637373239.roa
Signing time:             Tue 05 Mar 2024 18:00:53 +0000
ROA not before:           Tue 05 Mar 2024 17:55:53 +0000
ROA not after:            Tue 04 Mar 2025 18:00:53 +0000
asID:                     267729
IP address blocks:        2803:e5a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:82:2d:ad:99:ef:e3:af:bc:ae:0f:02:18:71:30:d3:dd:ec:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CEC307FF91092A2F7FB4205641318B887562C4
        Validity
            Not Before: Mar  5 17:55:53 2024 GMT
            Not After : Mar  4 18:00:53 2025 GMT
        Subject: CN=E35B5A1727E3C157D794B0D12EFD9544D687387C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:bb:1f:5f:84:12:fc:bf:a7:c7:a4:ef:86:
                    fe:98:f4:59:0f:fd:a1:70:e6:a9:56:fa:07:42:de:
                    af:f4:b0:0f:4b:f9:00:45:4f:65:cb:5a:ad:03:1a:
                    c0:14:6c:55:54:80:6a:e4:18:95:b4:ec:24:bf:42:
                    cc:bc:97:73:d0:50:8a:b8:43:6b:02:76:c5:ef:98:
                    a0:58:e6:3b:ac:1f:8f:6e:75:fb:8f:33:26:44:fe:
                    e0:80:d5:a1:85:19:8c:34:1f:73:08:36:ef:57:22:
                    c0:28:fd:72:04:cc:06:a8:15:1b:3d:d9:f8:a9:17:
                    5a:e0:c5:77:93:38:7e:c6:4a:ed:87:c1:1f:e9:0b:
                    cc:01:d2:ab:1b:a8:a1:62:88:65:fe:20:00:07:eb:
                    65:09:3f:70:9a:07:28:d3:66:91:4f:83:b2:f9:0b:
                    e5:91:46:e9:a5:b0:cf:b4:f3:a3:7d:ad:c7:d5:5e:
                    b1:0e:8d:0b:08:07:07:3d:4c:92:79:da:1b:f5:f9:
                    7c:87:be:c0:2b:33:ef:c0:ae:5f:92:4a:59:ab:b5:
                    f7:58:05:f5:90:05:05:dc:f6:0c:43:75:6b:cd:e6:
                    63:b1:bc:6c:0f:42:0d:16:ab:fc:70:fe:ff:ed:b7:
                    7a:3a:f7:8d:ea:c1:e8:f7:13:c3:c8:cd:ef:ea:65:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:5A:17:27:E3:C1:57:D7:94:B0:D1:2E:FD:95:44:D6:87:38:7C
            X509v3 Authority Key Identifier:
                keyid:F9:CE:C3:07:FF:91:09:2A:2F:7F:B4:20:56:41:31:8B:88:75:62:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/F9CEC307FF91092A2F7FB4205641318B887562C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9CEC307FF91092A2F7FB4205641318B887562C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A5752E9473D66F970EAF6575B6672AA932750CCA656A54D727AADB9F530D7B2/0/323830333a653561303a3a2f33322d3438203d3e20323637373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:c2:18:99:4f:45:18:dc:60:0c:aa:96:61:11:5f:50:9a:
         22:28:11:46:08:3c:da:4f:8c:33:08:95:40:66:85:77:88:4b:
         c6:21:24:c7:f1:1c:aa:7d:be:0a:4b:6a:6b:8d:39:fa:0d:09:
         1c:b1:32:17:93:28:2a:c0:c8:1d:98:7c:c0:2c:3b:f9:78:5f:
         36:44:b6:32:c9:cf:35:bd:77:10:6e:63:89:06:17:6a:37:91:
         c2:33:ea:a5:e3:7c:66:41:be:30:f5:1e:79:2d:dc:da:ee:a5:
         21:2b:5a:3e:83:b9:ce:f2:f2:94:ef:97:1d:10:2e:a6:ae:34:
         62:7c:54:b4:95:3b:3b:e6:ea:8c:bc:05:b7:8c:ab:b2:84:f1:
         06:18:d7:91:57:6c:63:de:2b:e1:95:95:9e:f6:a7:a1:e9:17:
         24:48:77:a9:77:72:f0:09:73:83:fe:e8:84:2e:2c:e9:6c:b1:
         1a:98:a4:b0:53:db:78:9a:25:24:ee:31:0c:fe:b8:b2:f0:be:
         e1:c3:d7:0e:ad:84:ef:39:db:4a:22:f3:2c:bb:f5:59:ba:f1:
         56:f8:be:a8:11:8c:a5:44:b4:45:e4:ef:c9:1a:79:6e:e4:ea:
         7c:06:b6:d8:67:81:76:5d:4d:16:9a:5b:c8:bd:43:06:a7:69:
         b5:fd:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 05:07:33 2024 by rpki-client on console-fra.rpki-client.org