Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          wKqxdStOMJ2ZMl5PCfW7nCnwWnslLnUUO8NdV2B6mgE=
Subject key identifier:   B5:55:07:DB:F8:C9:8C:D7:E5:34:4D:73:99:FB:C5:31:93:17:97:F2
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       796D8C42DCE3299773F154C09A55EC57D06199F4
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     27818
IP address blocks:        2803:3380:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6d:8c:42:dc:e3:29:97:73:f1:54:c0:9a:55:ec:57:d0:61:99:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=B55507DBF8C98CD7E5344D7399FBC531931797F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:29:0d:8e:b8:90:cb:e0:af:e2:22:c1:08:
                    56:71:2f:c1:2a:b5:fb:68:e3:07:9a:ee:11:7e:ff:
                    54:81:39:76:23:ba:2e:20:d8:d8:9d:78:a4:5c:7d:
                    61:32:97:c7:d0:ae:81:50:fc:ed:9f:a1:af:01:6b:
                    ac:96:d6:2f:a9:cc:f3:07:1a:84:15:4d:9f:e0:3e:
                    ff:d6:9e:1e:ed:7e:f9:db:d4:44:db:e7:85:e4:06:
                    28:78:70:bc:d1:af:09:cd:d5:7c:d3:02:f5:10:2b:
                    6b:d7:e3:ad:6b:0e:59:83:85:03:09:6c:46:d9:80:
                    c6:f2:7d:55:03:72:cb:9b:aa:ef:5d:9f:f0:c0:ef:
                    c9:6b:4b:48:f8:cb:f0:46:39:7a:b2:47:cf:7b:a2:
                    19:1d:50:9f:84:26:d2:28:5d:9b:5e:59:88:e5:26:
                    3e:94:02:55:19:a4:0c:af:8c:bf:1f:88:c2:cf:31:
                    48:91:27:32:73:1f:b0:53:9c:31:eb:12:73:a4:8b:
                    72:a0:a8:36:8a:88:70:23:2a:48:3d:c9:8b:7a:e0:
                    79:32:32:40:cd:cc:e6:9e:3a:46:7e:8d:13:da:b7:
                    39:14:15:50:bd:d3:72:8e:73:c6:84:e1:5c:58:44:
                    a8:09:88:7d:13:15:71:21:cf:fa:72:c5:03:19:1f:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:07:DB:F8:C9:8C:D7:E5:34:4D:73:99:FB:C5:31:93:17:97:F2
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:80:5b:4f:b0:b6:d1:e6:31:24:7b:34:74:eb:d4:2b:08:
         d4:6c:cf:cf:1f:bd:d7:96:e1:a0:21:ee:76:87:e1:68:98:5b:
         29:e7:4f:0f:26:2b:04:f2:11:74:02:60:a0:93:6e:ec:4a:35:
         57:b5:10:06:bc:4d:63:d7:b9:44:65:c4:1b:5b:9e:1e:d4:ef:
         0f:5a:ef:4a:56:da:37:8c:a5:b4:3c:e9:03:04:cf:93:9a:f2:
         c0:f4:a5:2e:a1:6c:e3:8a:de:99:ec:d1:1a:4e:f2:69:41:51:
         66:b0:e7:0e:46:99:5e:4a:0d:82:9a:3f:b7:f2:ef:09:89:e2:
         8d:ad:ad:d6:c1:bc:1a:a2:15:cb:d9:62:87:be:4e:77:0d:03:
         75:3f:7d:63:36:cc:bd:af:86:74:1e:43:cc:06:dd:c7:63:cf:
         27:a6:c4:40:07:85:ef:bc:62:75:dd:ca:32:71:47:26:01:4f:
         5c:c9:bc:9d:ea:94:5a:c1:7d:fe:e0:8c:86:11:fd:f0:e1:09:
         89:20:b7:5e:e7:44:0d:53:4b:9c:7a:7c:51:82:0b:e4:43:8d:
         2a:ee:46:54:8a:7a:1b:61:50:06:85:4a:7c:7f:b8:a6:09:e8:
         44:f0:63:2c:66:d2:f7:d2:db:39:07:41:6f:b0:0b:ea:f1:c9:
         93:8b:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org