Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f3131372d313137203d3e20323636373734.roa
File:                     323830333a656632303a3a2f3131372d313137203d3e20323636373734.roa (raw, json)
Hash identifier:          bspH0dqn/weVPGAQRC3OIB3mhNvbRG9g00X3gFBHwfU=
Subject key identifier:   39:1F:19:4C:09:25:D9:4A:BC:BF:60:FA:A7:56:F2:0F:63:AE:A7:B1
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       0E92203D80EAE706F8F00473608AC360AD2B28A9
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f3131372d313137203d3e20323636373734.roa
Signing time:             Tue 05 Mar 2024 18:19:23 +0000
ROA not before:           Tue 05 Mar 2024 18:14:23 +0000
ROA not after:            Tue 04 Mar 2025 18:19:23 +0000
asID:                     266774
IP address blocks:        2803:ef20::/117 maxlen: 117

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 22:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:20:3d:80:ea:e7:06:f8:f0:04:73:60:8a:c3:60:ad:2b:28:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Mar  5 18:14:23 2024 GMT
            Not After : Mar  4 18:19:23 2025 GMT
        Subject: CN=391F194C0925D94ABCBF60FAA756F20F63AEA7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:d2:ab:c1:9a:3b:c8:73:ff:47:d2:f5:b1:
                    8e:e2:af:38:76:16:8b:15:55:de:42:6a:f6:7a:ab:
                    e3:aa:8b:83:5a:69:b4:6c:53:04:7b:86:bd:e0:39:
                    c9:fd:9e:8e:dc:c3:3a:8a:96:5c:d4:22:e2:2d:d9:
                    ad:70:21:d2:a1:fb:fc:21:af:aa:0e:56:46:41:b8:
                    fb:83:3e:5f:de:53:68:00:3b:32:82:1f:b9:a7:7b:
                    28:d4:59:32:d1:a7:a6:51:29:a7:d6:b8:81:c9:dc:
                    4c:7f:ef:17:c2:7b:6c:f5:cf:c3:4b:59:45:3f:7e:
                    f4:48:4b:98:37:b4:f4:fd:4b:19:b6:9a:ed:59:a2:
                    02:2b:76:88:d4:08:69:6a:7d:00:04:f3:4d:d4:26:
                    90:d7:3c:83:13:7a:f6:58:8f:7c:92:de:08:cc:7d:
                    7c:64:f7:22:f1:49:33:43:18:8e:2f:dd:a7:9d:15:
                    ef:2b:74:76:19:56:3c:e0:18:0d:84:e7:ec:c3:25:
                    8a:28:57:7a:89:10:6d:54:49:d7:77:56:0b:49:d2:
                    44:a8:02:c9:63:b2:29:18:3d:70:e7:9a:a3:e0:e8:
                    fe:1c:12:cf:30:ad:42:46:1e:8a:f9:bd:4e:3e:3d:
                    31:03:c6:70:15:c0:ad:15:66:e4:a9:6e:dc:61:e5:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:19:4C:09:25:D9:4A:BC:BF:60:FA:A7:56:F2:0F:63:AE:A7:B1
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f3131372d313137203d3e20323636373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef20::/117

    Signature Algorithm: sha256WithRSAEncryption
         26:71:09:c7:1b:27:35:18:b7:cb:7c:2d:2a:a5:ff:8f:6c:72:
         25:c0:c7:2e:4b:96:1f:e5:6d:55:7d:35:99:04:6f:8c:ef:ef:
         fb:73:f9:cc:1d:57:a8:8c:24:71:a7:ea:51:ce:7b:d0:2b:dc:
         e3:a6:89:29:54:fd:31:dc:34:6f:37:4b:7a:5b:5c:da:46:2d:
         c8:01:4b:f9:2c:0f:e7:31:85:aa:32:1d:af:70:e3:78:f9:6e:
         c0:2d:cc:0e:35:d3:d3:e8:fe:12:cd:03:61:e7:c2:1d:55:9c:
         ad:fb:1a:6e:5e:bb:e4:10:87:43:79:44:c0:6c:15:ab:1e:91:
         ab:7e:d6:82:4d:b4:72:1e:4e:cf:7e:05:a8:ef:ee:ee:58:5e:
         6d:c6:83:1b:fb:cd:25:ca:44:cf:86:03:f7:50:09:83:51:8d:
         9d:99:33:91:3f:59:ff:aa:01:56:85:2c:b7:c1:97:97:35:cb:
         92:6b:a2:8a:1b:a9:5b:45:dd:68:14:8e:9b:c6:cb:cf:22:82:
         1e:4a:54:c0:d1:c9:77:29:ea:f6:96:bc:aa:24:8a:89:e6:ee:
         30:ec:bf:b8:ad:85:1b:95:8a:30:56:5f:a6:40:79:12:40:b7:
         28:7a:78:1b:83:65:35:3d:80:a8:b4:e7:75:6a:f2:50:46:a3:
         f6:7f:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:01:37 2024 by rpki-client on console-ams.rpki-client.org