Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/323830333a383738303a3a2f33322d3332203d3e20323636383333.roa
File:                     323830333a383738303a3a2f33322d3332203d3e20323636383333.roa (raw, json)
Hash identifier:          H5BkLYCl5mBzXSqfmDPZBO5dqnuKIQTs0Eo6C3M3quU=
Subject key identifier:   31:6B:98:E3:36:B2:99:EA:D5:9D:2B:CB:17:53:93:30:51:87:CA:59
Certificate issuer:       /CN=65AE336B36F95ECAA3CDA1B469CE2D5203320077
Certificate serial:       06F08E8494742C6D2FAC7141143A0E580906D452
Authority key identifier: 65:AE:33:6B:36:F9:5E:CA:A3:CD:A1:B4:69:CE:2D:52:03:32:00:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/323830333a383738303a3a2f33322d3332203d3e20323636383333.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     266833
IP address blocks:        2803:8780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:8e:84:94:74:2c:6d:2f:ac:71:41:14:3a:0e:58:09:06:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65AE336B36F95ECAA3CDA1B469CE2D5203320077
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=316B98E336B299EAD59D2BCB175393305187CA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:0a:c6:03:cd:fd:21:e5:aa:69:8a:bf:26:
                    9e:6d:93:80:3b:83:c1:28:de:05:5a:5e:1a:6c:f5:
                    a0:6d:18:72:ca:42:56:a3:e0:5b:a3:1b:e0:c9:df:
                    47:d6:97:99:bf:16:64:88:04:5e:f4:64:84:4d:c9:
                    db:3f:be:b6:4f:8f:dc:db:aa:29:a8:ad:c1:d0:f6:
                    0b:40:8f:6e:67:a8:81:47:7b:0b:13:d1:67:97:0a:
                    db:45:83:d9:01:95:22:4f:be:40:08:84:98:0f:6e:
                    c3:ff:cf:a0:e0:ad:b8:b0:db:a3:94:d3:b4:37:e7:
                    cf:56:2d:87:5d:12:d8:32:2c:0f:9a:b1:c5:99:1b:
                    28:c1:f7:19:52:7e:b1:13:b1:b9:da:5f:64:c7:c9:
                    2a:77:9d:27:2c:4b:f8:7b:71:a9:69:bb:2c:53:3b:
                    6b:48:05:22:46:c6:20:58:a5:96:03:a5:ad:c7:61:
                    2a:fc:fb:87:7e:0d:2d:3a:c7:ea:21:f7:2f:56:cf:
                    8c:c9:b5:8e:2a:48:0c:23:32:ea:79:0d:e3:76:21:
                    98:0b:60:43:94:36:cd:54:ab:b3:8a:c4:45:fd:8a:
                    2c:4b:56:c8:3f:b6:98:2b:ef:e4:ab:44:c4:6f:66:
                    1c:f1:3a:c5:53:9d:1e:44:a1:54:ec:9f:3f:4e:d3:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:98:E3:36:B2:99:EA:D5:9D:2B:CB:17:53:93:30:51:87:CA:59
            X509v3 Authority Key Identifier:
                keyid:65:AE:33:6B:36:F9:5E:CA:A3:CD:A1:B4:69:CE:2D:52:03:32:00:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65AE336B36F95ECAA3CDA1B469CE2D5203320077.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88B825D4565CAF9A2F9C6F36C6A81AC14E0CC1371D07B7BDB459D970E7989FEC/0/323830333a383738303a3a2f33322d3332203d3e20323636383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8780::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:66:a9:d4:2d:63:d6:82:10:56:08:b9:b4:ac:9b:a4:33:4e:
         1a:e1:10:7a:96:9a:a4:49:4f:b4:e3:05:b4:c5:ef:27:ba:4c:
         d8:80:38:07:37:1a:02:5d:79:ad:48:fe:36:3e:2a:b7:97:3c:
         60:46:91:09:04:47:ef:d7:dc:6a:11:3b:95:c5:6e:3a:00:32:
         39:36:f3:1b:43:fa:ba:ea:96:87:63:3c:8b:86:fd:9b:9d:52:
         ed:7a:f8:c2:a2:16:21:2d:5c:57:e3:c2:3b:0f:e2:a3:c8:c4:
         1b:23:25:69:bb:ac:6b:92:0d:e1:69:61:d1:01:60:89:0c:a9:
         59:d0:72:04:db:0e:24:24:bb:ec:e2:a4:1b:64:e6:71:5e:fe:
         11:27:e9:f4:50:f6:4d:a1:67:48:ed:1e:df:66:f4:5c:bc:ba:
         59:d8:3e:db:d4:54:dd:8b:a2:d4:02:d0:8c:2a:12:d1:a2:42:
         cd:ee:21:c1:ed:eb:52:f9:80:dc:61:c7:69:7f:d7:09:f9:71:
         ed:f6:d6:76:b5:a8:16:95:c8:76:f9:48:b0:d7:68:f0:66:a7:
         fc:cb:fc:4c:b8:06:26:01:aa:7e:8c:e5:97:c0:37:82:f8:f0:
         ec:69:c3:8d:99:db:4e:0b:da:ea:1c:0d:d9:d8:8e:23:ea:70:
         db:c1:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org