Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/323830333a363738303a3a2f33322d3332203d3e20323634363335.roa
File:                     323830333a363738303a3a2f33322d3332203d3e20323634363335.roa (raw, json)
Hash identifier:          vr07G4C92/8OIh+EY//gcwpd8PJ7ixseqMPEGgAYjHE=
Subject key identifier:   87:D3:B9:0F:A0:FE:EF:52:BB:30:1A:0C:66:5B:35:22:9F:C9:C8:6D
Certificate issuer:       /CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Certificate serial:       5303A4B76EACAF073425DC04549901490BDDB4EA
Authority key identifier: 59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/323830333a363738303a3a2f33322d3332203d3e20323634363335.roa
Signing time:             Tue 05 Mar 2024 18:17:20 +0000
ROA not before:           Tue 05 Mar 2024 18:12:20 +0000
ROA not after:            Tue 04 Mar 2025 18:17:20 +0000
asID:                     264635
IP address blocks:        2803:6780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:a4:b7:6e:ac:af:07:34:25:dc:04:54:99:01:49:0b:dd:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
        Validity
            Not Before: Mar  5 18:12:20 2024 GMT
            Not After : Mar  4 18:17:20 2025 GMT
        Subject: CN=87D3B90FA0FEEF52BB301A0C665B35229FC9C86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:12:0e:30:af:73:31:36:b5:a2:54:06:f0:
                    86:5c:b7:7c:7a:f5:97:40:20:40:21:30:dc:d8:38:
                    30:07:d9:20:0b:19:04:e8:e5:5d:9a:82:f7:34:2f:
                    4e:63:5a:8b:86:3f:16:23:c5:06:29:5d:bb:0a:cb:
                    a4:e5:a7:b9:f6:5e:17:f0:e5:e1:8f:ae:13:78:99:
                    44:0d:2d:b3:65:ae:59:e3:cf:3b:72:20:2f:af:dc:
                    5c:49:48:09:06:b8:c5:03:54:fc:3f:8a:79:21:2b:
                    e1:09:a1:a8:ce:6f:7d:99:01:2d:35:f5:9c:0e:92:
                    20:8a:f8:e0:4d:65:fe:fc:49:3c:52:04:93:f3:28:
                    16:01:23:06:f6:19:35:11:a7:af:1c:c7:6a:16:f2:
                    4d:c9:4b:69:9c:ee:8b:b6:09:bf:1a:2f:64:51:2b:
                    e5:d8:a5:b8:f1:f5:94:e3:dd:ee:25:59:e6:48:bd:
                    7f:3d:1d:af:63:fb:ec:14:91:e3:0a:91:f5:53:9e:
                    49:da:a6:ed:d8:0e:00:a0:64:f5:e2:ea:c3:84:0a:
                    57:ba:28:17:77:b2:cf:08:9f:84:71:25:32:c6:f6:
                    1c:8f:01:c7:95:82:80:e0:1a:c0:4c:c3:4c:7c:dc:
                    32:f5:59:4d:50:a7:f6:7f:63:ae:3f:93:0d:8e:a8:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:B9:0F:A0:FE:EF:52:BB:30:1A:0C:66:5B:35:22:9F:C9:C8:6D
            X509v3 Authority Key Identifier:
                keyid:59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/323830333a363738303a3a2f33322d3332203d3e20323634363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:31:7b:0b:8c:8f:91:7b:59:c5:32:f5:85:15:81:92:a9:
         91:71:62:7d:ec:c9:58:f6:59:44:37:a6:37:44:c0:ea:60:2f:
         85:98:e0:ed:da:e0:23:e1:b6:3e:7c:9c:7a:8f:cd:fe:a4:da:
         fc:e9:3a:0e:9f:82:95:b7:c4:29:e4:e5:e1:12:b6:59:89:53:
         5f:51:1f:6c:76:45:80:58:e6:9b:21:d8:ca:af:44:81:23:60:
         fb:ce:1a:75:46:0c:f3:ea:08:80:f0:86:2a:bb:1f:40:76:fb:
         e3:92:d9:f2:67:91:60:38:c7:3f:6e:0e:35:a6:c3:03:95:57:
         82:81:13:6a:99:67:b2:dc:53:ca:0c:97:e1:49:a4:5c:ce:28:
         d0:5e:8f:5a:6a:1b:9a:8a:f4:55:a6:f4:0d:47:40:ff:f3:eb:
         fa:ac:30:1e:ac:31:b6:3f:78:bb:89:ca:b5:e1:3d:35:fe:ea:
         c1:e1:33:fd:2c:0d:c0:01:e2:45:a5:73:11:3f:b6:2f:ed:06:
         17:b9:ad:41:42:73:67:f5:6d:43:da:b1:3b:78:dc:b6:d3:ec:
         ba:1b:4d:7c:84:94:d8:d7:08:5f:d5:ec:0f:a9:45:bd:06:1a:
         ce:7e:bb:10:57:c6:fa:b3:42:1b:79:26:14:23:da:c6:80:0f:
         75:10:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org