Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
File:                     323830333a336332303a3a2f33322d3438203d3e20323636363732.roa (raw, json)
Hash identifier:          vPdSwjS0/PwaZtxsFw1XzP7TnyjL5HhoeUCm6jLOAeo=
Subject key identifier:   8C:78:FE:A8:6B:14:17:B1:ED:D6:4F:3E:74:44:2A:5F:C3:05:79:95
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       054D2B2CA4AB9E08BC9FECD7B2D631405F95F4E7
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa
Signing time:             Tue 05 Mar 2024 17:50:23 +0000
ROA not before:           Tue 05 Mar 2024 17:45:23 +0000
ROA not after:            Tue 04 Mar 2025 17:50:23 +0000
asID:                     266672
IP address blocks:        2803:3c20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl
                          rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4d:2b:2c:a4:ab:9e:08:bc:9f:ec:d7:b2:d6:31:40:5f:95:f4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Mar  5 17:45:23 2024 GMT
            Not After : Mar  4 17:50:23 2025 GMT
        Subject: CN=8C78FEA86B1417B1EDD64F3E74442A5FC3057995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:83:e2:e2:ab:ff:99:55:1a:50:10:20:26:
                    12:3e:7e:60:98:10:af:a4:84:25:7a:fa:5b:34:da:
                    91:32:aa:04:28:55:c5:68:04:a5:a6:69:21:a0:72:
                    49:de:48:40:c2:dd:8f:d0:50:34:ef:64:26:58:40:
                    86:3e:f8:65:ee:28:ea:5b:4d:2b:60:85:7e:51:bc:
                    fa:3b:9c:c0:f3:ce:e9:79:30:42:26:a3:b3:fa:32:
                    18:47:10:8f:88:97:73:7b:26:3e:0b:03:15:b8:82:
                    2c:c5:64:e6:34:17:14:8f:7c:f2:4b:f6:44:7f:7f:
                    98:e2:14:ae:15:6d:19:88:c9:d7:1d:37:09:27:76:
                    8d:7f:35:50:86:0c:6a:af:49:f6:a0:f4:7c:e8:83:
                    69:32:c2:ad:97:a9:ad:30:97:0f:4b:d9:04:66:0d:
                    4a:b6:b6:28:48:39:9c:9f:f4:d2:21:84:c2:87:43:
                    4b:4d:a3:47:fb:2a:b0:96:6a:67:4a:1b:76:c9:07:
                    a9:70:c8:8e:b0:fc:e5:45:9d:d0:42:7a:ae:02:07:
                    3e:bf:b6:bc:bb:09:31:d5:69:61:55:25:59:07:9c:
                    60:e0:ba:be:7a:8c:67:97:7b:8e:0d:1e:57:81:8b:
                    10:b2:6a:39:7a:f9:17:dd:76:2d:1c:e0:8d:61:ac:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:78:FE:A8:6B:14:17:B1:ED:D6:4F:3E:74:44:2A:5F:C3:05:79:95
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/323830333a336332303a3a2f33322d3438203d3e20323636363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:b4:7e:92:db:ab:62:89:7b:8e:b2:4d:31:2a:2f:7c:06:
         8c:df:03:f1:4e:98:71:91:42:bf:39:52:4a:15:fa:68:67:d9:
         1f:43:b7:a5:fc:33:b2:fc:41:19:e8:5f:d6:b1:d3:85:65:a8:
         7d:4e:83:92:2d:22:0f:af:8a:82:46:a3:cc:ed:b1:90:a2:93:
         de:cb:b5:cf:ac:a9:b6:80:5c:f0:21:cf:b7:ad:62:71:e5:2b:
         36:40:cb:e0:73:48:f6:88:6a:18:9f:48:8c:85:63:b2:b5:95:
         b0:ad:b2:dc:81:86:ea:16:be:9c:21:2d:27:97:1f:63:38:c7:
         4b:23:4b:9a:75:25:dc:c3:c3:ee:6b:a1:c0:8b:43:05:6a:a4:
         f1:12:4b:2c:1c:a6:1c:65:82:57:7e:99:0c:12:5f:20:92:93:
         c9:6b:24:b5:0b:0f:ec:e5:ef:07:ff:09:f2:a8:94:f2:c7:b9:
         0e:35:f7:20:a6:44:5c:89:18:26:6f:70:02:a2:8c:2c:c2:a6:
         4f:f6:52:b8:41:87:a0:66:7f:61:f9:94:af:e3:ef:ac:b4:68:
         2d:5d:9b:d7:bc:17:32:a5:0e:66:b7:52:fd:35:b5:74:1e:e0:
         06:06:9f:6f:4a:55:16:33:0a:30:f9:58:d6:22:ac:f4:49:2a:
         ff:4a:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:25 2024 by rpki-client on console-ams.rpki-client.org