Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa
File:                     323830333a323634303a3a2f33322d3332203d3e203634333339.roa (raw, json)
Hash identifier:          lWB+hbyeaNS3D41tk/jbh3jaVVsXMMJSbXDnfxi9Uc0=
Subject key identifier:   91:EE:2C:30:5A:FD:62:42:71:B7:D6:20:17:5A:29:71:98:C8:48:10
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       0DD92658F65C80C56411DFAF2AD1D341E972FCDF
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa
Signing time:             Tue 05 Mar 2024 17:55:28 +0000
ROA not before:           Tue 05 Mar 2024 17:50:28 +0000
ROA not after:            Tue 04 Mar 2025 17:55:28 +0000
asID:                     64339
IP address blocks:        2803:2640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:26:58:f6:5c:80:c5:64:11:df:af:2a:d1:d3:41:e9:72:fc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Mar  5 17:50:28 2024 GMT
            Not After : Mar  4 17:55:28 2025 GMT
        Subject: CN=91EE2C305AFD624271B7D620175A297198C84810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:01:f6:31:f6:67:b2:09:dc:eb:0d:e6:70:
                    41:28:4b:b1:f2:b1:5c:17:2a:b0:7f:78:19:49:42:
                    b8:a2:1e:45:b2:b9:89:ea:5a:a7:97:f6:e2:01:62:
                    2c:22:66:9c:3d:8a:10:4e:9e:dc:74:8b:cb:5b:4e:
                    5b:b1:94:36:72:0a:70:4f:79:26:5e:aa:36:6c:42:
                    50:a1:f0:bb:af:d9:38:30:ac:ef:b5:ff:2d:92:2c:
                    28:1f:4c:21:ed:4e:27:07:f5:ed:7d:31:28:74:06:
                    e3:88:cb:5e:96:7d:89:7f:ab:fe:68:80:17:f6:97:
                    0a:36:23:b9:23:bd:4b:f1:07:e9:72:9e:6b:91:69:
                    4c:71:04:ae:71:bb:e9:77:3f:ef:93:97:2a:17:54:
                    a6:12:f6:ed:7f:da:37:2d:b0:df:ce:40:d3:e5:89:
                    17:b6:02:24:38:e1:39:27:ba:68:b6:8d:dd:a1:14:
                    44:ca:62:12:e7:7d:97:9d:73:cd:02:fc:f1:72:77:
                    5a:b1:74:6f:7b:38:f8:43:7d:cb:13:d9:36:b2:67:
                    95:00:82:85:f2:10:95:a5:c9:f0:e9:58:c7:1c:d0:
                    a3:a1:61:fb:ff:0f:c3:c5:26:e3:6c:21:fa:a0:d0:
                    2c:5a:1e:72:88:1f:b6:f1:8c:7a:50:1b:3b:e0:0d:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EE:2C:30:5A:FD:62:42:71:B7:D6:20:17:5A:29:71:98:C8:48:10
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203634333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:b2:e7:a8:d5:31:08:4f:89:d7:6c:58:c6:dc:c0:81:7c:
         20:54:0a:d0:49:52:e2:51:82:03:d0:c7:65:9f:85:7a:ef:31:
         6d:fd:ae:13:77:13:19:cc:ae:96:70:61:b5:6b:27:da:8a:18:
         1f:d6:97:2c:89:d2:49:61:c3:6c:c2:ea:15:86:51:a3:b4:5b:
         4d:13:ef:34:6f:2f:77:80:a0:8c:3a:10:7f:7c:3f:aa:54:c8:
         14:28:f1:13:c5:d5:8d:34:03:3f:68:d9:50:8e:4a:0c:28:d0:
         42:7b:7d:e4:8b:40:60:5e:2b:ea:8e:39:74:ac:e8:dd:ce:3c:
         04:6f:a7:d3:fc:b2:cf:ff:db:20:4e:0f:96:1c:12:c5:c6:22:
         9f:07:e6:44:c9:a9:b2:e8:18:37:fa:ea:84:75:4d:95:13:39:
         f2:d7:03:d5:b7:7c:22:dd:74:0e:d6:16:1e:c4:cf:da:0d:40:
         ea:e6:9f:51:4a:12:03:0c:4f:5f:61:b7:46:41:01:e1:94:ff:
         5b:29:e3:db:c6:52:93:35:56:ab:bd:e2:64:db:cc:5c:c8:b2:
         c1:2c:5e:79:20:0c:cf:b3:5d:89:83:29:cf:29:9a:de:c9:84:
         0e:49:be:0c:b7:d1:c3:e7:11:8b:40:d2:5e:ae:57:46:99:5a:
         74:f0:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:43:11 2024 by rpki-client on console-fra.rpki-client.org