Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa
File:                     323830333a366331303a3a2f33322d3430203d3e20323633323338.roa (raw, json)
Hash identifier:          fWrE62oiuNKZuuxXe/l2IVD8FmaZzE6JArJpL1xdf4o=
Subject key identifier:   FE:C2:AC:5B:22:1B:0B:8A:33:72:B6:0B:87:A2:88:F0:0A:9A:AC:82
Certificate issuer:       /CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
Certificate serial:       74F2EB91259FB1FFB93FF04B757E2F66BD179E47
Authority key identifier: E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 18:12:52 +0000
ROA not before:           Tue 05 Mar 2024 18:07:52 +0000
ROA not after:            Tue 04 Mar 2025 18:12:52 +0000
asID:                     263238
IP address blocks:        2803:6c10::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f2:eb:91:25:9f:b1:ff:b9:3f:f0:4b:75:7e:2f:66:bd:17:9e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
        Validity
            Not Before: Mar  5 18:07:52 2024 GMT
            Not After : Mar  4 18:12:52 2025 GMT
        Subject: CN=FEC2AC5B221B0B8A3372B60B87A288F00A9AAC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:c9:2c:3e:e4:35:f4:17:aa:a0:d9:57:a0:
                    2f:0e:a1:52:5c:ba:a6:1d:fb:3a:fe:35:4d:07:95:
                    6c:a7:a5:65:43:a3:d2:5f:7a:1c:e3:74:69:c9:e3:
                    70:99:ee:21:ab:98:57:d4:d9:f3:f4:b8:70:a0:11:
                    98:de:bd:22:9a:10:64:aa:57:ae:06:9c:ad:f2:35:
                    76:a0:27:67:31:f8:da:8a:fd:32:84:32:10:a3:4b:
                    e8:32:05:cd:09:c7:f6:09:6e:79:1a:bd:d8:25:29:
                    50:8a:81:37:a0:b8:99:64:c5:d4:59:38:4f:af:ce:
                    1c:db:3d:7b:ee:f8:cc:e9:ab:8b:59:f0:1f:43:d6:
                    5d:93:7f:f9:24:e3:ba:6e:5c:70:55:e8:f0:c0:1b:
                    ed:72:c2:d5:d9:29:77:6d:c4:e7:23:34:75:13:69:
                    65:5d:6d:96:63:4e:4b:c5:5f:a1:ef:35:d1:56:b3:
                    d8:ad:bf:28:50:48:cb:80:fd:52:4f:9c:db:c0:42:
                    1c:15:56:6d:9e:c2:7c:a9:08:a1:67:f8:b9:f7:5a:
                    60:0f:af:31:5d:2b:18:32:00:81:49:56:69:64:71:
                    25:f4:be:2f:ef:4c:89:18:50:d4:45:a1:2f:1b:91:
                    94:0b:dc:8f:00:b7:fd:19:0e:2a:8c:fd:f3:26:84:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C2:AC:5B:22:1B:0B:8A:33:72:B6:0B:87:A2:88:F0:0A:9A:AC:82
            X509v3 Authority Key Identifier:
                keyid:E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/323830333a366331303a3a2f33322d3430203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:53:73:dd:45:ce:40:54:5c:23:3e:97:a7:62:a1:f0:dd:93:
         f7:bf:4d:eb:14:3b:7b:99:96:cb:58:80:a7:a4:40:2d:f4:b8:
         de:e4:da:b1:2c:46:55:df:22:41:2b:11:32:d9:b5:f1:19:d2:
         93:4d:67:2e:cf:94:7a:81:82:78:2f:c3:b5:ab:24:49:0b:3a:
         70:08:e5:64:e3:fa:67:3e:54:68:27:74:0f:cc:75:29:d4:fd:
         8b:82:c6:cf:b3:5c:d5:f2:fe:fc:ad:c9:a2:bb:c3:38:85:79:
         a9:8c:f0:80:2d:0e:fd:95:a9:c1:98:de:bc:30:34:52:7d:36:
         03:26:bf:2e:9d:52:ee:f6:d0:c7:b0:18:7c:18:e0:43:60:af:
         13:6e:3a:ad:4b:0e:20:05:04:7f:0c:6c:1d:91:8e:84:98:68:
         fb:0f:22:e3:5e:36:ec:d3:a8:4b:90:dd:4e:3e:83:3a:d7:0e:
         26:29:b0:15:33:df:bf:dc:e8:d8:3b:d1:2c:8f:e9:ff:5d:f7:
         7d:e9:23:55:78:cc:76:69:82:fc:c0:f3:9b:93:25:db:8b:90:
         a4:8e:7e:ca:fc:67:51:b1:ce:79:a7:2b:d9:b8:3c:b2:78:ff:
         09:8a:12:98:9a:e4:55:a4:4a:d0:8e:04:28:e3:e2:93:78:15:
         c6:97:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org