Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/323830333a373432303a3a2f33322d3332203d3e20323635383236.roa
File:                     323830333a373432303a3a2f33322d3332203d3e20323635383236.roa (raw, json)
Hash identifier:          gUBvXiNDZOQ8deh+DbgeASQPNNt3irBqZSUqSV5k/k8=
Subject key identifier:   03:A9:2E:4A:57:3B:59:35:E6:86:09:11:B0:D0:AF:DB:49:CA:B9:0A
Certificate issuer:       /CN=F785859FBACDBEF31792F07975E7101B28F16433
Certificate serial:       0DD7BAF33EC6FFE09613D6BEF7C0FB9ABB9C1B5C
Authority key identifier: F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/323830333a373432303a3a2f33322d3332203d3e20323635383236.roa
Signing time:             Tue 05 Mar 2024 17:48:17 +0000
ROA not before:           Tue 05 Mar 2024 17:43:17 +0000
ROA not after:            Tue 04 Mar 2025 17:48:17 +0000
asID:                     265826
IP address blocks:        2803:7420::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 May 2024 18:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d7:ba:f3:3e:c6:ff:e0:96:13:d6:be:f7:c0:fb:9a:bb:9c:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F785859FBACDBEF31792F07975E7101B28F16433
        Validity
            Not Before: Mar  5 17:43:17 2024 GMT
            Not After : Mar  4 17:48:17 2025 GMT
        Subject: CN=03A92E4A573B5935E6860911B0D0AFDB49CAB90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:f1:d3:24:ed:31:43:2c:58:fe:ea:05:5b:
                    17:a1:f5:bf:ca:ae:c7:a7:88:fc:1b:7a:b0:fd:7a:
                    4c:e9:fd:cf:55:a2:a4:b7:03:31:63:c2:55:80:7f:
                    ee:3f:c8:89:b7:21:d1:c6:4e:ce:65:8a:92:ae:85:
                    6d:e3:c0:55:d9:0e:3a:6b:e5:f5:fe:9f:99:d2:19:
                    aa:87:cc:e3:c2:37:59:f2:a8:ca:cc:be:c9:ce:e8:
                    cf:e4:9b:96:91:ff:af:3a:a0:8e:d4:83:ef:c2:aa:
                    92:d4:c2:27:4d:16:ec:4c:02:1b:eb:b4:ee:2c:38:
                    06:28:a9:e4:92:3d:37:50:b4:52:57:c7:8e:49:b1:
                    3d:95:db:90:e8:3b:8a:af:3f:11:de:83:2b:27:fe:
                    32:34:c4:38:dc:72:4d:36:0d:6f:83:c1:ee:42:c0:
                    0f:a6:63:51:46:d5:23:fa:69:b1:b4:39:fd:b2:88:
                    40:b7:0e:7c:2f:e9:04:e5:70:0d:79:57:51:6f:54:
                    61:8a:b3:b3:99:40:26:8c:6a:52:7e:93:b0:55:53:
                    62:e9:dd:92:00:24:39:10:d2:23:e7:48:65:66:57:
                    18:83:3a:c6:b6:7a:fb:12:ec:b2:56:ff:16:01:51:
                    29:52:e8:24:6b:e0:0e:d7:5e:77:df:07:89:ed:f9:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:2E:4A:57:3B:59:35:E6:86:09:11:B0:D0:AF:DB:49:CA:B9:0A
            X509v3 Authority Key Identifier:
                keyid:F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/323830333a373432303a3a2f33322d3332203d3e20323635383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:31:6d:0a:5a:8a:de:7d:b4:3c:a6:eb:81:f3:a9:23:1f:
         fd:ee:41:2f:21:6b:d9:93:15:1e:27:46:24:2f:19:5e:29:7f:
         5e:f4:5f:83:11:58:ad:8d:66:38:d7:a2:b7:f0:33:18:af:21:
         fb:e3:78:6d:33:33:77:64:80:e2:5b:50:fa:43:0b:a8:85:87:
         44:cb:1b:d9:59:90:96:75:5f:07:58:41:c2:9f:2e:b2:80:75:
         d4:91:7e:34:df:87:34:10:55:3c:be:74:da:63:27:45:c1:bd:
         76:53:96:06:d2:2a:7b:11:b1:2c:7a:dd:a4:f6:1e:af:52:5a:
         ef:73:07:4a:c2:40:54:83:79:ab:ba:88:70:c4:aa:8b:90:26:
         2a:e2:43:a6:76:02:75:05:e1:cb:5e:f5:c1:af:84:38:3a:9c:
         99:df:51:40:3b:ac:24:0d:12:b8:c4:5c:b6:a1:93:d0:3b:60:
         11:99:f5:73:3d:19:7a:48:ee:97:88:ce:52:24:1c:57:6b:05:
         b4:6c:85:8d:09:3e:e8:d1:46:c5:62:f0:88:e0:7c:03:61:75:
         02:6d:f9:b9:1a:fd:b7:38:49:ba:07:b2:42:68:2b:07:c4:c7:
         ac:94:f9:f7:6c:7f:03:ee:df:54:17:01:55:06:c6:50:c0:69:
         ab:55:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:34:50 2024 by rpki-client on console-fra.rpki-client.org