Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/323830333a323132303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a323132303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          dkeaBPlrcUOfWvC5TU/y/g7Be7pbYi1HSTl9sfB0cwY=
Subject key identifier:   0F:3C:01:35:A6:87:B4:0C:99:F5:A5:AD:00:71:92:41:29:A3:90:B4
Certificate issuer:       /CN=EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF
Certificate serial:       37C0FB65F0FD201FDC1DE3C012FDD328BFFCA8E8
Authority key identifier: EB:3A:EC:DA:D8:C4:95:8B:03:58:94:6F:A5:F0:6C:CF:FD:B7:6B:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/323830333a323132303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 18:01:26 +0000
ROA not before:           Tue 05 Mar 2024 17:56:26 +0000
ROA not after:            Tue 04 Mar 2025 18:01:26 +0000
asID:                     61466
IP address blocks:        2803:2120::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:fb:65:f0:fd:20:1f:dc:1d:e3:c0:12:fd:d3:28:bf:fc:a8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF
        Validity
            Not Before: Mar  5 17:56:26 2024 GMT
            Not After : Mar  4 18:01:26 2025 GMT
        Subject: CN=0F3C0135A687B40C99F5A5AD0071924129A390B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:52:a0:1e:de:c2:20:5c:fd:2d:7e:2f:85:
                    66:e7:e6:c6:82:bc:84:e2:50:55:8b:11:b8:7b:b2:
                    61:f1:43:0c:98:8a:83:b3:78:b8:b3:e4:dd:bd:0a:
                    07:c3:c6:6f:c8:c2:6d:d4:aa:59:54:1a:3a:52:2a:
                    df:90:4b:c4:2d:a6:9c:13:5e:64:58:82:f8:9b:26:
                    dc:a6:cb:ed:13:d0:a6:2f:a4:d4:c6:f4:f6:66:c1:
                    b3:11:4f:81:ca:f5:96:75:02:3b:29:84:ca:ab:62:
                    34:eb:75:2b:f7:30:49:a5:96:02:13:ea:b8:5f:19:
                    92:b2:02:fc:fc:40:0d:b8:a1:10:29:08:e9:94:cf:
                    ee:9c:c9:d9:0f:65:a4:f8:55:df:31:39:4d:d4:73:
                    2a:53:3b:fb:73:7e:16:51:7d:1e:f6:3e:ef:85:84:
                    8e:92:14:a5:dd:40:24:b6:48:ee:92:79:8d:7d:9b:
                    70:af:42:fc:1a:ea:86:a1:90:77:94:9f:11:15:af:
                    8a:c4:dc:e4:9f:70:ee:f6:10:6d:76:a8:c9:89:d8:
                    a3:01:e5:b8:1d:4f:ef:98:d6:17:59:47:c4:02:f8:
                    5d:d7:6a:cf:d9:ed:d3:fa:14:9a:f4:b5:c6:ad:52:
                    bb:d5:a7:cb:fb:6d:ec:47:b1:4f:17:aa:10:f6:ae:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3C:01:35:A6:87:B4:0C:99:F5:A5:AD:00:71:92:41:29:A3:90:B4
            X509v3 Authority Key Identifier:
                keyid:EB:3A:EC:DA:D8:C4:95:8B:03:58:94:6F:A5:F0:6C:CF:FD:B7:6B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/323830333a323132303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:e5:f3:2b:fe:db:e5:16:03:1f:fa:fe:09:59:61:c8:a4:
         1c:ff:2e:11:21:4d:29:80:35:dd:47:92:53:18:2f:60:85:d0:
         e1:fd:76:5d:a4:66:25:81:44:b9:e4:30:81:99:5e:62:8b:d1:
         8b:e5:f6:1a:7d:0a:fc:f4:2b:9f:eb:dc:58:91:d5:73:cf:ee:
         c6:22:15:20:bd:4d:24:09:d3:aa:bd:d5:6f:20:e7:95:15:27:
         36:a2:10:0d:e8:4d:8a:54:51:1b:eb:dd:02:9a:41:07:d6:ba:
         6e:72:ea:68:55:d0:b1:63:7f:7a:ec:00:29:14:2f:84:70:2c:
         78:0a:3a:20:b3:f2:8d:f3:ce:45:19:f8:e3:cc:dc:9c:cb:50:
         5f:5e:ec:5c:1f:7e:df:09:7e:56:3d:80:b0:a4:c9:d4:68:a8:
         cd:a1:c1:3c:5b:19:40:11:b1:9b:ce:52:0c:ac:50:e9:13:68:
         74:35:e3:42:db:01:57:4e:5d:ff:c5:db:67:38:5f:de:c3:13:
         11:21:c8:04:d5:33:1c:3e:f3:78:b8:1a:7d:f0:f2:3a:4b:7f:
         f5:80:17:33:42:2e:85:a7:5a:3b:85:5b:c1:8f:3b:16:c9:ff:
         2d:a6:00:21:59:6f:90:fe:9f:3c:f6:3f:63:05:e6:46:b0:20:
         cf:a6:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:45:13 2024 by rpki-client on console-fra.rpki-client.org