Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/323830333a63303a3a2f33322d3438203d3e20323634373536.roa
File:                     323830333a63303a3a2f33322d3438203d3e20323634373536.roa (raw, json)
Hash identifier:          +Lmduvu+fEjMjtfahI51kYhijZETuDy7FGkJmS049lo=
Subject key identifier:   37:73:4A:71:2A:AB:71:84:8A:48:DB:E7:52:3B:9C:06:19:CF:61:CD
Certificate issuer:       /CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
Certificate serial:       26972EA5A470BED956E95B8A063F3D19DAD6CA14
Authority key identifier: EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/323830333a63303a3a2f33322d3438203d3e20323634373536.roa
Signing time:             Mon 15 Jul 2024 21:35:00 +0000
ROA not before:           Mon 15 Jul 2024 21:30:00 +0000
ROA not after:            Mon 14 Jul 2025 21:35:00 +0000
asID:                     264756
IP address blocks:        2803:c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl
                          rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:97:2e:a5:a4:70:be:d9:56:e9:5b:8a:06:3f:3d:19:da:d6:ca:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
        Validity
            Not Before: Jul 15 21:30:00 2024 GMT
            Not After : Jul 14 21:35:00 2025 GMT
        Subject: CN=37734A712AAB71848A48DBE7523B9C0619CF61CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:5f:94:a6:7f:54:be:f6:48:91:c0:52:55:
                    cb:bc:a9:b3:4c:79:0e:23:8a:57:1c:e2:52:b2:3a:
                    5d:a7:b9:b0:d3:8a:18:1d:ef:48:c0:58:c9:62:29:
                    e7:c5:b5:f7:92:88:cb:b9:8e:70:38:9a:77:f7:a0:
                    f1:08:d3:c6:6d:c2:c6:f9:75:db:0e:dd:1c:07:64:
                    c4:b7:97:20:20:05:38:c5:34:07:49:72:91:54:d4:
                    ce:d9:f6:82:4d:07:86:e3:43:bd:28:76:22:29:b1:
                    6b:2a:6f:25:1d:3d:9c:7c:f2:d9:2c:33:f8:50:70:
                    6d:6b:d9:16:13:a4:f7:9d:70:36:10:f0:50:77:a8:
                    d1:6d:00:62:53:4a:22:bb:c3:85:df:01:dc:8f:ce:
                    f9:3b:2b:8a:cf:b9:38:79:bc:18:85:2c:44:96:6f:
                    88:05:71:93:c6:cf:3f:3d:94:87:00:b4:c9:11:6c:
                    af:91:82:76:7d:db:0e:60:eb:16:36:d5:69:37:89:
                    d1:e4:df:69:c5:8e:da:8c:62:57:b9:22:a5:86:78:
                    9e:ce:cd:8c:b8:da:c4:3a:39:da:19:a1:ae:53:0f:
                    35:83:01:6f:f6:e6:f5:9f:f9:f9:aa:a6:1e:9a:d8:
                    a7:08:d9:30:55:a2:f6:1b:e4:e0:56:b5:86:2d:32:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:4A:71:2A:AB:71:84:8A:48:DB:E7:52:3B:9C:06:19:CF:61:CD
            X509v3 Authority Key Identifier:
                keyid:EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/323830333a63303a3a2f33322d3438203d3e20323634373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:54:6b:c1:fc:88:49:43:e8:b6:98:5a:ac:ef:3d:fa:17:c0:
         b5:8c:5a:5b:f5:ec:b8:6b:72:2d:49:68:8e:82:40:71:e0:3d:
         26:f0:b0:cf:71:7f:43:c6:d4:85:e0:15:c0:39:c1:fb:27:54:
         39:52:61:94:9a:35:34:c5:95:72:10:c2:19:76:88:cc:68:4e:
         a9:9a:1a:5e:89:35:5a:8d:59:63:45:c5:25:9b:3f:67:a2:e9:
         14:d5:6a:08:53:d9:83:1c:af:a1:83:2c:1a:d3:85:dd:a7:14:
         31:1e:3c:8a:9b:4c:64:f3:ec:4c:db:f7:03:ab:41:d9:d0:8c:
         c9:d9:68:62:d8:4d:9e:3e:6f:44:b4:ce:bf:6a:9a:1c:c8:6f:
         23:38:86:62:85:22:ce:5a:7e:d6:3b:d0:e2:1a:f7:71:e5:cc:
         7e:7a:ed:5c:24:81:63:82:94:a7:c3:fa:5b:eb:2c:82:14:e1:
         ac:d0:35:28:28:39:fd:a5:6d:9a:f6:b4:c4:92:c1:0f:b0:28:
         07:1d:ef:df:d9:c0:9b:bc:ef:db:3d:10:6e:cd:d4:b0:c0:e1:
         88:78:fb:f7:06:cc:6e:cc:e8:ce:45:9c:d6:d5:0d:0c:8a:02:
         64:c3:f0:b9:af:27:54:26:a2:0b:b8:34:f5:a8:5e:af:00:98:
         8e:fc:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org