Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830333a376535303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          B8LxgMe3Sz9GWNF86bTpG6DvV+sgUIPohaw6t33Zlv4=
Subject key identifier:   F5:D7:CD:E1:A4:B6:1B:46:26:5D:0A:73:AE:93:A8:0D:36:FD:6B:43
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       78A70EAE83EF7E9C431CD1410EA97859A32E40BF
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 20 Aug 2024 16:40:00 +0000
ROA not before:           Tue 20 Aug 2024 16:35:00 +0000
ROA not after:            Tue 19 Aug 2025 16:40:00 +0000
asID:                     262589
IP address blocks:        2803:7e50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a7:0e:ae:83:ef:7e:9c:43:1c:d1:41:0e:a9:78:59:a3:2e:40:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Aug 20 16:35:00 2024 GMT
            Not After : Aug 19 16:40:00 2025 GMT
        Subject: CN=F5D7CDE1A4B61B46265D0A73AE93A80D36FD6B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:42:ba:d7:5d:f7:0a:0f:46:57:45:fa:e9:
                    e2:ee:bc:5c:d2:88:fc:1e:9d:3a:c6:63:09:c7:a6:
                    90:6f:96:52:0a:b6:83:e6:74:fa:7d:23:e2:3b:74:
                    f8:6a:00:9c:ba:6d:7d:86:d0:79:ac:b2:73:5c:8f:
                    99:9b:14:4c:4c:56:91:1f:a7:19:ae:ac:69:15:3f:
                    78:a2:1f:04:46:f0:3b:99:89:f6:7a:f6:7a:cf:ba:
                    62:5f:88:e0:41:e9:53:91:11:b7:1d:02:89:ef:a8:
                    15:1f:e3:42:20:6a:ba:a5:de:28:c9:3f:ab:ed:5f:
                    06:86:eb:56:ad:60:df:a8:d1:06:01:a9:d1:a5:c9:
                    18:a8:e6:8b:ed:20:6c:ad:39:5a:aa:7b:e1:f8:3a:
                    03:99:da:23:b3:3d:ae:ca:f4:d5:4e:35:1f:7f:5a:
                    fb:9f:4c:96:0a:8b:57:36:78:50:51:c0:67:d5:36:
                    f4:b4:4f:24:3d:f7:8f:4f:ca:b4:84:be:04:89:d2:
                    48:2d:cd:50:94:a1:c1:cc:5f:4c:3a:19:73:92:d7:
                    ba:ab:21:69:69:ad:6d:ba:31:e6:7a:fc:b2:4c:b8:
                    3a:e3:e0:91:8d:5b:c3:0d:96:ba:70:15:30:e1:a5:
                    fe:41:ab:26:6c:8e:73:2c:6b:a4:15:8a:21:e7:b9:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D7:CD:E1:A4:B6:1B:46:26:5D:0A:73:AE:93:A8:0D:36:FD:6B:43
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:03:48:a0:ff:a5:a0:48:99:72:e9:28:0f:ca:84:eb:da:
         0d:b5:be:fb:cb:6a:f4:04:74:21:eb:58:d7:2b:c6:bb:7c:f8:
         b4:4d:e3:31:5e:10:b1:ac:09:c5:71:d1:63:05:f0:12:72:84:
         26:4f:d5:90:b2:3a:4d:16:16:55:7d:5f:58:4b:f6:97:76:7c:
         d3:bf:a8:90:f4:a6:bf:f1:42:97:99:d6:d1:44:61:9e:4b:5d:
         7f:aa:d9:18:2c:2a:fe:73:d0:31:a4:cf:a6:c1:2e:bf:e2:4a:
         07:73:6b:bd:5b:92:15:b4:b1:aa:43:23:99:a8:82:d0:c4:4c:
         e3:ea:bd:d1:18:d3:67:df:43:8d:39:ec:a9:55:f2:5b:be:b4:
         be:bb:5d:d1:96:9a:b3:37:e7:92:d6:df:45:b2:26:86:4d:9e:
         77:c7:f2:52:3a:16:59:ff:d6:08:46:b5:fb:12:23:02:a6:9e:
         15:08:47:57:bb:93:41:a7:4b:79:27:db:61:b7:db:6d:ad:69:
         64:f0:26:8f:cb:eb:a7:c0:72:c5:ca:fb:5f:37:57:68:8b:04:
         9c:bc:22:61:83:0c:81:08:cc:92:3f:62:08:e1:0c:12:5c:ab:
         8d:98:51:67:5d:78:31:01:b7:7e:0c:b1:68:8c:c3:b1:7a:15:
         53:ae:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org