Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa
File:                     323830333a336165303a3a2f33322d3332203d3e20323639393434.roa (raw, json)
Hash identifier:          GHqAE/1GxHjHHfBVI/jESQNc3cHqPrU7dnZVQU8lqZU=
Subject key identifier:   76:8C:66:39:BE:72:B0:EF:0B:B4:97:8F:3D:F8:1D:59:94:69:24:12
Certificate issuer:       /CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
Certificate serial:       64F524BE1D58F9FE5E68C58A76BF56C651420187
Authority key identifier: EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa
Signing time:             Tue 05 Mar 2024 18:10:18 +0000
ROA not before:           Tue 05 Mar 2024 18:05:18 +0000
ROA not after:            Tue 04 Mar 2025 18:10:18 +0000
asID:                     269944
IP address blocks:        2803:3ae0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f5:24:be:1d:58:f9:fe:5e:68:c5:8a:76:bf:56:c6:51:42:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
        Validity
            Not Before: Mar  5 18:05:18 2024 GMT
            Not After : Mar  4 18:10:18 2025 GMT
        Subject: CN=768C6639BE72B0EF0BB4978F3DF81D5994692412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:79:f0:10:80:5d:53:68:9d:74:97:9a:da:
                    4b:07:b1:c0:7d:17:b9:08:6a:ae:c2:4c:02:86:c0:
                    e6:81:91:71:95:71:95:d8:b6:25:f4:9f:70:fe:bb:
                    e6:07:ea:36:0c:29:dd:36:cb:3c:8a:af:d5:3a:6d:
                    05:62:5f:dc:e4:5a:56:ee:5b:89:12:ca:a1:f0:37:
                    68:22:0d:ba:99:53:c0:59:ae:f5:8f:e3:c8:c5:00:
                    9c:57:35:ea:f6:39:dd:ee:08:97:1f:a5:c8:d2:be:
                    c6:03:99:72:27:4a:71:03:0d:2e:de:90:2e:39:c2:
                    d0:35:eb:23:6c:77:91:80:8d:12:fd:80:5a:65:8a:
                    2d:2c:12:b8:d6:ac:31:77:9f:ee:bb:80:00:e7:50:
                    66:a4:25:bd:44:56:2e:19:8a:4c:7d:27:5c:53:ed:
                    e6:3e:ba:b5:40:e4:4d:4e:43:30:13:cf:ae:b4:fa:
                    e8:20:22:6e:7c:cd:5a:07:a9:d0:5a:94:e7:ce:8b:
                    20:06:35:5b:8c:78:d1:5a:d9:80:5e:b6:58:f4:a4:
                    54:ec:5c:d7:e2:a9:91:39:8e:68:6f:81:f7:7e:ff:
                    35:34:41:1e:73:15:c5:c6:fb:bf:87:73:6c:d2:79:
                    cf:8b:0c:c4:66:98:65:83:ba:03:0a:60:bf:8a:ab:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:66:39:BE:72:B0:EF:0B:B4:97:8F:3D:F8:1D:59:94:69:24:12
            X509v3 Authority Key Identifier:
                keyid:EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/323830333a336165303a3a2f33322d3332203d3e20323639393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:71:9c:9f:83:96:ef:b8:c9:15:ef:0c:9e:d9:a7:78:8b:9a:
         62:13:ac:9c:f9:56:44:0b:2f:7e:1b:69:96:10:df:ae:5a:d6:
         1c:6c:61:c4:2c:30:ab:db:f9:4d:dc:f3:9f:c6:c8:c7:5c:e8:
         0d:43:eb:0c:52:8d:e3:a4:78:bf:13:e9:2b:88:9c:0b:a6:c7:
         20:2f:46:96:e4:e7:51:a5:70:98:cc:fb:4e:7b:8f:22:d8:ef:
         57:2b:87:9f:24:00:37:aa:cf:e5:9a:2e:18:f3:87:64:78:7f:
         d7:74:de:c0:1c:c7:dd:41:89:41:d0:fb:36:98:1b:3f:ee:10:
         bf:d2:d6:54:71:f1:0b:63:b8:87:30:ea:4b:c8:8a:7e:d2:75:
         cf:62:a8:35:c4:79:84:85:04:7e:ce:24:0d:99:6b:5c:c7:50:
         1d:6a:4a:97:cb:f6:6b:74:72:ae:d7:23:ba:06:eb:a2:63:92:
         f1:18:d6:74:33:03:32:2e:da:0e:9c:4e:27:4f:94:e3:0b:0e:
         aa:db:9b:5b:55:4d:83:8f:a6:dc:c6:e7:7f:9f:6c:3e:2c:94:
         cc:43:fc:07:92:92:db:2b:78:92:57:07:f1:4f:6e:dd:5e:1c:
         a2:fa:52:f2:9d:50:ed:b4:62:7c:21:80:1e:9f:4b:b6:64:a5:
         fd:e8:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org