Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa
File:                     323830333a386236303a3a2f33322d3332203d3e20323639373938.roa (raw, json)
Hash identifier:          9wabOTR7nn+8jWgAwR3qwzkmxAmRaYuAthwAFaYPXYY=
Subject key identifier:   EB:BA:51:60:F4:50:B9:EB:CB:30:5B:A3:06:04:FC:D7:B2:82:67:52
Certificate issuer:       /CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Certificate serial:       7798D574BC20CF11A9808A51E69F7190A0051FED
Authority key identifier: EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa
Signing time:             Tue 05 Mar 2024 17:50:08 +0000
ROA not before:           Tue 05 Mar 2024 17:45:08 +0000
ROA not after:            Tue 04 Mar 2025 17:50:08 +0000
asID:                     269798
IP address blocks:        2803:8b60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:98:d5:74:bc:20:cf:11:a9:80:8a:51:e6:9f:71:90:a0:05:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
        Validity
            Not Before: Mar  5 17:45:08 2024 GMT
            Not After : Mar  4 17:50:08 2025 GMT
        Subject: CN=EBBA5160F450B9EBCB305BA30604FCD7B2826752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:27:b3:d2:13:2d:08:43:6c:fb:8b:2b:b3:30:
                    33:52:5b:16:87:5f:bf:cb:d6:66:10:04:ef:41:35:
                    17:8b:60:a4:db:26:22:50:f0:7e:16:83:7d:11:66:
                    17:ad:46:05:8a:21:2a:ea:68:6a:df:71:81:1f:c8:
                    33:b7:ee:38:cd:f5:29:f4:2a:e3:ab:a2:08:b0:49:
                    92:b3:e6:64:c8:b7:75:03:ae:58:f4:a8:bb:c5:b3:
                    57:f7:12:b1:b9:fb:8d:0b:31:37:cb:47:70:e2:18:
                    2e:e0:05:d1:4b:1d:06:12:38:cb:f1:87:dc:a1:17:
                    f5:9a:bb:f6:37:32:b1:84:78:d1:9a:67:f4:09:1c:
                    c7:2a:df:38:c8:fd:ab:5e:30:53:0c:cd:fb:e8:75:
                    7c:18:bb:6f:2b:8f:55:08:8d:0a:70:66:03:83:c7:
                    65:a4:13:d7:a8:d6:f4:3f:7b:6a:7a:5e:e9:21:79:
                    97:f0:3e:7c:21:67:12:11:b4:99:54:07:c8:e8:85:
                    92:62:05:96:68:c9:bc:33:c3:1c:7e:7e:50:a9:ca:
                    4d:13:cd:32:91:ae:f4:4d:99:e8:15:78:52:7b:38:
                    6f:13:e4:99:f1:88:06:37:23:19:8d:94:87:ff:d8:
                    4e:b4:13:90:e9:3b:a0:c6:9c:9c:fa:f5:de:cc:9f:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:51:60:F4:50:B9:EB:CB:30:5B:A3:06:04:FC:D7:B2:82:67:52
            X509v3 Authority Key Identifier:
                keyid:EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:1c:9d:79:05:75:b4:d8:90:9c:c9:0b:40:d0:3c:04:37:
         92:64:9c:9e:2d:f1:4e:6e:66:45:f7:62:bc:78:96:66:18:9e:
         53:0a:08:74:31:b4:47:50:7f:09:97:a9:9a:68:97:1f:66:cc:
         7c:94:b3:b7:5b:93:ee:64:23:38:8a:1a:65:e1:71:a6:98:06:
         45:35:cd:c6:64:72:1a:a8:61:b5:09:9a:a0:a8:ff:ea:51:52:
         8c:9f:c0:08:82:70:08:c7:ec:eb:7e:24:9f:9f:8e:d1:4a:10:
         64:4c:e5:8e:86:22:4a:68:16:3f:54:1b:aa:b1:0a:eb:11:8a:
         3e:2c:91:9b:20:97:da:35:e5:67:97:9c:c5:97:33:99:01:88:
         0c:c2:f1:30:c6:84:e0:d8:32:a1:78:7f:2c:7d:5e:70:50:7a:
         ef:25:86:70:8c:7d:f5:28:68:0f:09:40:eb:44:d1:cf:f9:a4:
         30:1f:43:df:63:90:d6:a1:f3:5d:e3:13:11:44:c8:30:a1:6b:
         a2:70:0d:96:47:45:ac:15:bf:0f:65:13:08:ef:82:41:db:2b:
         fd:98:ac:c0:09:35:16:29:58:3c:43:20:03:56:0b:ff:2b:3d:
         a8:9b:9f:4c:99:ec:43:88:da:c9:82:e3:e0:a1:89:75:fb:72:
         dd:d4:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org