Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
File:                     323830333a363834303a3a2f33322d3438203d3e20323633373638.roa (raw, json)
Hash identifier:          BDseZu++HYwFaFNJNldC3RzTMu/bU1dcwIsxjR/38+8=
Subject key identifier:   15:48:AD:06:C1:C8:94:15:9B:1C:DF:EE:ED:7D:79:E1:10:53:A2:B4
Certificate issuer:       /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
Certificate serial:       5E4B72E9CC19AADA2EDB341E515DB09346874AFE
Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
Signing time:             Tue 05 Mar 2024 17:53:43 +0000
ROA not before:           Tue 05 Mar 2024 17:48:43 +0000
ROA not after:            Tue 04 Mar 2025 17:53:43 +0000
asID:                     263768
IP address blocks:        2803:6840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4b:72:e9:cc:19:aa:da:2e:db:34:1e:51:5d:b0:93:46:87:4a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
        Validity
            Not Before: Mar  5 17:48:43 2024 GMT
            Not After : Mar  4 17:53:43 2025 GMT
        Subject: CN=1548AD06C1C894159B1CDFEEED7D79E11053A2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:32:cf:44:85:e8:d2:9a:4f:a9:ce:95:37:
                    f6:a8:b1:c1:c9:ea:0f:50:b8:7c:51:83:e5:33:08:
                    da:ff:2c:45:9e:5b:3b:2c:5d:45:1d:a7:45:8e:6a:
                    c9:79:f2:c9:8a:1f:bc:7d:a9:04:70:b6:32:1c:43:
                    5b:57:72:eb:84:0b:80:27:e5:07:13:68:77:61:77:
                    73:3d:c7:32:9f:ce:51:c7:81:c5:34:97:7d:c2:11:
                    c9:fd:80:da:19:69:d4:1a:ec:7a:f8:58:55:fc:b4:
                    55:5f:63:89:90:f3:75:1b:8c:44:c6:9e:6c:4e:73:
                    77:4e:6b:f9:26:19:e7:3d:78:e8:df:ee:4a:00:34:
                    cd:36:80:39:d6:24:11:91:22:fd:2b:09:5e:93:68:
                    bf:49:29:0e:cf:e6:65:3d:88:36:01:5a:7c:d4:9e:
                    13:ab:c7:cb:61:2e:a3:dd:3b:6d:c6:b9:31:ff:7b:
                    30:84:22:30:ee:9e:a0:bb:18:fe:cf:63:04:5c:a7:
                    17:06:5f:dc:e9:57:5d:5c:3a:37:78:9f:d3:14:6e:
                    cc:20:b6:07:85:63:a2:26:f2:36:d7:87:1c:20:49:
                    5c:90:f6:91:59:8a:b9:ab:d5:c3:74:f8:6d:58:49:
                    9b:51:29:b9:27:4c:23:0a:54:ea:07:21:ec:24:a1:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:AD:06:C1:C8:94:15:9B:1C:DF:EE:ED:7D:79:E1:10:53:A2:B4
            X509v3 Authority Key Identifier:
                keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6840::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:be:df:0f:86:1b:64:26:bc:56:17:88:b9:bf:3e:f3:ee:
         44:bc:f8:ca:be:29:85:36:bf:90:c7:13:0a:e2:53:4d:a6:d2:
         a8:55:ef:40:27:47:1a:e9:b7:74:cd:f1:41:84:7e:cf:e8:9a:
         e3:b7:95:d7:8c:70:b9:74:7a:fb:4a:30:a2:3a:1b:78:35:13:
         7f:32:ba:da:9e:60:83:47:64:ca:bd:58:61:71:f7:5d:1f:c1:
         81:a2:7c:a0:dc:24:0d:c0:07:2f:44:4b:9b:9a:b5:37:01:6f:
         70:bd:be:c6:1d:98:97:ee:f8:aa:b6:74:d3:40:dd:65:af:d9:
         6a:c3:88:85:c0:e4:b8:bb:85:7b:66:8d:f8:1b:b3:ef:6f:1f:
         f9:84:d8:66:79:df:e5:a5:e5:23:f8:f2:b0:6f:05:f1:aa:44:
         5f:d4:57:60:d2:ee:3d:c6:fc:77:e7:ff:07:0a:60:78:ae:7f:
         12:31:d7:8c:17:bf:72:5d:3c:2b:3f:ba:d1:80:2f:2f:1f:da:
         ea:9a:93:3d:30:e1:ce:a8:4c:76:f8:68:aa:b1:07:d8:9b:bd:
         e7:fa:8d:5c:5f:56:45:15:85:3f:86:a9:93:4d:be:5b:38:58:
         d2:46:d4:52:4c:6d:c8:1e:a1:3b:7a:1c:c2:1b:3a:4b:96:09:
         d7:00:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org