Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
File:                     323830333a343636303a3a2f33322d3332203d3e203237363930.roa (raw, json)
Hash identifier:          PheWQA4O5e6ET0c8eIr1UMgodXOAzlMQTGjgD7o4aMU=
Subject key identifier:   2C:D1:4F:F0:A9:19:95:E3:90:F6:34:69:07:48:4C:6D:3A:16:95:BC
Certificate issuer:       /CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
Certificate serial:       3A933368CC554802922DE11378DCC5EDD2F43745
Authority key identifier: 1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
Signing time:             Tue 05 Mar 2024 18:13:16 +0000
ROA not before:           Tue 05 Mar 2024 18:08:16 +0000
ROA not after:            Tue 04 Mar 2025 18:13:16 +0000
asID:                     27690
IP address blocks:        2803:4660::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 02:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:93:33:68:cc:55:48:02:92:2d:e1:13:78:dc:c5:ed:d2:f4:37:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
        Validity
            Not Before: Mar  5 18:08:16 2024 GMT
            Not After : Mar  4 18:13:16 2025 GMT
        Subject: CN=2CD14FF0A91995E390F6346907484C6D3A1695BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:f8:de:de:3c:ab:c9:25:89:db:2a:ce:38:
                    ce:1c:49:db:f5:1e:6a:3a:56:19:1f:79:68:0a:f4:
                    ef:0f:d8:e8:00:3b:50:78:13:11:48:ab:0e:d1:ec:
                    33:ff:39:cd:c3:eb:31:6c:7e:17:03:9a:4c:13:88:
                    2e:84:d6:03:05:8b:0c:ab:39:0d:80:4a:03:ae:2b:
                    5c:5d:06:1f:62:43:59:6f:db:00:7a:1c:8c:5c:4b:
                    8c:0b:4f:46:e3:d7:8f:a3:53:b0:61:fc:eb:a0:09:
                    7e:6d:17:da:09:84:b8:85:ec:95:6b:23:ce:a0:db:
                    11:44:ab:33:c6:d7:14:de:f8:e5:11:e6:6d:e7:39:
                    c5:49:b9:93:42:1d:3d:d7:12:13:dc:27:ea:69:e0:
                    64:79:68:1d:ea:6a:30:b3:ce:d0:c4:88:ce:3b:5a:
                    d8:ee:fd:ab:a6:60:f6:eb:a2:47:db:d6:7c:30:f0:
                    bf:b5:80:a8:cc:9c:a0:3e:03:ce:28:47:99:10:7a:
                    4c:7e:1e:1f:6d:26:a1:1b:8e:7c:ba:16:21:5b:e4:
                    45:ad:09:c2:07:e9:e3:93:2c:50:9c:d5:3b:38:18:
                    17:d1:5f:6d:45:b3:2e:32:2e:ee:63:c3:89:25:6d:
                    91:3d:23:51:34:32:f8:0a:94:ce:2f:48:c0:ec:0d:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:4F:F0:A9:19:95:E3:90:F6:34:69:07:48:4C:6D:3A:16:95:BC
            X509v3 Authority Key Identifier:
                keyid:1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:9f:86:71:d0:a6:c8:9b:45:b2:72:64:cf:ad:2c:ae:b5:
         e2:08:94:22:8b:c1:97:4a:92:7f:3e:f7:37:78:0e:db:9b:be:
         6b:40:1b:b1:bc:5a:90:b3:68:69:67:50:bd:0d:2a:5f:b3:45:
         9f:02:80:2d:b4:63:e3:dd:b4:5a:59:a8:4f:43:22:32:68:9a:
         04:02:86:ce:bd:7d:b4:fa:d4:9b:2a:7c:72:67:31:92:19:ba:
         34:28:6b:28:e9:66:40:86:5e:8f:dd:b2:90:7e:6d:26:49:91:
         ff:b7:33:68:16:c2:0c:33:f1:79:e2:cb:7c:5a:54:6d:46:53:
         3b:01:26:a7:95:3e:5c:f2:a1:7c:7c:1d:53:92:57:64:fc:7f:
         81:40:b4:11:39:97:f5:f2:81:9a:f8:ef:aa:8c:28:d8:db:2f:
         2b:b7:ed:4d:58:10:11:b8:f1:61:d2:9d:ba:71:24:cc:85:29:
         f6:5a:f7:e4:48:7e:dc:9f:94:cb:23:88:5a:a4:a5:59:9e:72:
         a7:30:86:8f:08:41:f7:b1:25:6d:81:94:77:c7:6a:80:ed:a9:
         69:e0:ee:26:f5:34:16:76:66:e6:82:77:f7:fe:0c:89:b6:e2:
         5a:64:e0:0b:0f:a1:0d:77:00:90:59:2d:cc:9c:b5:ac:ff:0e:
         08:16:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:05 2024 by rpki-client on console-fra.rpki-client.org