Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa
File:                     323830333a663038303a3a2f33352d3433203d3e203634313230.roa (raw, json)
Hash identifier:          3SPqo8KzyIUo3KfqnObzz4oOdxyz3OkDXmv+J21JxAQ=
Subject key identifier:   92:25:9C:83:62:EB:EA:F5:B0:C3:73:AA:47:6D:C9:94:64:EC:DF:E4
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       2E3807B53F03C3B369B88A88B975B287414EC656
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa
Signing time:             Tue 05 Mar 2024 17:45:56 +0000
ROA not before:           Tue 05 Mar 2024 17:40:56 +0000
ROA not after:            Tue 04 Mar 2025 17:45:56 +0000
asID:                     64120
IP address blocks:        2803:f080::/35 maxlen: 43

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:38:07:b5:3f:03:c3:b3:69:b8:8a:88:b9:75:b2:87:41:4e:c6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar  5 17:40:56 2024 GMT
            Not After : Mar  4 17:45:56 2025 GMT
        Subject: CN=92259C8362EBEAF5B0C373AA476DC99464ECDFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:42:69:cf:0b:e8:03:39:1c:0a:2a:f3:6a:
                    fb:99:df:4c:18:e8:2c:7c:43:85:2c:37:5b:0a:f1:
                    00:a8:fc:1a:c7:68:87:76:80:6f:32:ef:85:a0:f4:
                    ba:b5:54:69:85:4d:17:03:1c:ee:3c:9c:81:a2:fa:
                    1f:1a:a3:d4:65:e3:10:c3:f2:82:a5:93:67:11:ac:
                    ba:76:89:4d:42:c4:3d:2d:56:67:f6:cb:dc:57:7a:
                    fe:0d:5d:3b:51:5e:9e:5a:3c:bb:e9:f7:08:fb:ff:
                    eb:8b:bd:e7:70:ed:9e:1b:92:d7:48:72:7c:b8:e3:
                    d3:29:c1:67:c5:9f:57:e5:c7:8b:6a:c0:95:59:ba:
                    d8:95:ee:91:d4:fb:7c:68:f0:79:44:d9:57:a9:28:
                    7f:bb:33:54:d3:c3:50:dd:ed:e8:0a:e7:53:89:55:
                    52:f8:c8:7a:c9:e4:29:ba:25:59:0c:40:8b:15:e2:
                    94:5f:7c:03:95:f7:8e:47:2a:55:70:69:bc:61:1e:
                    ae:fd:6d:e0:e7:1a:ec:18:82:a5:6e:2c:b8:65:8b:
                    dc:62:a7:25:52:30:8b:2b:85:28:72:6d:81:db:12:
                    e8:ac:3e:bd:f2:a2:21:90:c0:f1:33:a1:9b:d3:11:
                    76:cd:c7:c3:ba:82:eb:16:4e:17:df:60:11:85:0e:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:9C:83:62:EB:EA:F5:B0:C3:73:AA:47:6D:C9:94:64:EC:DF:E4
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a3a2f33352d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080::/35

    Signature Algorithm: sha256WithRSAEncryption
         66:10:14:ce:4a:e5:b3:8c:03:b0:9d:b1:7a:67:7a:46:4e:aa:
         9c:1b:ff:0a:2f:fd:56:0a:ba:00:46:d2:e6:e8:ec:d3:bf:89:
         2d:a1:4c:43:1b:0d:04:e7:46:34:b8:31:39:2d:c3:0a:6c:1c:
         28:0f:26:0e:1d:42:2e:af:01:1c:a8:b0:6c:ba:40:6b:ed:9b:
         9e:25:ac:f7:b0:f2:8b:79:3e:6f:65:c6:27:b9:8e:69:df:d9:
         57:a8:01:4a:0b:60:05:4a:d6:47:18:65:18:8f:07:f3:d3:38:
         bf:52:a9:7b:d7:c3:27:04:b2:69:91:aa:bb:42:e3:a9:c0:e2:
         d3:c2:f6:82:e6:8d:72:28:31:47:f8:bc:d2:08:2b:99:4c:45:
         39:88:78:c5:f2:02:03:03:e2:7c:9b:f1:d6:8c:51:d9:90:6a:
         03:85:3c:c4:d8:d0:95:46:03:ff:08:5d:2c:f6:db:cf:33:dd:
         75:66:ff:2a:bd:e1:c4:69:af:c9:41:05:d0:01:3f:f0:f0:66:
         dc:ba:2d:bf:8c:2b:77:78:bb:59:be:16:71:71:3e:54:84:ac:
         a1:98:c4:93:20:fd:fd:e6:db:80:47:ef:a0:ea:8d:d9:d0:1f:
         4e:a4:8c:33:8b:26:56:10:ad:41:a0:72:bc:55:1f:bb:65:76:
         bf:a7:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org