Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
File:                     323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (raw, json)
Hash identifier:          JHP2Uezt1dzGGXxGqnFZBFGPhL5oSUsfaxOIfywP3yc=
Subject key identifier:   FE:31:40:F8:C5:57:7E:A0:8D:20:25:75:96:43:4D:5B:96:32:0C:1A
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       52F6F4668EE8B61303E248CEC2B78D87B605E576
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa
Signing time:             Tue 05 Mar 2024 17:45:01 +0000
ROA not before:           Tue 05 Mar 2024 17:40:01 +0000
ROA not after:            Tue 04 Mar 2025 17:45:01 +0000
asID:                     265794
IP address blocks:        2803:e020::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f6:f4:66:8e:e8:b6:13:03:e2:48:ce:c2:b7:8d:87:b6:05:e5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Mar  5 17:40:01 2024 GMT
            Not After : Mar  4 17:45:01 2025 GMT
        Subject: CN=FE3140F8C5577EA08D20257596434D5B96320C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:52:c0:0b:e6:5a:2a:01:7f:78:58:89:57:
                    78:31:70:43:b1:fa:49:fe:8c:d8:23:ee:e8:4d:b6:
                    fb:74:51:0f:d5:37:5d:93:6f:e7:21:84:30:9a:fd:
                    71:bb:72:83:43:35:ce:4f:0c:c1:66:a0:4a:59:57:
                    b1:62:48:08:88:55:f4:38:fe:37:b7:7d:fc:fd:c8:
                    55:d8:44:0b:7e:98:b9:98:ee:ac:42:13:80:c5:d9:
                    69:d5:b0:09:7f:58:ac:5c:b4:cb:24:40:d7:01:6b:
                    a3:b8:a8:1b:ac:4c:44:29:f1:93:36:f3:9c:47:4a:
                    21:b6:20:57:6e:94:73:e1:f0:ca:f6:fc:ce:64:1b:
                    5a:fc:04:fe:c0:18:a0:9e:1f:df:11:3a:be:97:a5:
                    ab:40:2e:f5:26:37:aa:cb:d5:83:b2:41:77:51:a0:
                    2b:17:09:5a:ed:3e:a6:58:14:45:d2:ad:5f:ba:dd:
                    87:47:03:3a:35:09:bf:21:cd:5d:eb:15:58:73:fd:
                    54:5d:d4:e7:78:a8:51:11:66:dd:8f:0a:87:98:5b:
                    9d:06:c3:ae:4d:1c:28:e7:52:a4:99:ea:cc:bf:67:
                    95:e3:fa:7d:2e:16:91:bc:33:70:19:72:e9:c3:04:
                    55:52:8d:95:1d:85:d3:a0:9c:92:bd:e4:af:54:18:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:31:40:F8:C5:57:7E:A0:8D:20:25:75:96:43:4D:5B:96:32:0C:1A
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/323830333a653032303a3a2f33322d3332203d3e20323635373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e020::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a8:2b:f4:c1:11:d5:48:c4:9e:e4:9b:3f:6a:f1:f8:95:02:
         ff:8b:f3:65:ce:e2:7b:58:fd:ca:b0:04:95:de:43:80:32:c9:
         1f:11:5d:f8:b8:50:bc:f3:fa:66:c1:2e:ee:b2:04:a4:9e:6e:
         09:d6:26:4c:f0:18:a1:b3:b8:eb:c3:6a:f3:68:4f:d8:1c:73:
         cf:84:9a:79:e9:22:b8:5e:6e:d6:b7:9e:aa:db:49:b7:d0:58:
         a5:68:53:ca:1e:bb:e8:61:6c:dd:ee:6f:ef:7f:f5:ec:2c:44:
         3d:6b:8f:79:ab:1e:5d:7c:36:b9:bf:be:2e:45:c4:65:b4:10:
         2d:4b:39:2c:b0:3d:4a:ef:0c:34:5c:9f:e1:e9:12:36:af:f1:
         0c:ef:42:a5:e9:5a:86:18:ad:a1:7c:1c:db:4e:75:82:6c:f1:
         2c:3e:fd:e0:41:36:2d:47:10:26:e6:dd:e3:7e:3d:e8:07:8a:
         07:bc:12:04:fb:34:3e:18:2b:7f:b3:e9:b0:f2:c7:f9:9b:6d:
         b4:a3:f5:54:70:73:bd:f0:c3:9e:77:fb:8a:0e:16:a1:ae:c1:
         ed:0d:c0:c2:dc:f5:59:60:a8:b6:fe:40:27:06:8e:6a:cb:e4:
         61:70:14:39:d5:3f:dc:c0:33:20:c8:1d:55:58:83:97:29:eb:
         0d:87:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org