Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/323830333a363938303a3a2f33322d3438203d3e20323634363537.roa
File:                     323830333a363938303a3a2f33322d3438203d3e20323634363537.roa (raw, json)
Hash identifier:          mNJ1U2Xutg69FN9V2oKAYMxA+bJzHTgSyqLfu3aZvfY=
Subject key identifier:   CD:BB:CC:3D:DB:56:06:14:03:11:DB:84:1B:63:F9:9C:25:9F:5C:EE
Certificate issuer:       /CN=5E735DA8637DD92FEE6FE848D05B7DC667F6E556
Certificate serial:       3055128C393F3608BC2D1607BB7F6E284DC9DE0E
Authority key identifier: 5E:73:5D:A8:63:7D:D9:2F:EE:6F:E8:48:D0:5B:7D:C6:67:F6:E5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/323830333a363938303a3a2f33322d3438203d3e20323634363537.roa
Signing time:             Tue 05 Mar 2024 17:49:35 +0000
ROA not before:           Tue 05 Mar 2024 17:44:35 +0000
ROA not after:            Tue 04 Mar 2025 17:49:35 +0000
asID:                     264657
IP address blocks:        2803:6980::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:12:8c:39:3f:36:08:bc:2d:16:07:bb:7f:6e:28:4d:c9:de:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E735DA8637DD92FEE6FE848D05B7DC667F6E556
        Validity
            Not Before: Mar  5 17:44:35 2024 GMT
            Not After : Mar  4 17:49:35 2025 GMT
        Subject: CN=CDBBCC3DDB5606140311DB841B63F99C259F5CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:b9:28:70:c2:ab:33:6a:0f:8f:ce:cc:a4:
                    ba:58:02:4e:3b:02:75:36:33:0d:63:b3:cb:5b:7f:
                    37:8c:37:aa:f2:11:25:4f:2f:24:b3:ab:8b:a9:4a:
                    af:a7:33:06:a8:9d:21:0b:d1:45:82:43:07:16:10:
                    46:5b:cd:7f:0d:92:56:ea:8c:0d:d3:3e:20:c8:b5:
                    e9:9f:9a:d0:8b:cc:9e:67:54:85:00:2e:ac:ec:b8:
                    73:bf:02:2d:6e:1e:69:03:e2:88:cf:71:7c:b4:43:
                    80:61:bf:c6:14:43:11:00:55:6a:5e:16:b4:d0:c3:
                    35:a6:33:47:1e:5a:65:1a:40:07:09:8b:3f:3d:3b:
                    21:8c:9d:c4:3e:fb:93:c1:4c:3a:1f:c4:27:35:cb:
                    23:a4:3a:2b:27:47:69:d3:99:05:1f:da:af:eb:6d:
                    50:a9:b2:c2:e3:a1:14:30:7f:8f:6c:00:c7:23:38:
                    a4:c1:2b:e7:0e:42:55:5f:f3:06:7d:4d:84:20:4b:
                    c2:b2:84:00:2c:60:9f:7a:e0:0f:b6:21:56:f3:f5:
                    11:43:53:d0:75:37:d9:27:94:2d:06:bc:e7:be:e2:
                    7a:c6:90:b6:34:48:a2:90:c2:04:ea:67:e6:22:65:
                    64:97:9a:34:94:3e:b7:90:5b:31:26:fb:ca:66:ff:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:CC:3D:DB:56:06:14:03:11:DB:84:1B:63:F9:9C:25:9F:5C:EE
            X509v3 Authority Key Identifier:
                keyid:5E:73:5D:A8:63:7D:D9:2F:EE:6F:E8:48:D0:5B:7D:C6:67:F6:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E735DA8637DD92FEE6FE848D05B7DC667F6E556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0F400092DFD3EB3C65B55565C58FFA4F02E015871014CB78012E450441AAD83/0/323830333a363938303a3a2f33322d3438203d3e20323634363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6980::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:99:9b:90:64:7f:d8:59:bf:d1:70:be:9a:46:2e:db:16:
         1b:79:04:f0:54:42:fe:c8:f6:63:42:29:2a:03:e1:d5:27:7b:
         cd:47:c3:14:92:5c:04:bb:75:71:b6:6a:72:47:94:ae:14:2d:
         a0:44:ab:a0:5c:1e:d0:c6:2b:02:6e:83:0f:1c:11:42:3e:1c:
         1f:66:18:df:94:87:06:1e:53:26:a7:a3:52:38:c1:53:e1:7f:
         97:2a:b1:6c:2e:1a:51:47:23:7b:6e:32:db:56:1f:27:c5:61:
         81:9e:a5:18:79:b7:b1:ca:45:f4:1e:b7:d2:15:f7:0b:67:03:
         05:de:10:09:1d:bb:4b:b2:b5:2d:e7:f4:6e:fd:06:e9:84:9b:
         6a:f7:91:93:93:47:8f:32:38:4b:d0:9f:84:e2:01:98:1c:17:
         cb:60:d7:27:ea:dc:93:f4:86:66:42:ca:73:62:d5:79:de:f4:
         49:fb:63:29:e3:7b:fd:bd:44:09:3e:aa:4d:b6:49:04:6b:26:
         49:8c:c3:2a:c7:27:be:ee:6f:fa:94:80:d6:bd:5c:bd:47:d7:
         48:f5:06:a1:cd:5b:f6:fe:b8:fe:ca:c4:6d:82:c8:7c:84:ef:
         91:96:1f:a1:2d:88:59:aa:bc:75:2d:36:0f:92:9d:b2:73:e7:
         25:ad:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org