Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/323830333a6261303a3a2f33322d3634203d3e20323637373536.roa
File:                     323830333a6261303a3a2f33322d3634203d3e20323637373536.roa (raw, json)
Hash identifier:          NcrsboA2CD7iryPBoLJ30KH+NxYC5E4J1xjtVmxInRE=
Subject key identifier:   3F:29:CF:D4:73:77:27:63:D7:E1:00:8A:D0:9A:DB:7E:31:05:D8:6E
Certificate issuer:       /CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
Certificate serial:       50991A6404DF86E49F46A53CE542D8D5079624D7
Authority key identifier: 26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/323830333a6261303a3a2f33322d3634203d3e20323637373536.roa
Signing time:             Tue 05 Mar 2024 18:07:21 +0000
ROA not before:           Tue 05 Mar 2024 18:02:21 +0000
ROA not after:            Tue 04 Mar 2025 18:07:21 +0000
asID:                     267756
IP address blocks:        2803:ba0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:99:1a:64:04:df:86:e4:9f:46:a5:3c:e5:42:d8:d5:07:96:24:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
        Validity
            Not Before: Mar  5 18:02:21 2024 GMT
            Not After : Mar  4 18:07:21 2025 GMT
        Subject: CN=3F29CFD473772763D7E1008AD09ADB7E3105D86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:03:be:d5:1e:f2:bc:1d:96:28:30:67:c7:
                    e0:72:19:59:57:c3:0b:93:29:49:5d:3e:52:47:75:
                    0f:90:b6:e5:8c:7f:20:79:28:5e:7f:53:0c:dc:0e:
                    f6:8b:59:3d:1f:bf:fd:f2:dc:83:19:8d:4a:0d:57:
                    ea:92:6d:cc:0c:51:ff:0a:8c:eb:1a:39:fd:fb:a3:
                    82:f9:6a:d7:17:aa:f5:15:93:1e:80:f0:d2:8e:a2:
                    08:4b:e8:c0:87:4b:c2:b5:4d:52:0d:a8:9e:81:df:
                    71:a0:3f:05:46:cb:5a:96:e9:68:a0:c1:c4:8e:ce:
                    c8:1c:2d:e3:1b:87:a2:af:85:7b:82:5c:d7:cb:6f:
                    10:53:8d:ba:4c:a4:a5:93:be:a8:ac:d0:4f:cb:5c:
                    d1:be:a5:84:5b:06:f3:f6:c5:22:f0:44:70:de:8c:
                    d4:a6:76:36:67:8e:ab:62:d2:dc:4f:58:90:27:bc:
                    0a:7d:e7:6f:bf:2b:1b:f7:dd:3b:2f:bd:d1:fd:4c:
                    f7:69:00:52:39:bb:de:70:2d:2e:a4:0b:bd:2b:69:
                    95:70:d7:ca:56:c0:78:be:7c:c5:dd:ff:bc:21:30:
                    f3:f4:a3:86:8f:02:28:5e:7a:1b:f1:4e:22:6b:84:
                    0e:34:b0:5d:98:d1:fb:e1:f6:79:52:72:02:c6:26:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:CF:D4:73:77:27:63:D7:E1:00:8A:D0:9A:DB:7E:31:05:D8:6E
            X509v3 Authority Key Identifier:
                keyid:26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/323830333a6261303a3a2f33322d3634203d3e20323637373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:c4:9f:b5:9f:21:2c:0c:8d:2e:57:93:90:8f:45:7f:1a:
         20:b6:0c:93:72:eb:dc:d4:ac:0b:80:b7:db:91:52:78:44:78:
         4d:01:cb:de:37:a8:e6:40:6c:7a:00:59:05:40:d2:78:39:20:
         91:7f:a2:1b:e9:a7:a0:6e:73:d8:6c:d8:c4:41:bf:cb:6c:36:
         fa:34:35:d2:b0:f8:16:d7:de:ed:61:5b:dc:61:8c:a7:cf:1f:
         86:68:95:21:04:b8:20:88:8a:53:7e:aa:34:9a:ec:e2:f1:a9:
         5b:06:d9:10:73:5d:49:f8:27:f7:f8:44:f5:d1:6a:c2:36:d1:
         ea:35:bc:40:3b:48:9c:bd:4d:df:71:15:bb:6f:53:53:52:5c:
         72:9c:cd:57:a7:a7:13:a2:6a:c0:01:8f:af:b8:b8:f6:33:b5:
         92:f2:85:02:d1:5b:87:3e:c2:84:01:11:96:bb:3d:7c:78:a2:
         dc:92:33:ce:36:83:13:36:af:a3:6f:77:8e:08:34:6b:68:b3:
         94:ec:0a:fd:fb:f4:91:50:e1:fc:01:36:7d:84:cc:33:11:f9:
         f3:b1:6f:37:c9:a1:12:f2:5c:c8:7d:3a:63:df:3d:be:4e:82:
         a4:a6:5f:5a:cf:4b:20:65:3d:f0:fe:7d:b3:3a:40:22:d8:1d:
         5a:54:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org