Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa
File:                     323830333a366238303a3a2f33322d3332203d3e203238303933.roa (raw, json)
Hash identifier:          OXNg3oJHc4XlCjlilcDXLN+2W+FDCTnHksq0FeyvVGg=
Subject key identifier:   E5:C7:1F:EB:1B:99:9C:0A:40:09:2F:30:8F:30:A7:68:E2:31:6C:8F
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       775DB8C20B7F6E357FC4E396D61C09358A0E864C
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa
Signing time:             Tue 05 Mar 2024 18:01:56 +0000
ROA not before:           Tue 05 Mar 2024 17:56:56 +0000
ROA not after:            Tue 04 Mar 2025 18:01:56 +0000
asID:                     28093
IP address blocks:        2803:6b80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5d:b8:c2:0b:7f:6e:35:7f:c4:e3:96:d6:1c:09:35:8a:0e:86:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Mar  5 17:56:56 2024 GMT
            Not After : Mar  4 18:01:56 2025 GMT
        Subject: CN=E5C71FEB1B999C0A40092F308F30A768E2316C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:46:56:c2:e6:c3:0c:08:73:cf:e4:84:01:
                    72:84:d1:02:0b:18:e4:53:f6:20:b2:69:f4:31:5c:
                    a2:db:7f:d4:27:78:0d:42:52:44:a4:a0:ca:30:ab:
                    3c:9c:95:e9:aa:bb:e8:48:d7:60:5d:d1:92:43:de:
                    13:cd:9d:06:2e:4f:44:4d:39:1d:ae:12:d8:19:e8:
                    a1:4b:da:56:99:60:92:09:2f:74:cc:dd:26:80:84:
                    f1:1c:a3:04:f6:92:d8:cf:f8:5a:84:b4:d7:fa:aa:
                    a5:15:7a:f9:29:4a:88:58:c8:35:0e:e0:d6:37:bd:
                    52:99:a9:61:af:3a:7a:58:49:7b:52:21:6f:ec:ed:
                    45:54:6a:d6:77:82:db:74:f3:00:39:0c:e4:8a:15:
                    46:5f:bf:cc:a9:d6:00:b1:f8:68:e8:7e:f5:dc:88:
                    c3:77:82:92:e7:16:6f:b6:fd:86:79:32:b9:4e:63:
                    60:97:3a:7d:56:fe:ab:b1:24:46:55:78:c9:82:a5:
                    02:2c:9c:c6:6c:96:1e:c0:81:69:4a:ec:7c:a7:f3:
                    33:d6:9c:70:06:eb:14:a0:c2:77:4d:c9:1b:d1:04:
                    41:01:5f:a3:b5:d5:e4:17:78:20:d5:cc:fa:26:4e:
                    06:73:bf:de:4a:dd:87:1e:f5:41:3a:ab:09:57:fc:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:1F:EB:1B:99:9C:0A:40:09:2F:30:8F:30:A7:68:E2:31:6C:8F
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/323830333a366238303a3a2f33322d3332203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:af:49:00:aa:b8:43:dc:43:48:6f:c0:fc:74:c1:fa:1b:
         28:91:fa:1a:29:1d:f8:d1:e4:f4:ae:81:51:05:b1:16:34:46:
         4b:0b:3c:10:5a:bf:6e:d9:fc:b9:ae:b0:8a:b6:bc:0b:95:c2:
         af:5e:a2:79:bc:11:3e:40:3a:2b:79:3b:9d:b2:29:9f:17:c2:
         0e:18:f9:a1:8e:16:80:f1:13:ff:4f:bc:8e:b8:8b:d6:d1:3f:
         78:f6:7b:a9:ee:b9:9e:56:4c:11:c7:07:7a:5b:a3:78:44:79:
         c8:2f:23:f3:c1:fc:31:a9:78:15:c9:c7:98:f8:8f:9d:7f:f8:
         a2:30:54:6f:03:4f:0f:a5:37:16:b1:25:a2:b5:c5:31:8d:e6:
         09:c1:09:30:25:0b:39:dd:64:a8:8a:34:ac:e5:a1:67:db:6f:
         a6:5a:37:66:f7:42:99:74:d5:a4:72:85:93:db:f4:ac:32:80:
         6f:a2:39:2f:a7:ca:8d:0e:5d:76:b6:fa:49:ac:80:d8:67:25:
         48:57:ea:e8:3c:e0:ae:2d:64:d9:a9:f3:48:06:f4:70:1f:c1:
         88:ec:98:73:ac:bc:06:61:60:0f:59:bc:1e:d5:73:bb:6c:3d:
         65:3a:55:0b:08:cc:c1:16:cb:ed:6b:d7:42:b8:c8:46:89:9d:
         1e:a5:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org