Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa
File:                     323830333a3536303a3a2f33322d3332203d3e20323639373534.roa (raw, json)
Hash identifier:          CVXoToR+hBR/OpYtaVFXVJrj0gjDXMCp62tydsgfkbo=
Subject key identifier:   C5:8B:9A:C8:D1:1C:8E:6E:A7:3D:0C:F3:A2:69:D9:85:8F:AA:B4:B0
Certificate issuer:       /CN=816ABAE0A046154DBADCE37DF11279B86BBF7CBA
Certificate serial:       350EF9C7C048D54302B742A65BED4613F2C003FA
Authority key identifier: 81:6A:BA:E0:A0:46:15:4D:BA:DC:E3:7D:F1:12:79:B8:6B:BF:7C:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa
Signing time:             Tue 05 Mar 2024 17:45:06 +0000
ROA not before:           Tue 05 Mar 2024 17:40:06 +0000
ROA not after:            Tue 04 Mar 2025 17:45:06 +0000
asID:                     269754
IP address blocks:        2803:560::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0e:f9:c7:c0:48:d5:43:02:b7:42:a6:5b:ed:46:13:f2:c0:03:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816ABAE0A046154DBADCE37DF11279B86BBF7CBA
        Validity
            Not Before: Mar  5 17:40:06 2024 GMT
            Not After : Mar  4 17:45:06 2025 GMT
        Subject: CN=C58B9AC8D11C8E6EA73D0CF3A269D9858FAAB4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:80:ef:ef:5c:39:d5:58:1a:03:88:10:f3:
                    00:af:cb:79:74:02:2d:82:5d:4c:ca:a2:62:2c:d9:
                    8c:2e:f6:20:7c:e5:25:cd:a5:11:04:45:d7:7f:00:
                    6d:c5:94:af:32:dd:f1:7a:3a:48:2d:57:49:26:93:
                    06:e3:ad:05:f4:83:1b:74:06:d5:df:64:99:90:5d:
                    75:84:37:01:bb:3b:35:df:b9:ee:8b:fa:84:e2:74:
                    d5:88:0f:7d:62:19:c1:77:51:60:6f:06:d5:5b:74:
                    a6:07:20:a8:7b:5d:a0:cd:34:7f:3a:74:fb:bc:69:
                    d7:8c:f2:58:72:1a:eb:43:d8:f5:80:66:b4:61:38:
                    a9:7f:a2:ac:39:1f:84:49:4a:6c:04:45:7e:da:88:
                    23:2c:44:9c:60:a2:f2:ba:74:a5:c7:19:db:58:b1:
                    57:be:62:7e:83:bf:66:52:98:c1:42:b6:45:b8:08:
                    56:97:55:56:af:25:9e:21:a4:a3:c0:ed:fe:6b:ab:
                    89:ad:44:14:ed:8a:97:42:2f:ab:65:87:4a:ba:c1:
                    f4:c1:58:8f:07:cd:0b:02:d4:79:7f:85:eb:a4:04:
                    a0:93:c9:72:ed:a1:e5:65:6e:1d:6c:bd:4b:a9:cf:
                    6a:b3:6f:40:7e:d4:af:06:25:a5:1d:16:ab:a3:bb:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:9A:C8:D1:1C:8E:6E:A7:3D:0C:F3:A2:69:D9:85:8F:AA:B4:B0
            X509v3 Authority Key Identifier:
                keyid:81:6A:BA:E0:A0:46:15:4D:BA:DC:E3:7D:F1:12:79:B8:6B:BF:7C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:560::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:77:56:87:f0:1e:3a:42:71:6c:b2:90:92:48:9b:71:97:
         08:63:4a:d0:ba:82:32:e1:a5:5b:2e:57:23:cd:09:fe:ca:5f:
         d8:25:21:75:d7:58:42:ee:a6:77:93:32:14:99:54:70:e2:e3:
         7d:64:f3:04:80:fa:d2:34:17:9c:b2:7f:73:e1:19:c1:e9:89:
         cf:83:47:c8:88:9c:99:ea:d3:06:cf:2c:ee:b0:1b:bb:04:56:
         bd:b9:89:c8:3e:78:b7:f8:d3:6b:3e:b2:9a:b1:dd:b4:87:58:
         8f:1e:77:43:6d:f5:0d:c2:ed:f6:c3:d4:0d:83:55:b4:ff:94:
         05:04:5a:ce:17:0f:8d:0c:d3:80:9f:fa:a2:20:59:c4:5a:cf:
         b6:3f:cb:07:1d:ad:5e:f2:7f:8e:20:fe:e8:65:4d:de:57:54:
         ae:6b:ab:4d:fe:0b:a7:9a:66:c8:a5:6e:5f:35:72:53:81:83:
         28:2f:24:b0:64:57:cb:55:f9:1d:f9:9a:18:43:68:59:d3:4c:
         3a:3d:7a:80:0c:c1:1c:e8:aa:56:bd:18:1b:b7:90:9f:89:13:
         c8:a0:fd:33:ba:19:3a:33:75:4a:71:98:da:c2:ae:7b:32:3c:
         f8:08:93:51:92:c1:bd:ce:72:af:46:79:4f:e3:d8:b7:4a:e5:
         5d:6e:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org