Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/323830333a383265303a3a2f33322d3332203d3e20323633373933.roa
File:                     323830333a383265303a3a2f33322d3332203d3e20323633373933.roa (raw, json)
Hash identifier:          S6S+QlMSTetAVEm8vIAMnTccfBZ/gHxs8gUJcck47do=
Subject key identifier:   C3:FB:FB:54:D0:42:10:D6:03:29:83:30:9E:A5:4B:79:4E:40:9A:44
Certificate issuer:       /CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
Certificate serial:       0B7CB2D09D68AA6364F05748E9F59D00002E658C
Authority key identifier: E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/323830333a383265303a3a2f33322d3332203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:07:29 +0000
ROA not before:           Tue 05 Mar 2024 18:02:29 +0000
ROA not after:            Tue 04 Mar 2025 18:07:29 +0000
asID:                     263793
IP address blocks:        2803:82e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:b2:d0:9d:68:aa:63:64:f0:57:48:e9:f5:9d:00:00:2e:65:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
        Validity
            Not Before: Mar  5 18:02:29 2024 GMT
            Not After : Mar  4 18:07:29 2025 GMT
        Subject: CN=C3FBFB54D04210D6032983309EA54B794E409A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:8f:ad:29:c3:13:04:04:b6:fa:0e:30:8b:
                    46:6e:2f:8c:1b:ca:4c:49:f3:49:98:5d:e0:16:ff:
                    2f:b2:a3:62:cd:e0:99:fd:87:78:6f:d1:34:f9:33:
                    d9:d3:d2:f3:57:20:49:4a:d4:66:3e:65:86:42:78:
                    be:41:68:11:b3:12:e7:6b:ae:d3:be:b3:38:f9:4e:
                    08:0e:b7:6d:f8:b2:54:d0:5c:38:17:c3:5d:29:59:
                    89:3a:19:14:24:a5:68:78:21:e6:e2:fb:7c:5e:23:
                    01:57:7d:33:2b:10:55:fe:60:42:ec:9d:3c:bc:10:
                    29:a9:f6:2d:5f:01:5d:c7:6e:de:72:8d:cf:03:c2:
                    cb:dc:c0:d6:38:14:ed:85:44:36:af:7e:d5:e3:a0:
                    a8:d7:ec:4a:13:54:f4:e2:6a:88:20:17:e8:ca:af:
                    7a:58:4d:8f:a9:82:58:39:ac:85:c1:ad:47:e6:b8:
                    23:fc:4e:92:6c:e1:32:b8:33:12:0e:50:d8:4a:36:
                    1e:1f:a8:0d:11:fd:f0:c3:ad:30:f0:1d:12:21:d5:
                    50:53:03:cb:d1:28:99:61:ac:f6:3e:e8:a8:36:a2:
                    de:42:fc:7b:f5:98:24:04:93:a5:c0:cd:e5:82:68:
                    e9:34:3c:b1:fe:7f:4c:48:1b:95:b6:73:83:8c:c1:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:FB:54:D0:42:10:D6:03:29:83:30:9E:A5:4B:79:4E:40:9A:44
            X509v3 Authority Key Identifier:
                keyid:E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/323830333a383265303a3a2f33322d3332203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:06:bd:f7:a2:e0:4a:99:a8:c6:68:a7:cc:1b:5c:85:d0:
         5f:fa:74:7a:fa:8d:51:bb:29:1f:4c:54:56:28:07:7d:60:da:
         09:54:5f:5e:6d:ea:bb:3b:a5:55:ca:9d:f5:86:ec:f0:99:dd:
         9c:0c:bf:78:44:8b:5c:a5:96:4c:62:5f:e3:75:43:02:07:ed:
         22:c5:28:d2:ef:5b:65:77:af:b8:34:75:72:49:22:50:69:ed:
         b1:76:49:15:e4:d1:97:91:0b:de:54:7e:62:8a:9e:70:f0:13:
         2e:05:c3:b9:6e:b2:11:25:ec:65:fa:41:8d:e3:1d:03:e0:69:
         88:81:47:b6:44:58:26:f8:76:28:5f:98:f8:ad:e4:5a:b9:24:
         3f:90:64:38:75:af:30:f5:bc:ba:09:c6:b3:04:00:74:ec:bc:
         71:ee:9c:b7:3e:80:42:d6:46:57:18:09:33:6c:f8:41:0f:c6:
         d2:56:d8:33:a8:f0:da:b8:fa:86:5b:6e:e6:45:a5:05:a5:d0:
         03:90:71:61:fd:bf:95:b4:99:f9:47:15:fb:cb:70:9a:b2:04:
         83:f1:48:ec:90:44:bd:25:dd:c0:7c:e8:b2:ad:e8:2d:af:65:
         47:d5:72:40:69:4f:ff:ec:5b:e3:ee:44:63:ea:64:df:c5:c7:
         28:db:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:08:01 2024 by rpki-client on console-ams.rpki-client.org