Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa
File:                     323830333a313834303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier:          hrqsgl5E1qUqbJXpdK3YGyj7Q20U/lQFT2x+mnofaec=
Subject key identifier:   24:65:55:A2:E0:99:F6:95:23:11:53:66:40:A1:04:73:E1:4F:73:66
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       4E13B8DDF527DF8CC59B6C401AE83473AE3A191E
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa
Signing time:             Tue 05 Mar 2024 18:01:13 +0000
ROA not before:           Tue 05 Mar 2024 17:56:13 +0000
ROA not after:            Tue 04 Mar 2025 18:01:13 +0000
asID:                     265688
IP address blocks:        2803:1840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:13:b8:dd:f5:27:df:8c:c5:9b:6c:40:1a:e8:34:73:ae:3a:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Mar  5 17:56:13 2024 GMT
            Not After : Mar  4 18:01:13 2025 GMT
        Subject: CN=246555A2E099F6952311536640A10473E14F7366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:c4:a7:ed:ce:19:6a:87:4e:8f:db:13:e8:
                    f4:86:7b:6e:6f:4b:81:4d:c0:42:81:a5:aa:0e:66:
                    89:77:38:5c:a7:d2:0e:c4:a9:b1:e1:cc:69:dc:11:
                    74:64:98:1e:6c:a0:e3:79:f3:a4:38:3f:9d:04:82:
                    cd:41:67:23:9e:84:62:3a:66:4b:f2:24:b6:f8:81:
                    95:b9:83:04:3e:a4:1d:aa:2d:1d:33:fe:e7:12:38:
                    0c:a9:dc:82:b3:7d:91:8a:45:71:50:02:7b:18:0d:
                    12:cf:64:cd:1a:62:39:35:35:f5:0e:b4:fa:89:43:
                    43:bb:5f:be:ae:38:f5:a9:1b:79:61:72:ce:da:2b:
                    40:ab:b9:a5:03:2b:78:ed:af:bc:f0:d5:4e:71:36:
                    fc:2a:70:5a:e7:b7:d0:22:81:0c:c9:93:9c:9f:09:
                    d7:3e:1b:a5:d7:c0:d6:f3:84:d3:03:73:4e:ca:e6:
                    d3:3a:f1:cb:7d:4a:44:30:cd:5a:93:2b:09:83:c7:
                    03:a5:26:05:b4:08:8d:92:3f:5a:83:a6:3d:0d:71:
                    c1:e3:c4:ef:72:7c:46:b1:68:1a:ab:95:d4:5c:6f:
                    37:b5:02:33:45:2b:25:7e:18:2c:fc:ff:39:3f:d7:
                    fa:26:4d:bd:f1:66:cb:e4:89:da:56:f6:0e:35:7d:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:55:A2:E0:99:F6:95:23:11:53:66:40:A1:04:73:E1:4F:73:66
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1840::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:14:50:dc:73:91:b7:69:26:f2:27:7d:22:22:97:fb:4f:8b:
         3c:48:6e:bd:fd:8e:71:e4:1a:33:a6:b8:56:9a:38:23:dc:da:
         09:53:ae:4a:01:95:4e:08:ee:9e:8b:72:95:f9:f8:50:f5:67:
         8d:c9:1e:44:e6:af:18:c6:9f:48:d2:03:e6:cb:31:33:ca:1a:
         68:d5:3b:b5:06:02:3a:45:e2:ac:a2:ec:f8:77:f0:fa:2f:77:
         be:3d:56:57:d2:e8:87:d6:73:41:64:bb:d8:ca:46:ae:00:db:
         6b:50:02:f9:04:08:9e:76:f1:b8:72:63:58:79:e6:b6:d6:0a:
         cd:3c:59:73:8c:ea:0f:5f:80:83:ed:99:ba:ef:09:54:91:17:
         69:72:07:71:98:23:dc:94:6c:a6:ab:f0:0c:c6:54:37:76:22:
         aa:77:98:a3:fc:53:be:74:65:27:c7:30:a4:ec:09:00:f9:14:
         74:6f:a5:57:f6:c0:35:a4:0f:4d:39:91:7a:ee:d3:de:a3:ae:
         a5:71:00:a0:c7:5a:42:dd:c2:40:1c:06:78:61:a8:4a:7c:8c:
         26:b1:26:22:c4:4a:28:9b:41:6a:a5:8a:de:32:ce:da:19:95:
         6c:88:aa:08:c6:45:69:1f:3d:1a:11:84:97:4e:5a:8f:6d:f0:
         24:ff:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org