Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa
File:                     323830333a646161303a3a2f33322d3332203d3e20323636383735.roa (raw, json)
Hash identifier:          5kIaVTx1zKaAh6YRxsdL3sJftng9fR0jyIT6ZPUDVUQ=
Subject key identifier:   AA:C9:71:5B:3E:66:2F:F2:AB:B0:02:46:AB:5B:C1:AC:32:BB:DC:92
Certificate issuer:       /CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
Certificate serial:       5A248A0CAB97EE32A9A23D5C863F2B8C9C44BCD9
Authority key identifier: 51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa
Signing time:             Tue 05 Mar 2024 18:11:40 +0000
ROA not before:           Tue 05 Mar 2024 18:06:40 +0000
ROA not after:            Tue 04 Mar 2025 18:11:40 +0000
asID:                     266875
IP address blocks:        2803:daa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:24:8a:0c:ab:97:ee:32:a9:a2:3d:5c:86:3f:2b:8c:9c:44:bc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
        Validity
            Not Before: Mar  5 18:06:40 2024 GMT
            Not After : Mar  4 18:11:40 2025 GMT
        Subject: CN=AAC9715B3E662FF2ABB00246AB5BC1AC32BBDC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:a6:cb:ae:b5:8c:a4:fc:9e:ee:63:07:26:
                    de:ab:bc:5e:49:d9:cb:f1:fc:ad:ae:84:74:98:87:
                    9a:64:a0:94:38:96:75:d8:99:9a:56:4a:c7:c2:76:
                    ef:1c:83:02:ad:4d:ae:03:78:bd:c3:d7:12:32:4a:
                    9b:1c:29:fa:a1:7f:aa:91:58:84:72:87:c4:88:74:
                    23:72:1f:a1:0c:ea:f4:7f:b7:a1:c8:cc:14:c5:7a:
                    95:49:08:d6:20:eb:47:bd:ea:02:62:76:d6:69:47:
                    2d:1e:6d:6b:7a:4c:0c:8e:63:45:00:a1:24:f7:c4:
                    34:47:47:9e:de:b8:f8:b9:8e:60:80:a5:13:30:b3:
                    f7:79:5b:d1:d7:75:e8:1c:fe:1b:2a:44:b3:4f:df:
                    c8:70:a3:19:b6:29:eb:13:00:24:df:ba:d6:38:51:
                    a8:05:71:4a:e0:93:dc:9c:05:cf:62:6b:6c:a4:31:
                    ee:d9:86:a8:c6:da:28:c7:0c:ee:0c:12:8e:47:6a:
                    97:a2:78:f3:ab:54:9a:d9:c7:65:79:6d:a4:95:19:
                    e6:81:f9:93:77:aa:2a:0e:ee:02:b0:0c:f4:ca:f1:
                    ff:a1:58:57:5f:8d:cd:6d:34:7f:54:23:97:60:f5:
                    cb:3e:7e:36:1f:59:67:65:9a:28:bc:da:25:95:b8:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C9:71:5B:3E:66:2F:F2:AB:B0:02:46:AB:5B:C1:AC:32:BB:DC:92
            X509v3 Authority Key Identifier:
                keyid:51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/323830333a646161303a3a2f33322d3332203d3e20323636383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:daa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:5b:70:1d:ee:21:a0:03:73:e9:6b:8a:57:fc:42:3d:8d:
         a7:18:b3:74:c0:2c:67:82:34:75:26:1f:46:78:c6:80:37:7c:
         6e:d5:06:91:13:0b:56:be:7c:ae:87:df:ef:68:6c:ee:6e:d6:
         63:81:e5:36:ab:67:82:e7:12:c1:b1:50:89:00:13:d3:2d:59:
         bf:b6:64:ed:65:4f:95:00:11:b9:38:05:8d:54:5c:67:b1:b9:
         99:04:96:f6:23:86:54:55:97:99:2b:02:ba:0f:9d:97:1e:3a:
         d9:21:22:30:cd:b5:c1:69:85:f3:62:3c:a3:fe:01:40:60:59:
         77:19:7b:3d:96:28:73:a5:22:e7:90:74:88:93:00:72:e7:30:
         b7:f7:8a:d7:17:7e:30:b5:81:fd:94:5d:fe:7f:2c:85:17:40:
         43:6f:8c:be:ae:78:3c:1d:86:d6:46:dc:33:aa:1e:85:f7:5b:
         57:5f:e8:6b:7c:03:e8:b7:ac:2a:b2:b6:6a:04:5e:72:74:67:
         f6:e7:77:ce:eb:4e:09:2b:8d:f8:a9:48:25:02:8f:68:3c:f5:
         65:e4:2d:4a:c1:b9:27:84:76:c7:9d:60:65:67:0a:40:ba:4b:
         d1:d9:c5:5c:ec:aa:3e:78:26:c6:a9:50:70:3d:51:4b:bf:8e:
         12:83:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org