Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/323830333a636232303a3a2f33322d3438203d3e20323635373735.roa
File:                     323830333a636232303a3a2f33322d3438203d3e20323635373735.roa (raw, json)
Hash identifier:          0jXtLp7J2pOCr5dV1FoGmDsycK1U7xmYOah3XFLunEs=
Subject key identifier:   1B:52:F8:82:16:8D:01:F7:EF:02:E4:C0:D1:E9:29:83:D0:75:17:85
Certificate issuer:       /CN=1CE606048F2E548E6C388DF39C23BFAA9A351F57
Certificate serial:       551D3D84084131402E540D0992DF52A976B6EC70
Authority key identifier: 1C:E6:06:04:8F:2E:54:8E:6C:38:8D:F3:9C:23:BF:AA:9A:35:1F:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/323830333a636232303a3a2f33322d3438203d3e20323635373735.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     265775
IP address blocks:        2803:cb20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1d:3d:84:08:41:31:40:2e:54:0d:09:92:df:52:a9:76:b6:ec:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE606048F2E548E6C388DF39C23BFAA9A351F57
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=1B52F882168D01F7EF02E4C0D1E92983D0751785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:fc:17:69:d2:16:50:20:38:94:57:b3:6f:
                    bd:fb:5c:37:da:43:89:28:e5:3c:1e:89:eb:7e:5a:
                    04:d7:e4:5e:ac:53:c5:1c:80:c4:a8:ed:33:2a:42:
                    a2:92:b6:b0:89:1a:0d:40:4d:7a:b7:5f:0e:8b:dd:
                    f8:30:eb:cd:f4:48:05:c9:0d:98:b9:ad:be:6d:c0:
                    c4:0c:dd:97:8b:0e:d3:df:38:24:4f:8f:e4:b6:5e:
                    ed:26:d7:ae:29:b2:12:63:f8:c6:2b:ef:f6:d2:9d:
                    95:42:77:07:57:0b:c9:02:82:64:54:0f:df:c2:be:
                    e1:40:6a:c8:50:f2:e6:b3:cc:ee:0e:93:9e:0e:ae:
                    a9:ce:cf:33:0d:36:47:20:60:c4:ed:5f:c0:04:20:
                    c8:c8:8b:49:ad:8c:d0:76:67:7e:ed:6f:eb:a1:59:
                    32:d7:aa:07:82:72:83:1e:57:c4:f1:b5:7c:38:5c:
                    a6:11:44:f4:07:0b:a1:66:3e:98:8b:71:6e:58:72:
                    f2:d9:7e:f0:2c:c4:74:a2:19:86:71:5c:a7:47:d7:
                    4e:71:44:ad:0a:bb:3b:19:8a:6b:b0:48:38:aa:03:
                    28:40:79:f7:59:1d:b5:e9:a5:91:41:0c:37:21:73:
                    9b:d2:f9:48:46:b5:9a:7a:a5:a0:9e:bc:d0:c9:b2:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:F8:82:16:8D:01:F7:EF:02:E4:C0:D1:E9:29:83:D0:75:17:85
            X509v3 Authority Key Identifier:
                keyid:1C:E6:06:04:8F:2E:54:8E:6C:38:8D:F3:9C:23:BF:AA:9A:35:1F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/323830333a636232303a3a2f33322d3438203d3e20323635373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:4b:e8:a8:39:13:0f:8c:7b:ca:70:a4:9b:78:05:32:93:
         b7:61:33:39:36:a1:35:f6:a1:6a:a4:c2:9e:9e:dd:32:98:13:
         fa:82:d2:ee:57:04:02:ab:3f:77:0a:60:4b:a1:d0:24:bc:9a:
         8d:fe:ec:75:e3:63:94:be:f1:25:15:d7:b1:0b:c2:bd:82:ca:
         0a:ee:f4:31:e4:30:c2:3e:83:bd:22:9d:9d:35:c0:e3:be:e9:
         f6:14:5c:68:7e:ae:03:9e:57:5f:f1:66:08:22:1d:cc:99:a9:
         c0:2b:e8:02:23:a6:2c:6d:89:ce:37:9b:07:09:7e:d8:e8:10:
         b0:41:00:90:e5:80:55:a4:d3:12:b9:fe:24:29:06:24:1a:c1:
         f1:cd:74:ec:03:95:e0:b3:33:bf:11:08:4f:52:66:bd:ef:f2:
         56:1a:86:86:98:a7:44:b0:69:59:97:7b:b3:96:6e:8a:a0:cc:
         a4:c4:5b:0d:9b:9a:3d:72:88:d5:9b:61:69:8f:65:a8:1f:4a:
         ed:6c:5a:a7:18:56:53:c5:9a:ce:94:a9:2d:aa:c4:39:ee:61:
         14:b0:60:03:9a:b0:1c:20:16:01:b5:42:0f:bd:15:29:53:5b:
         df:79:a8:6a:93:a4:26:43:55:e3:e9:d5:55:b2:ff:1e:fc:cb:
         7f:8b:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org