Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa
File:                     323830333a653732303a3a2f33322d3634203d3e20323732383033.roa (raw, json)
Hash identifier:          XDKDAc+7+6pawWZV4cHTL1XlcFcEXslOvQteMbaO0co=
Subject key identifier:   CB:CB:F6:39:CB:E4:60:80:9F:16:06:B8:66:2D:59:13:AD:16:73:89
Certificate issuer:       /CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
Certificate serial:       34AFD2D21F9DD6EA87C3F3B142E7B94273A0EF8F
Authority key identifier: F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa
Signing time:             Tue 05 Mar 2024 18:15:23 +0000
ROA not before:           Tue 05 Mar 2024 18:10:23 +0000
ROA not after:            Tue 04 Mar 2025 18:15:23 +0000
asID:                     272803
IP address blocks:        2803:e720::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:d2:d2:1f:9d:d6:ea:87:c3:f3:b1:42:e7:b9:42:73:a0:ef:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
        Validity
            Not Before: Mar  5 18:10:23 2024 GMT
            Not After : Mar  4 18:15:23 2025 GMT
        Subject: CN=CBCBF639CBE460809F1606B8662D5913AD167389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:0d:63:dd:e3:b1:b4:16:53:e3:bc:65:30:
                    e2:aa:c3:20:15:a2:68:05:2b:7d:ac:f0:df:2d:c5:
                    57:f4:69:cb:45:01:52:bb:83:f5:05:01:26:cd:9d:
                    e0:ba:fd:e3:98:db:7b:99:cc:2e:2f:08:66:1d:b4:
                    99:d2:d5:1a:e9:fd:7e:bd:eb:e0:09:ff:36:59:e8:
                    ab:e5:ab:74:7b:33:c1:f2:f5:5d:3a:3f:87:ca:de:
                    7f:bd:8c:28:1d:d5:3a:42:77:6d:43:09:e4:07:28:
                    d3:9c:a9:f0:31:a5:27:aa:eb:ab:d3:14:37:6e:34:
                    e1:2a:a2:3a:d4:72:50:5a:4e:1b:79:a5:eb:54:d4:
                    6c:0b:77:f5:b3:e1:5e:31:93:a9:a2:f7:58:e3:8f:
                    56:92:37:f9:2c:67:27:cf:b0:62:8d:f1:83:aa:ad:
                    ef:9d:5d:1a:2b:05:7b:93:b8:cf:53:20:7e:9d:8d:
                    05:92:07:4d:3c:7e:3a:24:65:fc:46:98:76:ce:85:
                    aa:ef:1f:68:7e:2c:30:f1:78:e1:0a:41:de:cd:3f:
                    2b:ab:45:f9:54:b2:6d:ef:e2:a9:ef:bb:8a:f9:1d:
                    df:8f:13:60:d9:49:c9:e8:13:80:65:60:c3:8b:66:
                    56:5a:9b:7a:ef:6e:83:9e:c2:80:ed:d8:41:90:21:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:F6:39:CB:E4:60:80:9F:16:06:B8:66:2D:59:13:AD:16:73:89
            X509v3 Authority Key Identifier:
                keyid:F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/323830333a653732303a3a2f33322d3634203d3e20323732383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e720::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:2c:14:0c:b8:6b:36:30:00:30:16:1c:d4:19:c7:8e:3b:
         ae:60:0e:3e:44:96:3e:2a:d0:62:48:d6:cf:84:bc:4f:9e:a2:
         1c:18:b3:9f:2a:92:d8:0b:e3:d7:3c:f7:41:82:8f:c4:f8:79:
         6c:31:e6:0c:67:ce:93:a2:53:52:e7:07:fb:23:f3:ad:46:17:
         3b:a6:ac:35:77:15:1c:0a:9f:7f:af:3c:5e:59:33:86:ce:7b:
         aa:cb:e4:73:ed:83:89:b5:96:ad:17:5e:80:98:0a:fb:3a:0e:
         11:c7:a8:d1:96:1d:6b:d0:bf:e8:97:ab:2d:3f:e7:be:79:94:
         64:9a:2c:a0:8c:40:92:e4:6a:7e:77:52:22:f5:87:82:46:2e:
         90:c8:d6:fe:a3:db:d5:2e:4e:4e:7b:53:e7:2f:5a:c8:5b:7c:
         58:95:6b:f3:b4:88:36:42:54:9c:37:13:a0:0c:53:3e:4b:36:
         1d:32:e9:12:b2:fb:90:c6:a4:94:f5:35:4f:db:5c:e7:45:9a:
         76:65:58:dc:4d:88:e3:37:b2:4e:41:0e:72:72:b2:8c:38:86:
         b6:1f:da:5f:c2:0e:d6:95:91:87:d5:a3:ed:da:13:0c:b6:61:
         c9:a8:fa:91:1a:17:52:ac:f0:d7:c5:97:07:b0:41:96:e1:13:
         c6:f2:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:37 2024 by rpki-client on console-fra.rpki-client.org