Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
File:                     323830333a646163303a3a2f33322d3438203d3e20323635363334.roa (raw, json)
Hash identifier:          OVl2R8yNg3/+4YU8yyI4NLpvGwkPkqd5jY4EqE/rqfs=
Subject key identifier:   C6:51:78:CA:26:4A:D7:49:F0:10:0E:27:C6:62:23:3F:C9:53:5F:8C
Certificate issuer:       /CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
Certificate serial:       3E7B290B36756AC8E65C262F3A11DF6498E87DF0
Authority key identifier: 70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa
Signing time:             Tue 05 Mar 2024 18:10:51 +0000
ROA not before:           Tue 05 Mar 2024 18:05:51 +0000
ROA not after:            Tue 04 Mar 2025 18:10:51 +0000
asID:                     265634
IP address blocks:        2803:dac0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:29:0b:36:75:6a:c8:e6:5c:26:2f:3a:11:df:64:98:e8:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
        Validity
            Not Before: Mar  5 18:05:51 2024 GMT
            Not After : Mar  4 18:10:51 2025 GMT
        Subject: CN=C65178CA264AD749F0100E27C662233FC9535F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:0d:67:1f:dc:59:0a:66:81:c0:0b:34:04:
                    fc:84:b0:f3:42:b8:73:d1:34:33:ac:5c:69:f0:40:
                    95:40:70:ef:db:a3:c2:9d:c5:31:7e:7c:ce:59:31:
                    8a:f7:fa:fa:d2:1d:33:ef:60:65:7e:2f:e7:8a:37:
                    3e:7d:b8:11:83:4c:73:00:fd:3b:6c:c5:4c:fd:c8:
                    b0:cc:4d:4b:88:cb:5a:45:c9:0f:18:90:b3:50:01:
                    9a:fd:63:74:f9:f7:0d:bc:ab:35:86:c9:f8:ef:09:
                    08:94:cc:d8:74:01:da:9e:73:5b:3e:61:0f:c9:12:
                    79:99:49:3a:b7:c7:5e:1d:63:5d:21:6e:2e:8f:b9:
                    af:39:a1:f0:31:3a:8e:10:53:80:cf:6b:44:30:05:
                    d1:9f:01:bb:9d:d6:e5:ed:a1:23:69:6f:97:ed:0e:
                    ae:ec:48:ae:5b:7b:da:15:5b:0d:0c:56:e4:b7:6f:
                    6f:b8:fb:0d:96:f8:5b:d4:30:59:b9:c7:1c:5c:e7:
                    f5:97:de:b4:7e:c5:2d:a9:74:80:8f:8c:d1:8d:e1:
                    1e:e1:52:25:29:9e:cb:40:35:8f:f4:98:c7:f9:8c:
                    23:03:b9:c9:0a:44:79:b0:0c:5b:a8:06:10:02:11:
                    1b:d5:7b:c7:c4:87:0e:26:2f:e0:c7:08:d1:c6:61:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:78:CA:26:4A:D7:49:F0:10:0E:27:C6:62:23:3F:C9:53:5F:8C
            X509v3 Authority Key Identifier:
                keyid:70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/323830333a646163303a3a2f33322d3438203d3e20323635363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:cf:25:5a:77:02:12:79:7e:f4:ca:36:d2:19:a2:09:6e:
         bd:d0:c4:5c:59:95:f2:98:a2:e5:23:13:88:51:09:86:ae:89:
         b8:90:b9:fa:e5:12:b4:3d:6d:52:51:06:b5:9d:b2:fc:78:c4:
         0f:68:c8:dc:de:99:15:f6:2f:52:99:f1:7a:68:b9:25:bb:46:
         70:6c:2e:86:8f:4e:16:ac:4e:f0:ce:11:1b:c2:b1:3d:80:b2:
         f0:76:f8:0c:a9:32:d9:8a:c0:53:85:c5:3c:2b:f9:bc:fe:b5:
         6e:40:4b:7d:eb:5d:c2:18:61:ef:d7:dd:9b:a8:ed:fb:4a:40:
         9e:fa:c8:7b:b9:49:57:12:2e:ed:b7:c7:cf:5c:d6:3f:36:f6:
         a7:94:0e:19:e8:fc:2f:99:ca:ac:fd:ec:32:46:42:c0:f3:e7:
         df:dc:25:51:d8:ef:8f:83:1f:8b:42:24:dd:90:eb:f7:c2:17:
         65:f1:40:18:4e:48:38:24:4e:00:ef:13:c7:17:49:28:6c:d7:
         c3:f0:85:46:3e:aa:26:b3:0d:8d:65:8e:0e:ee:01:33:d1:45:
         08:77:6f:f7:0d:49:52:e6:ce:39:f3:98:e8:98:55:77:6a:91:
         e5:0c:8e:21:cf:f7:8f:1a:3b:51:76:ad:32:46:7f:f0:b4:38:
         7b:6d:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:45 2024 by rpki-client on console-fra.rpki-client.org