Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a343a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a343a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          gTUIW5cXBjfHC+I7D8LbkuO/V6ZUmY4fbNpx5EUS8cM=
Subject key identifier:   11:AF:2A:A5:76:2A:BF:72:12:56:79:AC:CB:D1:B6:13:31:EF:07:B8
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       0B7BD74F1037A44435774A680F4593FED4B7A6E8
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a343a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:04 +0000
ROA not before:           Fri 10 May 2024 15:30:04 +0000
ROA not after:            Fri 09 May 2025 15:35:04 +0000
asID:                     263242
IP address blocks:        2803:1180:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7b:d7:4f:10:37:a4:44:35:77:4a:68:0f:45:93:fe:d4:b7:a6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:04 2024 GMT
            Not After : May  9 15:35:04 2025 GMT
        Subject: CN=11AF2AA5762ABF72125679ACCBD1B61331EF07B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:44:c3:1f:bb:1d:d2:07:aa:d8:06:18:61:
                    a7:a3:ff:c7:96:3e:a1:5b:95:14:b3:b2:eb:76:13:
                    6e:71:8e:d4:5d:33:28:5f:98:2a:80:30:0f:be:4e:
                    e3:cb:00:c4:29:1f:a9:db:9f:20:c1:b7:49:19:0d:
                    1e:de:30:0f:ac:ea:e4:a6:2c:90:40:99:a5:c6:df:
                    ca:6f:22:24:ec:97:72:bb:a1:12:9f:79:98:92:ad:
                    90:de:05:b2:f0:0c:e7:d3:30:8f:a2:16:63:1c:4b:
                    94:10:87:95:85:3c:3d:33:0c:23:45:26:aa:d4:02:
                    95:1f:11:8b:da:dd:32:1d:29:14:2e:e3:c3:e2:24:
                    ad:a3:52:db:a0:b8:23:05:67:6f:7a:d7:72:07:75:
                    21:38:2a:d7:c5:ee:56:6c:4c:9f:00:c3:a1:91:40:
                    23:fa:32:86:9e:ce:97:e9:cf:46:61:1a:f2:55:34:
                    d9:01:2e:8a:0e:64:6f:b5:1f:9f:e3:82:3e:5c:ee:
                    c3:b4:f0:79:74:5c:a1:ee:a5:c0:c5:06:c3:ef:7b:
                    b9:2e:9a:21:1c:08:9b:2e:2a:ea:18:c8:59:ab:cb:
                    74:7c:92:2c:d0:db:35:c3:94:46:11:28:3d:4e:41:
                    c4:68:96:fe:94:0c:81:08:51:8a:70:4d:5c:4a:19:
                    4b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:2A:A5:76:2A:BF:72:12:56:79:AC:CB:D1:B6:13:31:EF:07:B8
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a343a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:af:f7:39:dd:de:0f:64:f4:83:58:52:09:79:11:30:7f:1e:
         cb:79:ed:e1:d0:bd:81:a7:27:02:4c:37:0c:8c:e6:b7:a7:ff:
         da:2f:f6:36:f0:aa:58:28:05:05:bc:ca:42:7a:40:f3:62:b8:
         1b:20:46:6e:7d:dc:70:54:94:bf:9c:58:0c:32:7e:ee:9c:b0:
         0d:4d:1b:b6:02:c2:61:41:bd:ec:7f:07:7c:17:f4:be:80:89:
         68:85:6e:0e:66:64:bd:16:f5:28:f2:03:9e:96:db:71:f4:19:
         4c:ab:b2:81:74:8f:45:f3:ee:e0:2b:47:fd:b0:ed:ab:26:d9:
         94:1d:9d:3d:9c:f3:93:0a:6b:86:22:d3:52:72:65:46:ff:7a:
         a8:ea:72:f0:84:15:c8:65:61:68:3d:bd:ca:1b:87:0b:fa:e7:
         47:a3:19:4a:41:1d:ee:a7:c0:ad:97:d6:f1:3f:f9:d3:0b:8a:
         15:72:e5:a2:b0:f4:7e:c5:3c:26:13:d5:65:30:a7:32:68:7b:
         0d:03:c1:4f:20:c2:23:08:0d:39:e4:f6:72:70:7b:42:1e:02:
         4c:63:ff:6a:4f:30:f4:fb:b3:f3:57:25:a0:96:fe:be:8d:ff:
         01:90:87:b5:55:59:bc:c5:07:89:da:bd:85:b2:e0:de:23:95:
         f0:81:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:38 2024 by rpki-client on console-ams.rpki-client.org