Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa
File:                     323830333a636638303a3a2f33322d3438203d3e20323635373034.roa (raw, json)
Hash identifier:          r11yHN3yenL/gLFAlcB0hhmi8qpgT9PzPQQmetF5/dE=
Subject key identifier:   F4:3F:19:46:C7:4D:AA:33:F6:97:1D:27:C6:3C:77:90:71:55:B0:BE
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       50250CFE9FAACB4765DE303C64456FA3B6490B02
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa
Signing time:             Tue 05 Mar 2024 18:10:30 +0000
ROA not before:           Tue 05 Mar 2024 18:05:30 +0000
ROA not after:            Tue 04 Mar 2025 18:10:30 +0000
asID:                     265704
IP address blocks:        2803:cf80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:25:0c:fe:9f:aa:cb:47:65:de:30:3c:64:45:6f:a3:b6:49:0b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Mar  5 18:05:30 2024 GMT
            Not After : Mar  4 18:10:30 2025 GMT
        Subject: CN=F43F1946C74DAA33F6971D27C63C77907155B0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:71:09:89:f4:00:67:5f:7e:f2:11:94:73:
                    51:a4:0b:8e:19:d6:91:cb:2e:68:9c:b4:84:ee:d3:
                    23:46:b6:68:39:9c:d0:c3:5b:fe:60:7b:8c:bc:85:
                    c0:c3:53:8c:97:fa:66:9b:58:74:53:76:6b:2a:af:
                    89:9a:8e:25:e4:59:fe:d2:ef:c0:2b:0e:25:dd:b3:
                    b9:2f:4a:f2:89:f4:0e:ac:0f:2a:1e:98:3f:94:58:
                    76:2b:af:0f:3f:a7:c5:0e:5f:6f:fc:03:97:37:10:
                    de:3f:3d:01:a0:79:4d:ff:87:4e:c8:64:49:a0:e9:
                    a4:d5:0c:e1:75:9a:a6:2e:52:d1:71:6f:53:f4:c8:
                    aa:c0:17:79:2c:e3:03:b8:ab:0b:2a:74:52:89:d9:
                    cd:bd:ce:a5:1d:ba:cc:ac:e1:3c:84:25:3d:b3:02:
                    68:a5:53:6f:53:ff:87:85:72:af:5b:c8:74:b6:cd:
                    26:22:9a:a8:0d:87:2e:15:42:43:db:ec:49:8a:eb:
                    5b:ce:c2:6b:93:a4:85:70:68:26:34:3b:03:86:1c:
                    3c:59:b0:8a:a5:0e:1c:5a:28:61:21:78:3e:ad:af:
                    df:c2:19:f9:76:a9:e6:8d:99:24:32:cf:bc:31:75:
                    a6:2c:d4:f8:f9:83:ba:02:fd:c0:c9:b1:a3:53:47:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3F:19:46:C7:4D:AA:33:F6:97:1D:27:C6:3C:77:90:71:55:B0:BE
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323635373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:97:30:db:31:f5:7a:0d:40:47:48:69:e9:9d:27:86:5f:f9:
         c0:10:b9:61:5d:95:f2:14:cb:e8:f9:ac:1e:ba:e7:8a:b9:5c:
         74:64:01:0c:cc:d3:da:d4:7f:af:08:a8:33:30:c9:34:b3:53:
         db:2c:06:3b:b8:1a:70:10:8d:96:93:b2:a1:be:39:2d:c5:6a:
         cb:1c:9b:1b:52:76:28:9d:00:13:a8:64:40:21:3b:cd:43:45:
         a9:0a:47:81:e7:e9:7b:4e:28:09:78:9e:c7:bb:d5:64:4e:05:
         e7:b6:0b:d1:bd:f9:2c:51:47:f3:f1:14:f5:3d:e7:ef:8e:ed:
         55:df:b8:08:e7:57:e4:7b:a6:68:b5:41:1c:7f:ec:a4:c9:18:
         63:d0:17:e2:d0:d9:ba:29:83:25:8b:0e:e3:8b:08:39:bb:c5:
         bc:0e:91:6d:d2:7d:ea:62:06:fa:4a:57:52:80:fa:ab:21:76:
         51:e0:9a:4d:a4:96:5b:24:16:ca:e3:10:9f:cd:74:be:0a:a6:
         56:2d:07:90:a4:d6:ad:4d:29:98:42:62:c6:14:00:54:bb:02:
         ac:69:e6:46:d7:53:c6:33:ec:19:ba:0c:7d:01:25:bb:77:21:
         6f:2b:93:19:7a:d3:31:17:c8:23:21:3e:23:8d:aa:2a:10:f0:
         66:c2:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org