Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/323830333a653430303a3a2f33322d3332203d3e203532333733.roa
File:                     323830333a653430303a3a2f33322d3332203d3e203532333733.roa (raw, json)
Hash identifier:          TEkve9uwdjuu9KjrKqwuU4ay0o9YJ0ECgbbku1LwE4U=
Subject key identifier:   A6:A8:6C:89:96:85:51:47:82:70:9F:B5:02:F7:3B:37:68:24:46:FB
Certificate issuer:       /CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
Certificate serial:       4ADC190FE9FF77E0CE01BFFAE8759FFEB5264018
Authority key identifier: EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/323830333a653430303a3a2f33322d3332203d3e203532333733.roa
Signing time:             Tue 05 Mar 2024 18:16:37 +0000
ROA not before:           Tue 05 Mar 2024 18:11:37 +0000
ROA not after:            Tue 04 Mar 2025 18:16:37 +0000
asID:                     52373
IP address blocks:        2803:e400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dc:19:0f:e9:ff:77:e0:ce:01:bf:fa:e8:75:9f:fe:b5:26:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
        Validity
            Not Before: Mar  5 18:11:37 2024 GMT
            Not After : Mar  4 18:16:37 2025 GMT
        Subject: CN=A6A86C899685514782709FB502F73B37682446FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:b9:e2:86:ce:21:6e:ed:a7:16:bf:70:d5:
                    c3:cc:89:1b:7d:db:8c:68:10:88:cb:cd:5a:dd:79:
                    c7:2f:61:d5:8c:20:84:a6:fc:cf:a9:0c:75:79:d0:
                    1e:3b:53:71:ee:d5:87:e3:e6:7d:11:10:11:6f:4c:
                    83:bc:4e:3d:28:8e:1d:b3:d3:3e:9e:0d:ce:51:60:
                    3d:a0:a6:a4:23:b4:e7:69:7a:71:40:7c:42:0a:bf:
                    8a:38:09:2a:fc:df:69:39:a0:e0:96:a5:f7:6d:00:
                    09:8c:ae:f1:a2:4b:76:e7:cd:5c:1e:b4:13:f5:e2:
                    6b:69:ba:61:9b:ca:3e:9a:48:2f:8f:0d:1d:2c:90:
                    97:e0:32:1b:43:3d:ba:e8:68:83:2a:83:6c:e3:e6:
                    90:65:e5:5e:93:05:41:38:f9:9b:8a:9e:8a:a5:12:
                    4a:75:04:4e:6f:19:28:73:19:ef:5a:db:58:0b:87:
                    64:54:53:15:4a:ac:34:64:5c:7d:af:a5:0e:61:e8:
                    d7:4f:2b:f6:d2:ee:b6:fe:b6:2c:16:77:73:dc:da:
                    99:3e:bc:00:a7:44:6b:42:46:16:4a:30:f0:22:6e:
                    82:36:44:ee:3a:c2:01:ed:82:1d:81:5d:7c:80:cf:
                    e4:a2:2d:e8:c1:41:1a:85:bd:11:69:c0:51:56:1b:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:6C:89:96:85:51:47:82:70:9F:B5:02:F7:3B:37:68:24:46:FB
            X509v3 Authority Key Identifier:
                keyid:EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/323830333a653430303a3a2f33322d3332203d3e203532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:a6:fb:fa:51:f3:d0:1d:0e:2a:b1:49:08:43:c9:08:1f:
         1c:49:2f:53:7c:d6:6c:ab:f6:6e:83:50:8c:df:d5:2a:a5:6f:
         05:d2:a5:1c:c7:12:d3:bf:ad:89:df:ad:62:04:7b:73:77:ab:
         28:dc:58:0c:2a:3d:6a:15:47:95:7b:9e:e1:aa:05:62:b0:29:
         ab:f0:68:e0:33:f1:d6:75:39:c9:9e:e6:2b:a8:7e:96:dc:49:
         d3:8f:18:91:3a:70:33:73:5a:23:29:31:42:d5:da:bb:34:82:
         4f:1e:b5:27:28:64:11:c2:ee:04:74:ba:ae:81:db:a6:da:a1:
         0e:b9:46:84:43:32:ff:6f:9f:04:d1:b9:5a:29:3a:0f:76:a3:
         15:38:06:ea:89:f6:a8:25:44:e8:6f:c5:41:76:ff:40:a8:7b:
         05:73:04:fb:27:bb:ae:be:a4:db:4a:21:b7:7a:62:03:99:a3:
         77:3d:e8:8f:a1:05:f3:cf:2b:25:99:d5:1f:62:91:4b:56:ba:
         ad:f0:c6:d9:b4:b1:a5:f1:c5:53:48:fd:1a:2b:f3:2c:d1:1d:
         e5:5f:36:58:54:36:a0:29:75:4b:9e:58:df:b7:df:d8:a5:74:
         8b:c3:e4:38:15:cc:b8:2d:a4:42:ee:fd:ae:ca:11:e7:d5:6e:
         5f:9c:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:31:51 2024 by rpki-client on console-fra.rpki-client.org