Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
File:                     323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (raw, json)
Hash identifier:          sErjkPYL8qS8dO2/Ava0uSs4dMWgG3cKcmWZ+hwsRdE=
Subject key identifier:   EE:4F:F9:65:72:5F:C7:70:63:32:C6:8B:6B:6E:51:99:2B:08:4D:17
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       5AD2D5FD2815E44A0AC72009678843834C5A781C
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa
Signing time:             Fri 12 Jul 2024 16:10:00 +0000
ROA not before:           Fri 12 Jul 2024 16:05:00 +0000
ROA not after:            Fri 11 Jul 2025 16:10:00 +0000
asID:                     271773
IP address blocks:        2803:a80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d2:d5:fd:28:15:e4:4a:0a:c7:20:09:67:88:43:83:4c:5a:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Jul 12 16:05:00 2024 GMT
            Not After : Jul 11 16:10:00 2025 GMT
        Subject: CN=EE4FF965725FC7706332C68B6B6E51992B084D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:0d:0f:0d:e7:16:fd:6e:df:9c:5d:c4:56:
                    61:c1:98:e3:5b:6f:e4:3c:2e:d2:38:5b:88:39:5e:
                    79:db:7f:12:56:8b:49:6c:dc:1b:a9:7d:7f:e9:ba:
                    97:84:d8:91:f9:82:99:5a:b5:24:5d:ec:1a:5d:69:
                    27:ec:9e:2d:c6:bd:ed:7c:11:60:ac:2c:e6:bc:06:
                    40:d1:02:c7:eb:90:ae:5d:27:53:1e:53:38:c6:29:
                    7e:67:10:29:ca:fd:93:c0:da:19:c9:1c:6c:f9:dc:
                    4a:59:14:a6:1e:ad:6b:99:00:00:b8:16:81:c7:b1:
                    e0:8d:a6:14:d5:e4:f2:a9:19:0f:d5:6b:1b:86:7e:
                    d0:43:73:d6:23:57:8e:f8:ab:82:7f:df:87:96:2e:
                    3e:28:ab:92:7b:a2:c1:d0:ef:43:78:bc:2b:ab:31:
                    a6:a4:94:b7:33:bd:12:5b:ca:38:9b:f3:be:8a:d3:
                    eb:2d:a7:4d:03:25:8f:d7:98:c1:e3:31:32:cb:17:
                    8c:c0:81:56:fb:fd:b1:13:02:a8:43:a6:d8:de:a2:
                    b3:8c:cd:48:79:6d:69:94:75:3f:c5:43:d8:59:a7:
                    5d:66:7e:f6:37:87:3d:1e:90:e1:ab:76:7f:df:1c:
                    36:bd:50:2a:51:4e:60:f6:02:a1:c7:d7:6b:04:53:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:F9:65:72:5F:C7:70:63:32:C6:8B:6B:6E:51:99:2B:08:4D:17
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a6138303a3a2f33322d3438203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:d4:b7:3b:65:6c:50:60:c6:da:e2:9b:62:54:73:44:3f:
         3c:24:25:85:e6:88:35:c1:28:75:26:0d:c6:47:a7:75:c3:ab:
         dd:bc:ed:ec:69:2c:14:51:f4:c5:61:d3:f7:0f:dd:7e:0a:de:
         80:6a:5a:52:0f:0c:b2:eb:2a:29:c8:1f:bd:c4:c7:bc:9c:e9:
         11:af:c7:3c:e5:81:39:3a:e4:40:cd:df:51:99:de:c4:52:ad:
         17:b2:01:a2:fc:26:9b:c7:59:c7:08:fe:1f:09:35:39:fd:56:
         c0:a6:0e:2d:79:77:5f:25:eb:01:31:77:64:63:1f:67:ef:c0:
         fe:ad:71:73:c1:08:4b:0f:9e:00:63:8f:a6:8b:3b:d2:bc:5c:
         9a:5f:8b:b2:d3:ba:50:1b:56:3c:89:f9:25:7b:60:d4:0f:b8:
         94:6c:3e:82:88:e5:31:33:63:75:02:21:09:c9:38:13:8e:d0:
         fb:70:d8:a3:b5:7d:46:22:8d:31:e2:ed:4a:dc:9b:f5:28:89:
         a8:4c:d4:6e:ac:10:19:9a:28:e1:85:3d:61:29:d2:53:fb:f3:
         80:a6:db:96:9b:b4:d9:57:9e:69:68:ef:06:aa:50:a7:04:bb:
         5d:d9:6c:5e:59:31:0e:c6:5f:d5:5b:3f:85:31:20:da:d0:7e:
         3d:4c:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:13 2024 by rpki-client on console-ams.rpki-client.org