Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3332203d3e20323635363931.roa
File:                     323830333a663163303a3a2f33322d3332203d3e20323635363931.roa (raw, json)
Hash identifier:          7rNkhJ3/jP0ebSw8EoWNNBer9LVZWexpJPHS5T3K2P8=
Subject key identifier:   5C:1A:46:06:B4:27:EE:4F:E3:9A:57:C5:D5:81:4F:45:52:14:CE:5C
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       642A0A7723B6122679C067320526B164975731CD
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3332203d3e20323635363931.roa
Signing time:             Tue 05 Mar 2024 18:16:16 +0000
ROA not before:           Tue 05 Mar 2024 18:11:16 +0000
ROA not after:            Tue 04 Mar 2025 18:16:16 +0000
asID:                     265691
IP address blocks:        2803:f1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:0a:77:23:b6:12:26:79:c0:67:32:05:26:b1:64:97:57:31:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: Mar  5 18:11:16 2024 GMT
            Not After : Mar  4 18:16:16 2025 GMT
        Subject: CN=5C1A4606B427EE4FE39A57C5D5814F455214CE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:78:d0:48:52:5c:cc:c2:34:ca:49:17:bc:9f:
                    22:52:88:0e:5d:26:c3:eb:00:33:b4:f1:f4:3b:30:
                    7a:a0:1d:03:b1:14:47:8c:c9:88:d8:a5:b6:66:97:
                    19:d2:db:43:16:19:d8:19:8b:32:7a:53:6f:f8:69:
                    51:f3:61:51:94:93:ce:5f:fa:ba:09:26:a2:ef:49:
                    a3:5c:20:f3:c0:8d:51:f1:9b:c2:43:85:21:6b:e9:
                    82:af:ed:79:3d:a6:32:1a:7c:6b:06:dc:20:8e:f6:
                    ce:c7:9c:63:d2:4e:08:a5:49:3e:2a:71:ae:47:05:
                    0f:ee:92:83:95:1e:6f:ae:a9:1e:f1:ef:03:07:e2:
                    4b:0d:2e:e4:4e:0b:0f:ed:5a:2d:95:00:6c:4a:b3:
                    37:11:e4:6a:dd:a1:5a:ce:c4:5b:fb:89:f1:d5:ff:
                    e6:a6:32:62:55:83:eb:c4:b1:88:02:8d:f2:83:35:
                    5a:65:68:6d:c4:f0:8d:ca:06:bd:df:93:27:ed:6c:
                    91:24:b7:ef:2c:47:1a:71:6c:fd:17:b1:36:0b:bf:
                    7e:f7:e1:f0:7b:26:7f:16:82:e1:5f:bc:1e:d4:fc:
                    4e:57:c4:e6:1d:da:37:4f:f5:2d:86:1c:61:a7:ee:
                    5a:11:05:bc:06:05:ec:1a:d8:d3:9b:24:a2:d9:78:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1A:46:06:B4:27:EE:4F:E3:9A:57:C5:D5:81:4F:45:52:14:CE:5C
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/323830333a663163303a3a2f33322d3332203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:70:84:77:86:48:95:8c:ad:94:35:2f:04:aa:61:3e:82:56:
         88:cb:ba:29:40:82:0c:cf:57:a9:db:d4:e5:b8:98:5b:c5:33:
         99:ce:34:dc:0c:91:f5:90:d3:0e:4d:21:36:e3:0e:1f:15:f0:
         17:93:46:6c:cf:98:7e:0c:d8:28:c3:31:e6:a2:b1:0c:24:b5:
         5d:20:91:87:3d:96:e0:95:a9:7f:10:a2:81:48:1d:dd:25:e2:
         94:63:07:b0:a0:05:9e:05:4d:c7:24:67:be:92:5e:52:9c:3a:
         f6:ee:64:4d:d9:a3:e5:9e:89:14:e4:6d:2e:f3:df:86:b2:ff:
         4f:a7:4d:fc:be:05:ae:7b:fe:45:b6:3b:ae:0d:05:34:2e:54:
         f4:2f:70:31:fc:5f:f6:99:50:da:41:63:b9:98:a1:48:de:cc:
         6c:d6:3d:1e:44:80:cd:79:46:21:31:60:d4:1f:b6:e2:1e:4e:
         b7:c3:fc:2b:1b:ff:26:5d:aa:92:20:63:d9:d3:47:ae:fa:df:
         7f:7f:bc:ee:18:02:6f:80:2b:95:49:a1:83:d5:c6:ad:90:cf:
         c5:b5:d9:4f:b2:63:b0:f6:4a:5c:ba:0a:92:13:5f:e6:82:de:
         19:94:19:5c:e8:5f:9f:bf:d9:4c:f3:b5:22:a4:f9:70:66:1e:
         01:62:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:35:55 2024 by rpki-client on console-ams.rpki-client.org