Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
File:                     323830333a356130303a3a2f33322d3332203d3e20323632323136.roa (raw, json)
Hash identifier:          A7/gocZd4XefDCI6cIf6I7ha3lhvWSd/80tFDf5tWo8=
Subject key identifier:   D8:2F:BC:ED:47:02:70:02:81:1F:84:24:F0:DA:6E:D5:87:AB:40:83
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       7BA3C95A908E0C27552D2260B47EC5B220B26AA4
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:02 +0000
ROA not before:           Fri 08 Nov 2024 14:05:02 +0000
ROA not after:            Fri 07 Nov 2025 14:10:02 +0000
asID:                     262216
IP address blocks:        2803:5a00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:c9:5a:90:8e:0c:27:55:2d:22:60:b4:7e:c5:b2:20:b2:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:02 2024 GMT
            Not After : Nov  7 14:10:02 2025 GMT
        Subject: CN=D82FBCED47027002811F8424F0DA6ED587AB4083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:62:98:57:1b:88:a0:2c:23:d5:8e:ba:de:
                    ed:61:1c:78:81:db:5f:66:de:db:c5:75:d8:57:db:
                    14:82:5e:e8:dc:2b:4c:1a:90:aa:f1:f5:a3:de:77:
                    b7:c3:1d:fa:e0:b8:2f:a3:3f:dc:1e:5b:46:f0:fa:
                    15:4b:c5:9f:17:30:b6:15:ab:74:a6:e8:5d:27:9f:
                    23:b1:e1:9f:3e:91:ec:b6:5a:e8:bb:a2:ba:5b:6c:
                    00:87:f8:ce:a7:5d:38:de:fb:60:75:bb:b6:3c:30:
                    bb:94:f1:58:dd:bf:10:77:9e:e5:d9:ed:c8:76:00:
                    cb:b8:79:1c:76:04:fb:9a:33:c9:ba:98:7d:36:b9:
                    16:6b:c3:1f:4d:c0:c3:b0:c8:91:a1:2a:85:76:a4:
                    a6:56:3c:fd:84:1a:e9:df:6e:97:8e:08:b7:f3:0b:
                    07:c8:91:4f:bd:33:ab:15:f7:cb:69:bc:18:79:70:
                    fa:28:0d:2b:e7:f4:3d:db:e1:2c:5e:c6:67:61:1b:
                    7a:b6:62:81:42:c3:c7:00:f1:d9:72:d9:06:f4:29:
                    9d:ed:a5:aa:b3:eb:e2:a5:34:38:3b:91:30:16:ad:
                    6c:00:c3:99:a4:b9:2e:9e:cf:29:4d:dd:90:bc:9b:
                    8d:1f:53:6d:17:ab:81:7b:a0:de:6f:80:ee:31:f2:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:BC:ED:47:02:70:02:81:1F:84:24:F0:DA:6E:D5:87:AB:40:83
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/323830333a356130303a3a2f33322d3332203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:a7:03:44:9f:20:38:c1:57:27:11:d2:a4:98:ba:ee:35:
         ca:87:8e:e5:fb:46:e8:55:e7:1e:14:3b:04:32:3f:25:f6:2a:
         76:f8:d4:e7:2c:8f:41:da:67:a3:34:0e:7f:03:2a:bc:a5:8b:
         5a:a9:50:50:c6:e0:cf:5a:cc:33:36:2b:34:d6:ef:c9:16:e9:
         97:66:ca:0f:ca:62:32:65:97:a9:13:82:d5:4b:e8:2d:12:0f:
         7a:bf:21:f2:ee:b8:e2:5a:a8:b3:9d:8c:69:2d:c7:f2:0c:18:
         13:de:12:84:2e:d8:92:ac:d3:64:dd:8f:84:64:ff:fc:0f:c3:
         27:d6:8c:6f:c5:f9:c4:02:7e:f7:53:50:0e:9a:a2:1b:3d:dd:
         4b:3b:77:1e:74:6c:c4:83:92:61:f3:21:55:e7:0f:49:d7:38:
         bf:ef:88:07:9a:16:09:93:be:a5:8c:45:9d:2e:b8:28:28:c2:
         85:f1:f9:75:e1:62:ef:70:f6:2b:d2:b5:f0:06:cf:01:16:2c:
         06:c8:38:4a:a6:69:26:cb:90:8e:fd:4e:18:bb:a4:0e:c5:9e:
         69:fc:a1:d0:d1:f2:5d:60:bd:d5:45:45:fb:b4:4c:a0:e5:0b:
         5d:78:a2:97:ba:7e:55:61:8f:07:81:d2:fd:76:cf:b8:98:d6:
         cc:33:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org