Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a366563303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          O7vDjz5frCFI/vesFwRDMCWjfmxXGzeyJjTtANtCpAE=
Subject key identifier:   5F:E5:A4:1A:60:D0:94:14:69:06:1A:E9:7E:43:7E:73:52:70:4B:C6
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       0907DBA071BB228FD51CFA0158EFB6B005B026B1
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:12:29 +0000
ROA not before:           Tue 05 Mar 2024 18:07:29 +0000
ROA not after:            Tue 04 Mar 2025 18:12:29 +0000
asID:                     52468
IP address blocks:        2803:6ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:db:a0:71:bb:22:8f:d5:1c:fa:01:58:ef:b6:b0:05:b0:26:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Mar  5 18:07:29 2024 GMT
            Not After : Mar  4 18:12:29 2025 GMT
        Subject: CN=5FE5A41A60D0941469061AE97E437E7352704BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:e0:d2:c0:45:79:6b:a4:0e:d8:80:22:63:
                    74:90:d6:c2:3c:34:f3:08:f5:04:5f:91:d8:fe:81:
                    12:f3:16:a4:7e:db:39:1f:a8:db:6e:f0:b0:37:d9:
                    b5:3f:d0:aa:91:4a:ca:21:96:eb:43:9e:7c:99:68:
                    16:07:a2:6f:1b:2b:60:2d:6d:08:0b:56:22:5e:3a:
                    db:72:1b:17:24:e6:63:8c:f7:f3:1d:50:b9:93:ec:
                    24:24:f7:14:4c:ee:0c:8a:b4:c1:1b:53:07:00:53:
                    fb:0d:53:e3:a1:4c:80:ba:9f:78:b4:d7:eb:81:70:
                    98:42:2a:ed:21:67:ea:a4:a1:93:69:f2:a4:9e:40:
                    73:d3:95:19:07:d1:b3:3e:85:3f:1f:b0:a1:3e:56:
                    51:2e:ac:c6:33:bc:6a:aa:cc:af:98:68:d8:00:46:
                    ce:2f:34:2b:16:91:6c:eb:e1:7f:ed:cd:df:2a:8e:
                    fe:96:dc:f2:55:5f:18:94:20:f4:0d:7a:19:f2:b8:
                    7f:80:57:c4:ce:0e:7e:9d:94:ff:eb:09:d8:d4:1e:
                    04:51:f3:91:c6:b5:26:22:10:77:64:10:dd:bf:32:
                    41:3f:96:bb:36:f6:6e:2b:b5:73:44:9b:83:b3:89:
                    cf:3f:f2:9b:ea:3b:06:f5:f2:ed:fc:ed:d7:f9:6f:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:A4:1A:60:D0:94:14:69:06:1A:E9:7E:43:7E:73:52:70:4B:C6
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:ef:08:61:3f:e6:8d:59:1d:5a:46:b8:c3:d9:3e:e5:8f:
         bc:61:87:fe:2c:fa:c0:75:5e:bf:21:22:f6:33:73:3d:64:0a:
         cd:83:46:3c:ee:ee:74:b2:0e:25:a8:a3:e6:ea:70:ca:cb:cc:
         91:29:1b:35:f1:30:3d:32:48:ed:17:3c:81:4b:02:cd:92:5f:
         35:f4:d0:2a:98:0d:28:de:cc:0e:a6:f8:62:34:da:f5:37:b1:
         27:69:e6:73:28:25:f3:87:e4:0c:c5:55:ee:e1:14:66:97:ed:
         21:ca:d2:fa:85:4d:ea:eb:44:e9:58:9b:08:a6:2b:5b:8e:7a:
         46:4b:37:58:d6:bc:d8:7f:86:0d:eb:23:ea:8d:fc:38:29:94:
         73:9b:3c:3d:37:e3:64:86:21:95:ea:9d:9a:6e:b0:7a:7e:1d:
         6c:0d:d8:e2:0e:91:86:81:74:f4:3b:64:71:4a:a6:15:70:37:
         83:e1:8d:76:f7:2b:93:48:c4:ca:40:a5:a9:37:83:5d:ba:ef:
         cf:c7:26:a9:77:6f:47:f7:b6:50:5d:90:93:c5:e5:e4:ca:7b:
         2e:bf:ae:d4:ee:76:49:20:eb:dc:d3:bf:3f:72:f5:ac:d0:61:
         a4:23:90:56:4a:ce:62:f5:65:b8:f5:64:67:ee:2b:08:33:56:
         e4:71:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:36 2024 by rpki-client on console-fra.rpki-client.org