Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/323830333a3334303a3a2f33322d3332203d3e20323634363835.roa
File:                     323830333a3334303a3a2f33322d3332203d3e20323634363835.roa (raw, json)
Hash identifier:          UUZHo+ab4SnAQ63T+ildkMZdWaaISzYiN3DnC1gV99A=
Subject key identifier:   78:21:FC:36:D6:9D:9D:EF:A6:3E:21:2E:F5:2E:61:B0:56:1D:78:6E
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       1B9DD5FA50A534A6E0B8764EC89F68B4ABCCEE38
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/323830333a3334303a3a2f33322d3332203d3e20323634363835.roa
Signing time:             Tue 05 Mar 2024 18:14:41 +0000
ROA not before:           Tue 05 Mar 2024 18:09:41 +0000
ROA not after:            Tue 04 Mar 2025 18:14:41 +0000
asID:                     264685
IP address blocks:        2803:340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 May 2024 15:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:d5:fa:50:a5:34:a6:e0:b8:76:4e:c8:9f:68:b4:ab:cc:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Mar  5 18:09:41 2024 GMT
            Not After : Mar  4 18:14:41 2025 GMT
        Subject: CN=7821FC36D69D9DEFA63E212EF52E61B0561D786E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:38:df:ec:a6:22:f1:1d:a0:f9:9b:e7:4a:
                    81:92:f8:b6:8d:08:97:04:16:83:f1:65:73:95:5c:
                    1e:fc:9f:dd:7d:17:c5:7e:79:a8:da:e8:c8:a5:cd:
                    5b:40:37:71:66:ee:f0:49:2e:3c:c4:03:67:65:6a:
                    0a:3c:b7:df:01:24:8d:90:1b:37:ec:ca:06:65:d3:
                    18:87:5a:67:4d:39:f3:15:b9:48:9d:2e:7a:4c:56:
                    d7:d4:3e:6f:3b:44:9e:f5:45:a9:25:97:df:05:db:
                    58:87:1b:d1:1c:33:37:49:52:a8:95:ef:d9:2c:32:
                    0b:e5:f7:b0:4c:95:fc:a4:58:f3:5c:74:4f:db:b9:
                    da:1a:1f:8c:61:9f:6d:4b:6a:23:a6:9a:62:3f:0c:
                    da:c6:7f:08:3d:5b:c3:3f:f2:48:b4:a2:ba:a2:83:
                    24:0b:3b:33:32:2a:7a:1b:30:49:d1:4f:0d:fa:75:
                    4a:0c:d0:23:74:13:24:12:d7:ff:0b:4e:30:d0:11:
                    57:8c:0f:91:20:fd:f3:1e:32:c3:5d:67:d4:dc:cd:
                    cc:68:3f:bd:2e:db:70:6f:ec:38:6c:3c:42:9f:4a:
                    9b:00:ef:de:4f:59:0c:c4:09:73:82:84:5c:43:e9:
                    b4:e6:80:8c:67:1a:ba:48:24:39:c1:79:74:35:bd:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:FC:36:D6:9D:9D:EF:A6:3E:21:2E:F5:2E:61:B0:56:1D:78:6E
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/323830333a3334303a3a2f33322d3332203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:5b:14:ad:d5:29:e6:e9:c0:68:39:53:11:56:a2:17:82:
         1e:61:d9:51:47:96:02:a9:2e:8f:1d:09:ad:fa:3d:f7:cf:af:
         25:ab:22:c3:03:c0:aa:4b:b6:a7:6c:03:bd:39:91:7f:82:b9:
         67:6a:57:f8:13:30:84:bc:d3:6e:60:03:bd:0c:61:7e:43:4e:
         02:af:f8:19:11:3a:7c:53:55:ff:61:a9:74:97:45:de:80:ef:
         ae:3c:ed:54:f3:4a:8b:b8:c2:c5:c6:9c:94:a1:f8:00:36:2b:
         9b:4f:4f:6e:46:c4:ac:ae:f9:62:8c:ec:72:c5:60:1f:2b:bb:
         46:52:31:66:65:54:58:b6:7e:63:90:50:c9:8c:b3:47:58:58:
         30:87:4b:76:0d:72:c1:2b:b6:36:e0:98:0d:72:54:22:04:74:
         b2:83:1f:30:e7:d9:7d:64:32:3e:bb:78:43:01:80:37:8d:9f:
         4f:3b:08:ad:29:ad:17:d8:bb:6f:43:eb:cf:b3:42:ba:98:63:
         71:ef:66:d8:7e:7a:71:fb:fc:81:9c:56:20:3c:ba:c8:66:f9:
         5b:b6:6c:1b:fb:41:fa:69:75:1e:39:ab:ab:f5:f6:8c:24:79:
         cb:f3:d9:e3:c0:10:20:67:48:24:76:2c:ae:f9:ef:97:b0:9e:
         70:25:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:07:37 2024 by rpki-client on console-fra.rpki-client.org