Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa
File:                     323830333a353634303a3a2f33322d3332203d3e20323633383336.roa (raw, json)
Hash identifier:          woNx4SrhjlqcwLvnv/kQAGeik6evyJPCaSX/KnupY7M=
Subject key identifier:   85:D5:BB:FC:FA:DC:EF:78:09:CE:15:4C:78:C0:3D:67:7A:8B:F8:93
Certificate issuer:       /CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
Certificate serial:       02EF38358F65DAC0525FF2B8278E0966C3CF5F8D
Authority key identifier: B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa
Signing time:             Tue 05 Mar 2024 17:49:22 +0000
ROA not before:           Tue 05 Mar 2024 17:44:22 +0000
ROA not after:            Tue 04 Mar 2025 17:49:22 +0000
asID:                     263836
IP address blocks:        2803:5640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ef:38:35:8f:65:da:c0:52:5f:f2:b8:27:8e:09:66:c3:cf:5f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
        Validity
            Not Before: Mar  5 17:44:22 2024 GMT
            Not After : Mar  4 17:49:22 2025 GMT
        Subject: CN=85D5BBFCFADCEF7809CE154C78C03D677A8BF893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:5f:d0:d4:7a:da:6e:51:c7:b6:79:7e:e2:
                    ad:c4:0b:71:02:b1:01:68:8c:3b:e4:93:75:97:0a:
                    22:cd:42:a8:76:6f:0e:e0:9d:fc:3b:5f:4b:c2:96:
                    21:ac:7e:d6:14:9c:e1:03:ee:3d:bc:86:67:58:14:
                    c2:b3:ca:1d:82:e1:69:8d:76:c2:8a:94:24:81:98:
                    27:e6:b6:cc:d8:89:de:ec:91:09:31:df:b5:5a:d5:
                    4a:ed:9a:71:29:33:1a:26:fb:ee:d6:7a:17:48:64:
                    33:14:d0:f7:c8:25:66:ac:4f:20:85:af:f1:c2:99:
                    35:f2:5f:ac:63:ab:f2:83:4a:82:a4:c7:e4:ea:f5:
                    38:8c:f2:78:0a:56:9b:4a:00:29:ca:0d:dc:b2:c4:
                    88:08:5c:aa:02:b4:e5:12:78:f5:d8:96:07:75:ab:
                    4c:ce:70:2c:7e:19:07:2b:9b:fc:d1:11:02:ff:d2:
                    42:a4:5f:bd:91:3c:de:0f:be:b1:67:be:70:9f:44:
                    9c:cf:ee:2f:31:7c:4a:90:18:c9:2e:62:84:e2:9b:
                    58:a3:9e:86:cc:6c:30:ce:44:8f:4e:24:3b:1c:9e:
                    7b:6a:83:f5:16:be:35:0b:eb:53:b1:80:70:bc:95:
                    36:d5:d7:b9:8f:e4:bd:29:f4:4a:e7:74:f6:48:64:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:BB:FC:FA:DC:EF:78:09:CE:15:4C:78:C0:3D:67:7A:8B:F8:93
            X509v3 Authority Key Identifier:
                keyid:B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5640::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:24:11:79:08:7d:40:ac:91:7d:3e:2e:70:7d:67:16:69:
         66:be:04:71:e4:ab:33:cd:84:65:d1:3b:19:51:33:dd:45:93:
         11:b9:6f:78:ee:c9:ec:c0:2a:87:9c:96:41:0c:12:8c:8b:a5:
         d8:a9:35:c0:e2:d6:1e:21:00:e8:45:ca:b4:f6:0e:ab:0b:3e:
         5b:c8:68:1c:84:9e:86:c5:e7:54:a1:f4:b8:7a:5e:33:f7:a7:
         17:4b:f1:44:c3:a9:29:28:45:70:9c:9c:02:1e:d0:5e:ea:cd:
         3e:99:08:de:00:3a:49:85:74:c1:12:33:43:f6:45:02:ec:6f:
         89:2a:77:03:3c:85:ec:ef:02:0d:25:e5:c0:c8:f5:b5:73:b7:
         6e:41:eb:82:c5:3a:99:2b:4f:40:c0:d4:32:4e:10:c9:15:e5:
         4d:ad:c2:ed:94:36:91:68:10:02:b0:fb:4c:7b:7d:59:da:c8:
         0f:71:d3:ca:4f:e6:45:e5:e0:43:47:19:2a:f0:06:3d:9c:4a:
         59:92:7f:98:df:71:f4:d0:a6:4a:8c:2c:a8:48:27:4b:e9:80:
         31:90:89:0d:af:ba:1f:fe:a6:73:5e:93:2e:35:18:89:b9:79:
         33:ab:04:f9:72:75:6a:74:11:c5:2b:7c:6b:42:d5:6b:4f:e6:
         d7:a3:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 11:01:32 2024 by rpki-client on console-fra.rpki-client.org