Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
File:                     323830333a336630303a3a2f33322d3332203d3e203238303838.roa (raw, json)
Hash identifier:          1mVCkjD40Ou0bvltHjsAApyCQkA7DfD+xRMrz+ZPM+M=
Subject key identifier:   E4:29:19:5D:AB:F5:D5:E5:7B:F6:70:54:F0:F8:A5:F8:22:CD:98:DD
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       2C674029EE5CA2E7263737363C63C484FCFF2381
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa
Signing time:             Tue 05 Mar 2024 18:09:24 +0000
ROA not before:           Tue 05 Mar 2024 18:04:24 +0000
ROA not after:            Tue 04 Mar 2025 18:09:24 +0000
asID:                     28088
IP address blocks:        2803:3f00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:67:40:29:ee:5c:a2:e7:26:37:37:36:3c:63:c4:84:fc:ff:23:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Mar  5 18:04:24 2024 GMT
            Not After : Mar  4 18:09:24 2025 GMT
        Subject: CN=E429195DABF5D5E57BF67054F0F8A5F822CD98DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:2c:74:63:18:f2:d2:30:29:26:3b:ad:cb:
                    66:41:5f:fe:5c:d4:35:1b:52:50:24:0a:a3:67:e5:
                    81:1d:d3:c2:33:57:48:59:85:aa:65:8a:ee:8b:e6:
                    3d:be:6a:94:29:f6:ab:e6:98:74:71:c3:b2:f5:33:
                    0e:dd:a4:ec:3b:26:e4:7c:eb:4b:80:ca:b7:0a:e0:
                    00:7e:07:4a:51:de:f3:9a:40:20:3b:47:00:55:b1:
                    a0:5b:db:f4:a6:b7:e0:56:d3:04:63:b1:2e:79:f0:
                    51:a3:9d:fa:df:bf:54:01:03:8c:53:ea:04:f2:eb:
                    7a:ce:2a:5e:3e:e5:b0:a6:8b:48:6b:0f:f4:6e:e9:
                    70:64:93:e1:5e:79:7a:da:e3:94:13:d0:16:9a:21:
                    ba:87:4c:b0:e2:b3:51:88:de:eb:09:4e:95:13:c3:
                    74:fa:0e:c1:62:7c:48:6b:14:c9:6b:07:5e:9d:93:
                    a9:62:36:e5:23:8a:21:c0:1d:f8:6b:27:b9:58:b7:
                    7e:16:37:40:46:dd:fa:ff:89:d2:66:98:29:71:c1:
                    7d:7a:fd:68:f3:f2:72:9b:46:6e:eb:e6:c7:df:3a:
                    39:87:0f:d3:a7:40:11:0c:a4:23:42:5e:bd:af:80:
                    27:00:37:5d:18:b7:34:53:92:e1:9c:4b:64:1b:45:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:19:5D:AB:F5:D5:E5:7B:F6:70:54:F0:F8:A5:F8:22:CD:98:DD
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/323830333a336630303a3a2f33322d3332203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:16:93:79:ca:6c:24:85:4c:7c:66:05:fa:f0:da:2f:df:
         0f:70:61:b2:83:e8:10:9c:67:24:35:0a:de:71:37:47:1a:6a:
         c9:cc:42:79:54:2d:1c:a9:a8:0a:2e:cf:dd:a2:dc:df:5a:b6:
         50:88:04:75:12:ab:54:cd:69:5f:cd:26:14:04:ad:75:3e:94:
         f1:3c:eb:30:21:ec:7e:98:df:3e:b9:96:7d:77:c5:a5:45:34:
         ff:68:c8:df:5d:ec:56:ba:13:b4:9c:41:15:1c:04:96:46:7f:
         d4:b8:fb:01:f1:5f:e2:c9:5d:61:14:56:af:fb:cc:bf:5c:f9:
         bc:d8:4b:9b:c9:56:2d:75:e4:15:ce:4a:2f:fd:b5:93:76:cf:
         1f:ca:86:e1:3d:d9:69:a2:56:ab:17:47:ad:0a:31:fd:80:50:
         4f:16:54:71:19:f7:ec:fa:a9:1f:64:8f:f8:9a:0c:35:4a:48:
         5c:11:81:c6:67:b6:44:c3:cb:d8:f8:67:90:47:7d:72:49:2f:
         15:e2:40:d1:2f:bd:a2:5c:4e:f0:87:26:47:db:e5:d7:97:44:
         cf:92:1e:15:66:6e:5e:4a:72:ef:79:b3:a8:81:dd:79:0d:5e:
         c7:84:cb:ec:19:8d:86:d8:5b:11:da:eb:e7:03:9f:4f:2f:b1:
         ed:41:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org