Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa
File:                     323830333a356365303a3a2f33322d3430203d3e20323730303636.roa (raw, json)
Hash identifier:          A4DqbAjoO99AtgNFebGyEzjxcTnhqc86B7dIPKAsYNA=
Subject key identifier:   A2:D7:89:3E:56:0A:E6:11:74:FA:C0:5C:EC:DD:7B:F1:78:C0:D7:C0
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       1A738EF3C41701C57F2ACBC4A9CDB743604F8E35
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa
Signing time:             Tue 05 Mar 2024 18:07:01 +0000
ROA not before:           Tue 05 Mar 2024 18:02:01 +0000
ROA not after:            Tue 04 Mar 2025 18:07:01 +0000
asID:                     270066
IP address blocks:        2803:5ce0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 21:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:73:8e:f3:c4:17:01:c5:7f:2a:cb:c4:a9:cd:b7:43:60:4f:8e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Mar  5 18:02:01 2024 GMT
            Not After : Mar  4 18:07:01 2025 GMT
        Subject: CN=A2D7893E560AE61174FAC05CECDD7BF178C0D7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:42:60:aa:91:45:36:9f:26:30:e8:fd:a6:
                    e3:90:83:13:67:bb:6d:ad:ec:dc:db:c3:29:53:11:
                    a2:47:20:8f:f5:43:91:ed:42:50:90:4a:6c:2c:43:
                    ac:16:70:4f:be:a0:2d:c5:7b:10:e9:1e:45:03:07:
                    93:91:fd:50:62:f9:30:d2:11:30:a0:28:a2:1d:9a:
                    64:80:7e:36:81:60:dc:13:15:32:4d:05:0e:03:91:
                    79:5f:2f:f4:db:0c:d7:49:32:0a:bf:fd:ed:9c:da:
                    e5:68:5c:ec:85:6a:ab:9a:25:79:ce:94:e5:96:e3:
                    2b:ec:04:bd:8b:96:5e:83:76:0b:71:7f:32:d1:7c:
                    90:20:c3:fe:72:72:e0:c5:47:8f:87:20:cf:64:d1:
                    0d:c9:d0:bd:b1:d0:7a:4b:8e:88:b6:06:c7:ab:2d:
                    a7:79:0d:d5:c8:54:1b:d8:96:06:31:b5:e1:41:e9:
                    69:07:26:96:62:39:c4:86:b8:bb:11:02:31:7f:68:
                    70:8a:50:a5:bc:99:c1:d2:42:ec:3b:bb:65:d1:e4:
                    c8:a5:8e:7e:16:c9:7b:19:f9:a7:f7:8d:0f:d1:6b:
                    48:b7:98:14:6a:cf:76:ab:33:f2:1f:de:d0:45:df:
                    80:fc:3a:ae:c3:d0:46:38:8b:f9:b9:70:6d:23:30:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:89:3E:56:0A:E6:11:74:FA:C0:5C:EC:DD:7B:F1:78:C0:D7:C0
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a3a2f33322d3430203d3e20323730303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:3b:1e:0a:2e:f5:8a:d3:d7:72:86:ed:c1:11:54:5f:51:
         0e:75:a0:2c:a2:40:fa:b6:be:47:0e:a4:2c:12:7b:1e:58:74:
         4d:6c:91:80:d0:8d:e5:4c:27:bc:5d:00:ee:a6:be:68:b9:d6:
         40:a3:47:d0:8e:cb:9d:24:04:74:86:38:28:cc:5e:53:27:f5:
         95:b6:75:c3:ec:f9:cc:5d:99:96:59:ab:64:37:96:cc:b8:01:
         f5:d8:41:4a:09:8a:17:d0:23:2d:3d:98:ef:e1:4f:93:c6:6d:
         75:ad:02:e5:2a:f4:2f:32:6a:c3:e6:ae:99:5f:81:3b:99:21:
         83:4b:5b:31:d3:b6:81:5c:2d:21:0a:ba:3c:bd:c4:0d:85:25:
         97:96:bb:9d:68:d3:0c:af:93:5b:d1:3b:ef:88:38:ff:81:82:
         5a:26:19:d1:1e:9d:65:e6:fd:c6:ee:f0:a7:0c:96:7e:5c:6f:
         d6:e5:58:1c:0e:12:2f:96:2e:e3:1d:1d:8b:0b:cb:12:79:ba:
         e5:19:57:86:ae:51:4a:ee:1b:d4:4c:e6:c1:5a:d5:95:fc:e4:
         9a:5c:1e:bc:ad:26:a3:87:b0:c8:1e:08:ff:5c:d2:f9:57:5e:
         cc:1b:35:40:b9:e0:2e:ed:7e:06:8b:17:d4:1a:3e:15:b7:29:
         a6:7f:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:06:11 2024 by rpki-client on console-ams.rpki-client.org