Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33332d3333203d3e20323730303532.roa
File:                     323830333a656465303a3a2f33332d3333203d3e20323730303532.roa (raw, json)
Hash identifier:          paXYNeuOWgsuiW2bEaVanDU/KxV03Bl0/jbr3xVLVIM=
Subject key identifier:   A9:53:E5:19:D4:2C:E2:11:D1:7A:16:6A:7D:18:6A:CA:98:8E:8A:9F
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       5016832AD5C19F71EF30BEADE92523BB863DF6F3
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33332d3333203d3e20323730303532.roa
Signing time:             Tue 05 Mar 2024 17:48:22 +0000
ROA not before:           Tue 05 Mar 2024 17:43:22 +0000
ROA not after:            Tue 04 Mar 2025 17:48:22 +0000
asID:                     270052
IP address blocks:        2803:ede0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:16:83:2a:d5:c1:9f:71:ef:30:be:ad:e9:25:23:bb:86:3d:f6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Mar  5 17:43:22 2024 GMT
            Not After : Mar  4 17:48:22 2025 GMT
        Subject: CN=A953E519D42CE211D17A166A7D186ACA988E8A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:53:6c:ad:8c:86:a7:c5:00:d8:a4:54:37:
                    74:54:58:41:03:5c:50:28:2b:78:80:1c:f9:91:15:
                    4d:93:f7:bb:c6:ec:77:4c:ec:bc:58:a8:1b:95:8e:
                    f3:c7:f5:0a:a6:57:27:48:c9:e1:b7:a9:6e:91:b9:
                    01:30:fd:a9:bd:26:53:7e:f2:fb:cc:93:c2:fb:14:
                    bf:07:8e:f2:82:57:f9:ea:1d:b8:06:b1:36:54:cc:
                    b1:56:4f:6f:0c:74:ec:d6:3a:21:55:04:01:e6:c8:
                    28:f6:f6:2a:b3:f0:64:5c:49:8b:b3:2c:ce:13:ae:
                    ca:df:44:8b:c9:4b:21:14:8f:06:22:3a:e6:60:55:
                    3d:44:8a:e5:7d:e8:6f:15:7d:4f:ab:85:09:ca:23:
                    f2:a1:34:e5:c3:ce:08:24:85:36:b4:3b:65:40:19:
                    cd:69:0a:ec:8c:9b:0c:d1:39:47:f7:b6:6c:a1:ce:
                    3b:bf:1f:f6:7c:d9:ab:f9:68:dd:fe:af:8f:6d:83:
                    29:4d:79:48:2d:fa:ec:69:83:c9:10:9b:93:2d:7c:
                    62:17:b9:12:ee:2a:c9:ff:d6:18:34:08:68:dc:37:
                    c5:0b:a0:b3:6e:08:16:fa:27:f3:70:93:84:a1:91:
                    2e:82:43:d0:a1:0d:bd:e8:5a:d3:78:54:c2:ff:e4:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:E5:19:D4:2C:E2:11:D1:7A:16:6A:7D:18:6A:CA:98:8E:8A:9F
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/323830333a656465303a3a2f33332d3333203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:75:dd:42:f2:ff:ef:61:70:4a:48:fd:ea:d8:bc:10:55:4b:
         db:ef:c9:f8:4a:3d:23:87:78:12:7d:c8:7b:06:8d:a4:68:4c:
         b6:e3:ce:e0:9e:cf:fd:d0:e8:66:95:35:93:03:62:b9:45:2a:
         d2:18:3c:08:7b:1e:55:fb:57:8f:85:8a:16:f7:cc:4a:78:77:
         d8:58:31:f5:8b:18:f9:67:2b:b2:58:5a:94:48:cd:0d:1c:b6:
         9f:95:22:83:65:8b:a3:f3:0e:93:38:7d:1d:90:6f:aa:7a:6f:
         8b:95:b8:6e:54:68:24:fc:f9:82:c9:a9:d4:35:2b:27:7b:6b:
         5f:70:a3:59:de:43:0b:03:d7:73:e3:2e:65:d8:4d:e3:ef:3c:
         55:aa:c4:5a:1c:ca:8c:84:fc:22:f0:5a:8e:e0:8e:83:e4:4c:
         e0:48:7b:30:07:17:eb:1b:a0:32:e1:17:6b:af:b6:b6:04:a1:
         7f:74:db:a6:33:b9:43:19:20:75:f5:4a:c7:63:26:e4:ea:d2:
         f4:4c:60:c1:c8:0b:f9:94:58:0f:99:54:26:b7:c6:c2:ee:fb:
         b9:e6:3a:1a:c3:0b:39:5a:75:27:dc:32:34:b3:db:c7:b8:c5:
         42:0f:b5:55:c2:b3:a3:89:70:f8:2e:86:60:9c:a0:34:e5:db:
         21:be:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org