Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa
File:                     323830333a653661303a3a2f33322d3438203d3e20323636383932.roa (raw, json)
Hash identifier:          P6DVhEG7fM6G5ctF4KtAyFTKqCPMj8kjQC8C005sHrE=
Subject key identifier:   D4:B0:63:DF:1E:E5:17:FF:3D:5C:D6:CB:98:A7:CD:5A:A2:FA:21:75
Certificate issuer:       /CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
Certificate serial:       4DAE591990B43083F290BA0094C7198488A8D5C2
Authority key identifier: C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     266892
IP address blocks:        2803:e6a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ae:59:19:90:b4:30:83:f2:90:ba:00:94:c7:19:84:88:a8:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=D4B063DF1EE517FF3D5CD6CB98A7CD5AA2FA2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:c0:9e:7b:fc:fb:81:1c:f9:95:bb:80:05:
                    c5:c4:f5:34:1b:6a:bc:63:98:50:cd:27:07:32:ab:
                    58:ef:cd:a7:f8:19:b6:f4:d4:bb:83:0f:3f:25:34:
                    09:50:12:10:db:38:7d:ae:34:d3:69:3a:e7:9b:fe:
                    47:fd:74:29:18:ec:2f:a8:de:05:be:01:36:e2:f4:
                    de:7b:fa:0c:55:cc:9a:b5:d0:67:09:71:ff:c5:6a:
                    79:85:3e:bc:5d:85:2f:2e:6b:ad:69:b4:d5:2b:a9:
                    57:23:4a:36:f2:75:7d:06:6b:ab:9a:96:81:34:19:
                    0b:72:30:bd:ac:14:de:c3:e0:fd:4c:99:93:89:da:
                    49:b7:16:df:c0:ab:36:96:69:4e:12:8e:7a:a0:ec:
                    ba:50:bf:24:b3:4b:5b:9e:3c:e4:01:14:6d:2a:5d:
                    c8:87:9a:89:25:29:3d:87:ad:1c:d5:ff:ae:92:dc:
                    5f:80:c3:47:07:f2:e6:85:e4:6e:dd:e4:82:b0:d8:
                    62:14:7b:1a:48:61:c9:be:ac:f2:a1:29:10:2a:db:
                    93:4b:09:1b:70:fa:f8:b5:83:b4:14:1b:86:50:a6:
                    45:8e:5e:3d:3f:a0:67:3a:68:06:8c:ca:43:43:7d:
                    74:fb:25:2c:0c:7a:99:19:64:13:48:8b:c8:06:28:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:63:DF:1E:E5:17:FF:3D:5C:D6:CB:98:A7:CD:5A:A2:FA:21:75
            X509v3 Authority Key Identifier:
                keyid:C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/323830333a653661303a3a2f33322d3438203d3e20323636383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:fa:e9:72:da:16:35:16:e3:eb:d1:de:89:e5:2b:db:77:
         c2:15:92:46:db:21:8c:dc:6d:a1:08:8a:14:42:86:1a:c8:94:
         f3:aa:82:df:2c:2c:55:58:ec:b4:ac:5f:cc:88:dc:4c:26:7d:
         58:f4:9e:23:ac:ec:69:80:01:4c:60:9f:3d:a4:45:a6:e3:9c:
         03:3a:8b:d3:c2:ef:59:9a:45:c0:23:60:d1:23:91:a8:d9:2b:
         f2:e9:a0:37:3e:b3:12:4a:ba:b7:46:63:0f:52:df:35:53:56:
         50:48:fc:3c:64:d9:ce:b2:14:4c:6c:ac:28:38:95:75:5c:f2:
         f8:a7:cf:55:d4:90:78:97:7a:6c:fc:f4:c3:39:18:f6:0c:d6:
         62:aa:52:73:16:f4:6b:83:f3:cf:5b:d7:f2:1d:0a:5c:02:7f:
         10:9b:37:68:56:34:47:4f:de:6d:7c:6f:eb:54:8f:be:8b:bb:
         49:ff:e7:e7:60:80:10:c5:95:b3:08:4a:b4:fc:be:45:cd:95:
         6f:69:a2:38:f8:ce:48:e3:75:c4:a3:a3:64:42:df:2f:77:47:
         85:80:13:e2:de:e1:32:cb:97:70:98:91:24:49:93:57:a7:58:
         1d:e8:b4:5e:bd:77:31:bd:f2:3a:2c:1c:35:a4:d0:92:e6:71:
         60:15:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:03:05 2024 by rpki-client on console-ams.rpki-client.org