Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa
File:                     323830333a353663303a3a2f33322d3332203d3e20323635363536.roa (raw, json)
Hash identifier:          MQJRAH6oZxEZW5QkgFVczmuEaUI4U7mBZs21uCd2qvM=
Subject key identifier:   15:76:EB:22:F5:83:A3:02:F7:DF:14:D2:FB:A0:BE:17:A2:C1:6B:81
Certificate issuer:       /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
Certificate serial:       15EC1838776450BC4DC79C723E189C3AF0D937CB
Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa
Signing time:             Tue 05 Mar 2024 18:09:31 +0000
ROA not before:           Tue 05 Mar 2024 18:04:31 +0000
ROA not after:            Tue 04 Mar 2025 18:09:31 +0000
asID:                     265656
IP address blocks:        2803:56c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:18:38:77:64:50:bc:4d:c7:9c:72:3e:18:9c:3a:f0:d9:37:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
        Validity
            Not Before: Mar  5 18:04:31 2024 GMT
            Not After : Mar  4 18:09:31 2025 GMT
        Subject: CN=1576EB22F583A302F7DF14D2FBA0BE17A2C16B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:39:52:45:19:f5:2f:c1:39:fc:d6:62:a7:
                    f6:5f:6a:77:0c:18:c7:37:da:da:f3:ef:b8:ea:e1:
                    cc:fa:31:50:31:86:72:92:8d:80:76:ab:4b:47:48:
                    24:84:e5:ba:e8:ea:7a:23:8c:25:b3:67:ff:75:bd:
                    f9:85:5c:8e:9f:4d:41:e5:97:9f:30:8a:03:1a:4f:
                    de:45:cd:35:f3:9f:35:89:de:8b:eb:f6:17:0f:25:
                    49:47:0a:5c:f6:62:3f:d8:04:62:c3:b1:82:d5:90:
                    b7:a9:f1:e4:34:9c:29:8d:b5:a7:d4:63:d7:94:e0:
                    a4:cd:21:f7:98:74:68:5d:c1:a9:52:37:c6:89:31:
                    e3:fb:ce:95:77:a8:a5:04:53:ef:72:f7:05:48:d1:
                    83:bb:46:70:da:bb:df:0e:42:51:81:29:e3:34:9f:
                    d8:bd:c1:dd:cf:a7:c7:4b:4f:06:fd:30:da:af:af:
                    60:27:f4:b0:36:41:3c:80:75:9e:ae:eb:6c:f8:c0:
                    db:97:63:c4:55:20:41:8d:5a:a4:eb:29:7b:0f:08:
                    b9:86:db:43:53:0c:4a:12:3c:3e:5f:55:21:4f:7a:
                    20:98:c7:c3:d7:f3:3b:b5:11:1a:6e:68:92:be:d1:
                    d2:22:3c:d6:e4:73:7d:92:4b:52:28:ec:18:87:98:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:EB:22:F5:83:A3:02:F7:DF:14:D2:FB:A0:BE:17:A2:C1:6B:81
            X509v3 Authority Key Identifier:
                keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/323830333a353663303a3a2f33322d3332203d3e20323635363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:ba:87:39:32:00:02:36:31:9f:e6:2c:5f:e8:ec:83:86:
         d9:c2:6e:54:f3:ff:15:52:e0:f5:82:68:7b:03:50:66:f3:93:
         3f:0c:d5:34:12:79:dc:01:81:17:05:4d:22:e9:a1:31:da:54:
         67:58:36:1a:df:8e:5f:54:20:c4:24:05:72:e2:59:3a:c8:27:
         39:2f:8e:79:a3:72:81:57:6d:64:f0:16:6b:41:d1:36:d1:fa:
         47:f7:77:f4:7d:3d:ec:25:f5:0e:2b:35:f3:f6:66:5e:a0:fa:
         16:f9:f3:28:22:a5:47:84:19:f0:d0:45:ce:3a:4c:3a:7a:cf:
         d8:f5:4a:13:b7:8b:63:e4:18:6f:7f:8c:07:bd:1a:0f:ce:56:
         22:d1:65:67:15:c7:48:62:0d:c8:47:60:4e:50:44:bb:36:55:
         d3:66:1e:dc:8c:77:c6:64:d6:93:17:0c:78:06:17:71:75:9a:
         ca:4f:8a:02:5f:e8:29:80:02:ab:31:ea:df:b3:3a:a8:17:2e:
         57:fb:c1:c7:ee:43:f7:43:53:cd:43:0a:d8:7a:12:b3:95:77:
         e1:98:d4:cf:ee:5f:d0:0f:95:e0:c1:a7:6d:cc:9d:05:04:00:
         df:0a:14:4d:f8:a8:fc:4f:48:50:69:04:ed:e4:aa:ba:27:e7:
         03:2a:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org