Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a383030303a3a2f33362d3336203d3e20323634373833.roa
File:                     323830333a346634303a383030303a3a2f33362d3336203d3e20323634373833.roa (raw, json)
Hash identifier:          M3be/gNHMmO/PvyGmAKvbpMeWLrLJo2d7RMyxSuCa4c=
Subject key identifier:   BB:C4:37:E7:78:A9:76:D2:88:E8:6A:D4:E3:2E:7C:74:98:CE:A4:01
Certificate issuer:       /CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
Certificate serial:       6FD8EDF384A3CB3B07DB71F79CFE77AD0EE791F4
Authority key identifier: 37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a383030303a3a2f33362d3336203d3e20323634373833.roa
Signing time:             Wed 24 Jul 2024 16:55:00 +0000
ROA not before:           Wed 24 Jul 2024 16:50:00 +0000
ROA not after:            Wed 23 Jul 2025 16:55:00 +0000
asID:                     264783
IP address blocks:        2803:4f40:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:ed:f3:84:a3:cb:3b:07:db:71:f7:9c:fe:77:ad:0e:e7:91:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
        Validity
            Not Before: Jul 24 16:50:00 2024 GMT
            Not After : Jul 23 16:55:00 2025 GMT
        Subject: CN=BBC437E778A976D288E86AD4E32E7C7498CEA401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:81:15:84:1b:56:3e:b3:31:1f:d3:ec:87:
                    f4:c4:11:d6:a3:e7:16:17:12:d1:73:fb:03:ee:59:
                    f8:13:03:34:ef:a8:3f:4d:e5:c9:ac:32:bb:3b:60:
                    72:c1:80:b0:c3:74:88:9b:f3:99:48:2e:c1:c8:a5:
                    4b:44:b1:85:0f:e8:fb:69:ab:ad:be:49:45:29:80:
                    55:b3:32:cb:dd:56:c5:cb:2e:84:fe:46:99:b2:b8:
                    31:9d:8f:45:92:58:51:97:38:74:94:58:9b:f4:7f:
                    84:8d:61:7f:8e:0a:e0:b0:31:8f:e2:c4:53:1c:bb:
                    1b:66:00:9a:26:f1:54:9e:02:3b:86:a1:24:7e:b7:
                    0b:8f:71:b8:ef:b8:24:e2:36:fe:6a:ab:57:83:52:
                    4f:9b:d8:11:4f:05:c5:fb:20:a3:f7:95:f4:54:41:
                    84:c2:b6:d8:fc:89:a1:e5:8b:49:26:e9:c3:f4:60:
                    b7:e9:84:bd:a3:78:11:cd:e0:ec:42:c1:29:7c:e8:
                    54:aa:f2:6f:52:3e:5e:39:20:ab:26:21:e9:b0:c5:
                    f3:d2:9b:b2:95:33:53:16:c7:97:14:07:b4:7c:16:
                    8c:ff:d2:84:f8:eb:f5:39:66:ea:77:fa:58:7c:d8:
                    b6:06:ed:4a:95:cc:57:c5:0b:33:17:a7:fd:ec:f7:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C4:37:E7:78:A9:76:D2:88:E8:6A:D4:E3:2E:7C:74:98:CE:A4:01
            X509v3 Authority Key Identifier:
                keyid:37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a383030303a3a2f33362d3336203d3e20323634373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f40:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:80:72:58:70:2f:29:ad:e9:10:4d:46:6a:4e:32:c9:a5:13:
         1c:66:7e:1b:25:5c:61:57:13:eb:58:07:96:2a:d0:b2:cd:57:
         9f:d1:b8:72:9f:36:fe:b1:7b:80:d6:fe:3a:f1:21:50:03:89:
         ce:28:2b:71:89:d9:3f:aa:d1:89:64:29:d9:24:e8:01:e0:3c:
         a9:98:b5:b3:eb:84:d0:3e:f1:0a:fb:04:d3:30:5b:c7:3f:e6:
         3d:35:a6:cb:10:4a:21:fa:16:49:a3:5d:19:a1:ea:e9:d0:3f:
         58:5c:7c:1e:0c:be:3e:e5:3f:ff:6a:1d:53:b5:ef:5d:f5:8e:
         2e:29:a2:73:50:00:95:aa:48:ff:ab:98:16:a3:a2:73:6a:77:
         ed:1b:95:90:95:49:66:0d:8d:22:1b:f6:cc:38:3c:f0:7e:85:
         67:01:60:ca:cc:8b:aa:f9:01:69:12:8f:5e:4e:c1:09:7f:43:
         52:85:e9:1b:25:8f:76:bd:b5:67:9e:b8:60:7a:b5:9a:04:5a:
         f1:a3:19:c2:e7:05:48:fe:68:6b:72:4b:5f:4d:5c:b6:9e:f3:
         e0:2e:b8:19:ee:b0:36:08:f8:e0:8d:83:3e:65:d7:9e:cd:45:
         c6:e3:96:57:e4:04:95:a9:2a:da:1c:7c:5f:90:28:cf:69:6d:
         7b:81:93:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org