Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/323830333a356661303a3a2f33322d3430203d3e20323637373936.roa
File:                     323830333a356661303a3a2f33322d3430203d3e20323637373936.roa (raw, json)
Hash identifier:          TSFNr5SAifMIe7lBADRHrdXyHn0hCjxMihQQHufKzsQ=
Subject key identifier:   44:54:27:B7:05:31:19:04:29:55:68:34:1B:B1:77:A5:40:15:6A:DE
Certificate issuer:       /CN=64809BD796069FBEC80C8A9D099A38497D71CA12
Certificate serial:       229EDCF33FAE388350A35FB3786DED5C47175930
Authority key identifier: 64:80:9B:D7:96:06:9F:BE:C8:0C:8A:9D:09:9A:38:49:7D:71:CA:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64809BD796069FBEC80C8A9D099A38497D71CA12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/323830333a356661303a3a2f33322d3430203d3e20323637373936.roa
Signing time:             Tue 05 Mar 2024 18:13:46 +0000
ROA not before:           Tue 05 Mar 2024 18:08:46 +0000
ROA not after:            Tue 04 Mar 2025 18:13:46 +0000
asID:                     267796
IP address blocks:        2803:5fa0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/64809BD796069FBEC80C8A9D099A38497D71CA12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/64809BD796069FBEC80C8A9D099A38497D71CA12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64809BD796069FBEC80C8A9D099A38497D71CA12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9e:dc:f3:3f:ae:38:83:50:a3:5f:b3:78:6d:ed:5c:47:17:59:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64809BD796069FBEC80C8A9D099A38497D71CA12
        Validity
            Not Before: Mar  5 18:08:46 2024 GMT
            Not After : Mar  4 18:13:46 2025 GMT
        Subject: CN=445427B705311904295568341BB177A540156ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:8b:c4:97:e6:c1:e5:df:f6:fb:1a:cd:b2:
                    12:02:66:e9:c2:19:81:d7:5d:8e:14:b7:15:37:99:
                    b4:d3:bf:0a:8d:18:8b:45:6a:9b:85:19:d4:94:0d:
                    28:8d:d8:e0:e0:04:a1:c4:62:68:39:ff:fd:3f:45:
                    7b:e0:27:4e:ba:1c:c0:ba:9b:3c:f8:dc:25:a8:a4:
                    5a:8e:3a:1a:7f:85:32:9c:c3:3d:97:bb:a3:10:d0:
                    bf:37:24:3a:6b:b3:bd:e3:92:1f:68:5f:5f:8d:f2:
                    34:76:9f:55:75:c2:a5:a9:34:c8:ba:72:df:7b:0b:
                    34:00:4d:fc:ed:53:66:1a:05:a7:55:9e:79:19:4a:
                    a2:ca:c6:e3:ea:6e:68:10:78:e7:ae:ea:7a:84:f6:
                    ec:bb:0b:78:03:7d:c2:a7:2f:9a:e5:c2:58:0e:e6:
                    da:6d:c3:bd:eb:bb:30:85:f0:ca:b7:1b:9e:43:60:
                    a4:15:d1:38:0d:1b:88:bd:54:a4:9a:53:cd:8c:55:
                    36:ad:50:a5:6f:de:52:14:91:69:69:44:a7:e2:19:
                    2a:08:89:51:07:55:8c:b7:17:f7:56:ff:61:33:33:
                    70:78:5f:fc:17:1d:09:f3:28:30:9b:7f:fb:6b:bd:
                    a7:6c:a9:da:0e:41:e8:5e:ef:61:71:e2:2a:51:ce:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:54:27:B7:05:31:19:04:29:55:68:34:1B:B1:77:A5:40:15:6A:DE
            X509v3 Authority Key Identifier:
                keyid:64:80:9B:D7:96:06:9F:BE:C8:0C:8A:9D:09:9A:38:49:7D:71:CA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/64809BD796069FBEC80C8A9D099A38497D71CA12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64809BD796069FBEC80C8A9D099A38497D71CA12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8A0F23486007EBC1C2CE171937F655C2EB3B7AE546DF73B7B20C7EA6B13186A/0/323830333a356661303a3a2f33322d3430203d3e20323637373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:88:4e:e2:17:62:ea:66:db:72:20:4a:b0:76:ce:2b:de:
         95:2c:8b:df:8f:e5:d7:f0:57:4f:77:2d:a7:33:a6:7a:cf:2a:
         c4:8d:fd:22:d1:b0:df:4f:d0:f6:23:cc:9f:7f:1c:f1:60:14:
         77:a3:07:5f:c0:02:c2:5f:5a:aa:85:2f:75:b8:31:25:5d:ca:
         4c:b2:b2:20:8f:dd:cf:b4:fb:49:5a:75:0c:be:9a:f5:96:fc:
         c8:f8:4a:c4:2d:45:2e:b7:5a:1d:00:db:79:b1:04:75:73:97:
         cd:d1:2b:23:e2:c1:e5:a7:01:67:2a:b2:be:26:90:b5:31:a6:
         22:cb:32:b1:9b:16:9a:65:86:e1:c6:03:ab:52:b8:80:48:6e:
         d6:6e:d2:83:66:71:f0:ea:b2:17:86:aa:8a:54:c6:41:10:a4:
         d9:23:c1:fd:52:4c:53:51:aa:2f:78:9e:0e:d8:b0:ed:cb:5b:
         b9:f5:4d:2e:2f:53:49:e1:2e:46:cc:d8:ad:c8:72:88:58:c2:
         6f:4d:69:ab:50:9e:20:0a:1c:64:44:45:c3:6d:f7:c9:8f:e2:
         72:02:3e:0c:b5:0c:a3:f4:d5:aa:42:64:24:08:64:ea:a8:ea:
         55:b2:1d:d0:ba:ba:5b:69:19:bd:22:ff:75:4c:78:9c:3e:03:
         a1:2e:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org