Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a663063303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          sjk5WmWZhtFvw0r5J943zXsm8e6u2OyVoreaWqwp8pA=
Subject key identifier:   B2:38:FD:F8:A5:FB:31:D1:C5:04:10:6E:FB:29:45:2B:F9:39:96:41
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       7A1B9E48DB2745BB79ADC3F5ED9A39909326D46F
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 24 Jul 2024 21:40:00 +0000
ROA not before:           Wed 24 Jul 2024 21:35:00 +0000
ROA not after:            Wed 23 Jul 2025 21:40:00 +0000
asID:                     264773
IP address blocks:        2803:f0c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1b:9e:48:db:27:45:bb:79:ad:c3:f5:ed:9a:39:90:93:26:d4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: Jul 24 21:35:00 2024 GMT
            Not After : Jul 23 21:40:00 2025 GMT
        Subject: CN=B238FDF8A5FB31D1C504106EFB29452BF9399641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:2a:56:41:98:4e:fe:30:56:6e:38:1e:50:
                    81:21:e7:6d:d5:4b:36:22:94:4e:c6:e9:10:ed:1b:
                    01:a9:41:b7:08:c3:a4:a1:40:4f:d5:dc:41:68:c2:
                    21:f8:d1:32:5d:e1:e2:62:76:b0:71:a3:f2:f6:78:
                    1e:0f:9e:18:0a:be:4d:3e:d9:2e:d9:0f:72:cd:29:
                    0f:d9:54:44:28:b5:29:dd:f8:89:be:ad:f2:c5:03:
                    46:db:ca:6d:23:e2:6d:70:79:14:1f:bd:fe:a2:5b:
                    7f:28:0a:af:b7:2a:0c:06:9d:aa:b7:cb:d5:1c:1b:
                    4c:54:89:da:9d:2d:40:b4:64:0b:83:75:66:d8:64:
                    b8:bf:78:3d:43:fb:68:7b:14:72:ed:20:4f:25:bd:
                    78:c2:d4:76:ca:2f:f6:7e:78:10:db:72:5c:16:54:
                    19:0e:67:05:50:54:6f:2d:f6:e2:d9:d2:85:1a:dd:
                    33:39:a3:fa:64:5f:f6:02:87:0e:2b:4c:72:3c:ba:
                    9e:ba:6d:39:e1:1d:a6:5b:69:ad:30:a4:ee:1a:4e:
                    a8:1e:4d:6a:c4:a1:c8:80:a1:ff:24:74:11:a8:b1:
                    5b:45:aa:cd:3f:d6:04:a7:b9:c1:ba:60:bb:86:25:
                    71:bf:c1:e8:f5:6c:6b:59:7a:23:da:78:1d:8e:e6:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:38:FD:F8:A5:FB:31:D1:C5:04:10:6E:FB:29:45:2B:F9:39:96:41
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:39:40:85:2b:7b:2d:c7:d6:31:19:22:44:fb:97:18:f7:55:
         ed:86:22:53:1f:a0:dc:25:d8:01:26:6c:4d:98:8b:94:b6:7a:
         69:85:e1:fd:90:5a:bf:60:a4:19:8e:38:fd:cb:7d:d3:83:4f:
         9c:38:87:c8:ab:f8:c2:02:6c:56:52:e5:4c:33:22:f2:2e:34:
         2e:3b:69:e8:f4:76:bd:06:b3:21:e5:76:c5:55:e0:b6:4e:a2:
         bd:fc:ff:f1:88:2e:22:f4:65:5e:79:0d:ef:cb:39:d2:87:bb:
         ff:9a:9f:cc:b4:f7:e1:35:1c:fc:9e:9d:f8:f8:fc:df:34:0d:
         7c:30:1b:db:76:fa:15:77:db:37:93:25:e9:5d:a6:f2:37:8d:
         3e:14:e1:9f:5b:a1:8e:74:75:36:40:20:c7:38:44:b0:8c:79:
         be:c6:71:b8:47:d0:ae:8c:25:84:27:b9:23:d7:f8:68:c0:ab:
         e2:a8:11:ca:2d:0b:1e:41:75:ae:45:7e:31:7c:5d:a3:5c:f3:
         48:2a:6a:b7:84:40:01:bf:29:8b:ab:a3:a2:a8:d5:39:61:6c:
         87:4b:9c:45:41:06:13:b7:d4:be:14:8f:3f:9f:06:7c:ff:78:
         68:81:5f:c4:03:b1:08:6b:5b:06:bd:02:97:a4:87:3a:00:c1:
         82:d2:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:57 2024 by rpki-client on console-fra.rpki-client.org