Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa
File:                     323830333a616263303a3a2f34382d3438203d3e20323635363332.roa (raw, json)
Hash identifier:          fGOJ2NqsJgecqPCUTnKRC/vUnIGY9WeEnsB54X9e9XM=
Subject key identifier:   F9:F3:98:87:1A:5C:03:CA:05:BD:D1:4E:5F:80:3F:82:CC:4F:2A:1C
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       7378BBA2E2BC4540B6C4790D379CE6CDAADC6BEF
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:24 +0000
ROA not before:           Tue 05 Mar 2024 17:51:24 +0000
ROA not after:            Tue 04 Mar 2025 17:56:24 +0000
asID:                     265632
IP address blocks:        2803:abc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:78:bb:a2:e2:bc:45:40:b6:c4:79:0d:37:9c:e6:cd:aa:dc:6b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:24 2024 GMT
            Not After : Mar  4 17:56:24 2025 GMT
        Subject: CN=F9F398871A5C03CA05BDD14E5F803F82CC4F2A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:ac:e1:e3:d7:d4:6f:47:15:17:eb:69:2f:
                    92:64:75:51:15:24:7c:0c:a2:29:db:55:6d:5d:0f:
                    f2:d5:ff:c4:2c:1a:aa:44:ac:70:cd:f0:aa:3d:8b:
                    b5:da:7b:69:e1:2e:c3:d3:67:c9:30:44:cf:06:a3:
                    a7:bf:f2:24:67:03:0c:2b:00:73:95:a8:31:50:96:
                    2a:88:28:9b:0c:9b:7a:ed:63:2a:53:3f:21:aa:74:
                    31:64:5a:c2:8e:51:99:8c:93:34:ed:c2:36:cb:a5:
                    cb:cb:31:99:a4:67:1c:4e:63:95:d0:55:6e:dd:19:
                    61:b2:62:8c:44:aa:7c:37:8e:2d:f3:d5:7f:0d:a7:
                    aa:c8:be:3b:73:d8:87:27:c5:be:1f:10:47:cf:65:
                    2b:fc:eb:9e:eb:21:07:0f:7f:75:bc:c7:b9:1b:3c:
                    ff:c1:80:1b:8e:c1:85:be:b1:c5:55:18:4b:b3:af:
                    29:43:ce:bb:6f:34:09:65:9c:5d:11:9e:d8:08:e8:
                    6c:36:2d:17:ea:82:59:40:25:b8:09:a3:04:0c:3c:
                    8e:20:b6:1c:7a:a4:2a:a4:21:46:96:01:7a:f1:0e:
                    5d:85:db:69:d1:7f:25:26:6f:5e:61:8d:de:63:56:
                    f9:2f:00:00:b8:e7:af:fb:04:93:eb:d3:69:d4:77:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:98:87:1A:5C:03:CA:05:BD:D1:4E:5F:80:3F:82:CC:4F:2A:1C
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:abc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:45:4a:ad:29:8b:79:8c:df:37:56:6d:d5:8c:af:e1:65:
         33:15:d9:a0:1f:fc:04:cb:1c:06:b6:3d:c5:ee:18:d2:6c:f5:
         54:b7:3a:32:6e:7a:f7:63:d5:12:ee:62:8d:14:fb:7e:fb:5e:
         38:a0:75:df:7a:d9:03:88:b0:bd:dd:79:fe:ac:60:3f:68:8f:
         3b:6d:3b:65:90:d6:42:19:e5:ef:db:d8:e5:8e:8a:87:52:3d:
         07:4d:0f:3e:17:ca:de:dd:06:a7:e6:b6:81:b3:c8:4e:03:c9:
         62:5f:fd:30:da:25:57:83:0d:fd:67:a0:9a:96:e5:e1:7a:78:
         00:93:d8:36:e5:fe:8e:33:7a:5d:42:cb:fc:00:99:7f:15:d8:
         40:50:78:6b:d1:f3:40:7e:a1:43:c3:46:c0:83:03:20:f7:ad:
         af:51:a6:22:0e:1e:41:b9:12:3a:8a:a6:53:37:65:ac:fd:ea:
         af:e8:24:4b:5f:cc:00:ec:65:f2:cf:26:02:ac:ae:07:ab:c5:
         15:6f:87:ac:74:78:f9:28:f6:7a:e1:c0:cc:ea:ab:ac:66:16:
         4a:a1:68:4a:20:70:ef:8c:77:1b:5b:c2:a7:13:e8:56:ab:a8:
         63:8e:56:7c:2b:96:a2:b1:d4:1c:6f:e8:86:6e:00:33:cb:18:
         ed:ae:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org