Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830323a3a2f34382d3634203d3e20323730303537.roa
File:                     323830333a326138303a3830323a3a2f34382d3634203d3e20323730303537.roa (raw, json)
Hash identifier:          0CQZm4Ll7ZLNGfUJRbeDcE7L9p4StmV74bpqQSGejZI=
Subject key identifier:   FD:81:44:BE:CB:FB:BE:07:DE:4B:4F:06:D0:B8:08:9C:EE:9E:4E:83
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       2CD65B8783F94F81813427905839746CE329E473
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830323a3a2f34382d3634203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 18:12:21 +0000
ROA not before:           Tue 05 Mar 2024 18:07:21 +0000
ROA not after:            Tue 04 Mar 2025 18:12:21 +0000
asID:                     270057
IP address blocks:        2803:2a80:802::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d6:5b:87:83:f9:4f:81:81:34:27:90:58:39:74:6c:e3:29:e4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Mar  5 18:07:21 2024 GMT
            Not After : Mar  4 18:12:21 2025 GMT
        Subject: CN=FD8144BECBFBBE07DE4B4F06D0B8089CEE9E4E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:37:73:d2:32:13:a4:f2:0a:a8:23:78:ca:
                    a6:f6:4b:c9:2a:41:40:38:2a:25:53:bf:fd:86:fa:
                    3f:29:6f:03:85:a3:f7:21:40:55:a1:25:4f:c6:03:
                    50:56:4e:f4:14:29:31:12:b9:66:39:3e:e2:3e:d6:
                    ec:05:b2:2c:94:0b:d5:0a:ab:5d:ac:9b:8a:24:8d:
                    dc:cf:98:d3:c9:1f:fc:8c:c3:b6:56:bd:7e:a2:ce:
                    c7:0e:9b:ca:91:e6:b9:08:80:cd:15:80:13:23:ff:
                    90:42:f8:a7:69:58:72:2f:11:2c:b7:ac:9b:8e:8c:
                    f5:71:fc:9c:20:60:7f:80:65:c9:6e:24:ed:92:54:
                    3c:fe:7d:55:2d:f5:b1:5a:33:ae:eb:17:54:42:05:
                    c4:33:6d:47:1a:d4:8d:a0:95:1d:a3:a7:0a:63:32:
                    d7:2f:fd:57:33:3e:e4:a5:03:43:6a:38:e2:83:7d:
                    56:32:85:66:7e:27:bb:ac:aa:84:ae:2f:e3:a8:7f:
                    d2:15:76:3f:85:5f:69:0b:31:ea:52:77:8b:71:8d:
                    f7:f9:91:53:d8:36:f6:7d:a0:b6:b9:4a:e7:b5:a2:
                    86:0a:fe:d0:64:99:3e:a3:7c:20:57:28:5d:2a:18:
                    e2:4b:85:7e:7a:5b:19:56:b3:dd:63:a0:cc:20:bd:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:44:BE:CB:FB:BE:07:DE:4B:4F:06:D0:B8:08:9C:EE:9E:4E:83
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830323a3a2f34382d3634203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a80:802::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:bd:f2:20:b6:9b:73:40:1d:3d:cc:f2:55:b9:eb:bf:62:
         29:27:c3:9c:2e:3e:e7:73:b9:2c:f1:9f:34:20:aa:6c:4c:be:
         a4:6a:85:7e:fb:f2:5b:50:80:a7:c8:65:06:19:6f:89:b1:31:
         fa:4e:25:ad:f2:65:8f:39:79:04:b6:c8:1a:46:da:b8:7f:20:
         c0:cb:e5:8a:99:05:77:30:95:a3:2d:cd:e8:5b:f3:cc:89:78:
         b5:5d:8d:01:1c:15:9b:f6:e6:6f:03:91:fc:71:cc:80:97:1d:
         16:c0:8f:48:20:16:ed:ed:23:97:2e:0d:c9:40:b9:95:aa:9c:
         9f:c9:6b:4e:d0:bb:61:58:99:8e:9e:fa:50:73:79:b4:af:7e:
         a9:37:7d:c5:96:df:0f:3f:ae:40:fb:db:e3:00:bc:7c:65:3e:
         6a:a0:ac:f3:36:f3:5c:28:a2:d2:fe:18:70:a2:63:a1:e3:d0:
         8b:d0:c7:80:18:27:f1:1d:2e:b9:c3:84:27:63:59:a0:ab:cc:
         2a:c8:90:84:e7:b6:4e:35:11:ee:20:e7:26:9e:11:95:34:26:
         72:33:cb:78:29:b6:00:54:56:27:f0:84:fa:6f:79:57:a9:50:
         0b:9c:57:d4:6d:a7:e5:3a:79:50:3e:9d:43:02:e0:de:09:2f:
         bd:a0:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org