Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa
File:                     323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa (raw, json)
Hash identifier:          3z0dyzZviM0NixOvdwX62FHKFp5BT3D4jGZwyUupH3g=
Subject key identifier:   30:5F:9D:A9:3C:3C:02:D3:03:13:6D:59:5F:CF:F3:07:EC:25:61:DA
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       13D06B1116BDD059C9752D8A557A93DECD028E1A
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 18:12:21 +0000
ROA not before:           Tue 05 Mar 2024 18:07:21 +0000
ROA not after:            Tue 04 Mar 2025 18:12:21 +0000
asID:                     270057
IP address blocks:        2803:2a80:806::/47 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d0:6b:11:16:bd:d0:59:c9:75:2d:8a:55:7a:93:de:cd:02:8e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Mar  5 18:07:21 2024 GMT
            Not After : Mar  4 18:12:21 2025 GMT
        Subject: CN=305F9DA93C3C02D303136D595FCFF307EC2561DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:29:8f:1c:a7:42:0d:18:4f:b4:da:5d:d3:
                    f4:ef:e5:ec:01:a2:a8:67:f1:65:79:0d:78:89:e7:
                    ff:3b:80:e8:10:41:bf:7d:ed:d6:91:49:84:21:af:
                    15:85:52:ad:47:4a:9c:d6:9d:cb:f5:ee:33:21:44:
                    5d:76:b8:bb:aa:18:a2:4a:68:b1:cc:3a:ad:96:89:
                    7b:50:4f:3a:8d:db:7c:e2:62:5b:e6:0c:1b:7a:39:
                    43:d8:1b:ed:1f:46:19:95:c5:55:e3:03:9f:73:c7:
                    33:38:d3:bb:98:57:20:5c:63:f7:b6:b9:2d:be:f0:
                    be:72:d0:e6:9b:26:c6:ba:6e:41:ed:fc:67:ae:75:
                    44:9d:50:4e:b5:66:21:9f:46:53:8f:46:ca:89:d7:
                    4b:e9:ac:5a:b2:40:79:7d:ed:59:c6:33:8a:da:6f:
                    cf:95:53:5b:0c:4c:27:83:ae:23:9e:07:42:75:15:
                    0b:ec:c2:d5:71:0e:84:f0:0d:8f:de:d9:44:a1:2b:
                    32:d8:51:4a:07:8e:7f:dc:c2:29:1e:0c:63:d7:57:
                    2a:82:31:4d:fe:15:d4:7c:9b:f5:65:f0:54:07:44:
                    46:7a:3d:b5:85:ae:c7:25:e5:f7:f5:d4:6f:15:20:
                    b2:71:7c:03:7b:f4:6e:3d:d6:58:90:6c:95:c4:3f:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:9D:A9:3C:3C:02:D3:03:13:6D:59:5F:CF:F3:07:EC:25:61:DA
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a80:806::/47

    Signature Algorithm: sha256WithRSAEncryption
         66:98:cc:33:75:2a:83:f6:27:1c:fd:b5:1d:a8:32:4b:97:96:
         c7:93:e9:2e:c0:f7:f0:e4:67:4a:02:d2:5b:95:a3:c7:d0:55:
         a5:e7:6e:15:00:dd:8b:5c:86:1c:bc:8a:14:08:06:54:e4:27:
         90:62:10:f5:fa:8c:e8:5a:cb:37:dc:41:26:58:8c:49:76:20:
         15:24:a4:b8:88:ff:ce:a2:69:6f:2b:e8:80:fc:ac:4d:ab:f2:
         81:ff:0c:1b:37:2e:52:5e:88:28:f5:c7:ed:87:a6:6b:9b:0b:
         c1:c4:4f:2e:58:8f:12:cc:ec:66:4b:6e:56:c1:2c:ca:72:69:
         22:63:b0:fe:20:a0:4d:0b:cf:2c:2e:72:12:cc:15:b6:3e:e0:
         e1:b4:dc:31:f7:ac:ee:93:27:84:4f:7a:6e:b5:95:ac:9d:5d:
         c8:5e:df:47:fd:aa:74:6a:ee:61:2a:cd:8f:b7:e4:1a:9c:7e:
         0d:45:02:20:81:10:35:25:c9:82:af:2b:b5:66:5c:1c:f7:c3:
         a1:dd:dc:b0:c6:ae:e9:9c:d3:9c:c9:8a:83:68:8e:53:ae:a9:
         5c:e0:f3:7f:d7:e9:1d:2f:3a:e3:c6:bc:04:ef:62:c1:03:c7:
         7c:5b:12:fa:ce:e2:60:f8:12:da:9b:ac:13:9f:74:63:5a:e7:
         7a:28:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org