Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3332203d3e20323634373430.roa
File:                     323830333a663463303a3a2f33322d3332203d3e20323634373430.roa (raw, json)
Hash identifier:          CDSLeY9e6SOXqRf0XedMtqPFr7lje16PJ07kWmjGB6s=
Subject key identifier:   CC:59:E6:A2:03:06:C3:D5:F1:26:FA:08:65:3E:58:94:7D:2A:67:E5
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       252A08C8626F81E0F872343E02606EF75CAD0BC7
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3332203d3e20323634373430.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     264740
IP address blocks:        2803:f4c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:08:c8:62:6f:81:e0:f8:72:34:3e:02:60:6e:f7:5c:ad:0b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=CC59E6A20306C3D5F126FA08653E58947D2A67E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:99:f8:41:18:11:e4:b4:92:ab:41:e5:ab:
                    30:14:b2:56:d8:0e:ad:31:36:9d:86:f1:3e:e6:d4:
                    a0:bd:8a:50:dd:57:d4:c7:0e:a7:4e:4e:37:33:76:
                    9d:45:82:59:d9:32:8d:58:ae:4b:34:73:63:1d:b6:
                    49:e0:60:0e:86:ad:08:96:47:f8:4a:0c:59:59:07:
                    8a:21:9a:1d:f6:59:1b:a7:87:f7:18:89:71:0e:99:
                    9e:d1:45:fe:41:26:36:1d:58:7a:25:c4:ad:2c:3b:
                    19:47:83:75:a7:cb:de:c7:f0:1a:67:4d:1f:a2:0c:
                    48:6e:e0:01:1b:9b:21:df:f6:60:5f:8c:19:1e:31:
                    64:ed:2d:24:bb:7f:6a:16:12:99:dd:05:fa:f2:16:
                    9e:4e:3f:ce:39:65:d5:e3:14:8f:34:b9:52:69:66:
                    8f:e8:30:f6:cd:01:95:38:ac:1e:e1:d5:74:37:72:
                    15:41:21:dc:2d:bb:7d:88:8d:79:87:1d:39:27:af:
                    f4:8d:36:c4:e1:1a:19:d0:36:71:33:78:6b:86:1e:
                    72:d2:c0:19:a8:8e:66:fc:bf:e6:7c:07:95:2a:24:
                    6d:4e:a6:b7:a6:15:54:49:a0:16:8f:a7:bf:1f:49:
                    cf:52:58:bf:d4:d2:28:83:f2:25:83:ee:50:76:7f:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:E6:A2:03:06:C3:D5:F1:26:FA:08:65:3E:58:94:7D:2A:67:E5
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/323830333a663463303a3a2f33322d3332203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:05:f1:3b:6c:78:e2:c4:b7:1f:4b:48:d0:19:70:b2:cc:
         f5:cf:50:36:cb:5d:ca:76:0b:e5:e4:de:bb:8e:85:af:00:a4:
         6c:8e:74:35:28:a0:45:8d:f9:e2:d6:e8:6e:4f:c4:18:3c:9b:
         9e:3e:61:74:5b:4d:3a:3b:e3:98:92:ec:8a:20:da:96:66:67:
         ab:4d:8b:16:3f:f4:f8:58:48:b9:04:be:4d:5d:e0:b0:17:53:
         01:6f:21:9c:44:95:1a:9e:2f:f6:6a:ef:f4:d8:3b:90:fe:ee:
         88:91:b4:dd:85:1e:29:ce:93:f3:5d:cc:8d:e8:a9:c7:5a:3d:
         6e:03:a5:ed:34:7c:d7:39:14:e3:ea:98:9c:ec:e6:65:d6:07:
         44:ca:ec:5d:6a:a9:11:9d:03:6e:be:87:1f:88:2b:de:a9:10:
         2b:d0:72:03:70:35:db:4c:c3:40:64:89:cb:d3:dc:fa:e7:6d:
         fe:7c:39:6f:e2:d6:2f:45:eb:0f:fe:2d:25:dc:64:59:36:07:
         cb:1d:e5:6e:c3:6e:09:82:49:a0:bb:90:e5:c5:c6:55:4b:29:
         01:d8:e2:ac:b2:16:83:ea:80:05:84:a5:ca:a7:4f:5a:85:43:
         74:0d:0e:80:76:1c:4c:cd:20:2e:d8:4a:a5:15:63:ad:44:e0:
         a7:ed:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:06 2024 by rpki-client on console-fra.rpki-client.org