Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33332d3333203d3e20323732303236.roa
File:                     323830333a363531303a3a2f33332d3333203d3e20323732303236.roa (raw, json)
Hash identifier:          h1DF8Uhi1abHTg6+wVDSGpxxOgAXoi1HLV0Z5taOFYE=
Subject key identifier:   93:96:75:BF:73:97:55:A9:75:1B:0E:58:E9:AF:0F:E7:79:C1:B7:20
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       23746E66D217ED3DF39A6538EF6AA763CF246139
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33332d3333203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:00 +0000
ROA not before:           Sun 26 May 2024 03:50:00 +0000
ROA not after:            Sun 25 May 2025 03:55:00 +0000
asID:                     272026
IP address blocks:        2803:6510::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:74:6e:66:d2:17:ed:3d:f3:9a:65:38:ef:6a:a7:63:cf:24:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:00 2024 GMT
            Not After : May 25 03:55:00 2025 GMT
        Subject: CN=939675BF739755A9751B0E58E9AF0FE779C1B720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:c1:c3:56:67:5f:54:59:ff:0f:1d:6a:8b:
                    11:fd:83:29:6f:f0:24:eb:d7:38:da:be:9f:2c:66:
                    72:b4:1a:ad:d6:bd:67:45:4c:82:0e:0b:2b:72:95:
                    b7:9c:56:f0:08:53:fe:56:5d:a9:81:ed:78:40:25:
                    12:eb:39:8a:75:6b:89:80:5c:b3:f3:12:3c:a4:b0:
                    bd:87:5d:50:c0:bd:5f:ef:e0:de:c5:9c:26:57:30:
                    e1:37:29:89:32:49:6b:2e:29:86:12:bc:0b:89:d7:
                    79:5a:9d:13:1f:5c:2d:ad:69:bb:df:95:7d:e6:f3:
                    cb:bb:5f:16:3c:a2:10:fa:b3:9a:bd:12:5b:9f:e3:
                    7a:e4:c5:21:1c:b1:50:64:91:52:77:18:26:1b:d3:
                    47:63:0e:c7:0b:ca:58:2e:b8:e9:af:5f:c3:b6:59:
                    63:0e:e8:9e:9d:a1:6c:f9:56:7a:17:fe:c6:e8:9f:
                    f4:67:03:e6:8b:33:11:5b:8f:b1:69:f3:15:7e:d8:
                    b9:8b:cb:26:da:b6:f3:d9:88:02:5d:fd:42:37:c1:
                    46:53:01:30:74:0e:06:40:2f:9b:d0:24:21:47:a8:
                    d1:cb:fc:e7:09:f7:04:96:10:7d:8a:bf:a8:d5:3e:
                    ea:e8:5c:a8:d9:37:fe:df:15:94:7f:27:27:42:42:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:96:75:BF:73:97:55:A9:75:1B:0E:58:E9:AF:0F:E7:79:C1:B7:20
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33332d3333203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6510::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:ff:45:90:ef:86:2b:e2:e8:81:97:12:0c:39:8b:cc:8a:
         ec:27:3c:60:57:a9:28:26:56:89:cf:d9:78:ef:09:55:23:53:
         f7:f2:08:89:3e:11:ed:f2:a8:8c:7b:a6:51:37:de:2d:07:c3:
         45:f1:a4:f4:2a:3a:2f:db:30:bf:6f:8f:c6:52:5f:f8:86:b6:
         40:ab:a2:48:2d:7f:a1:8f:03:2c:3c:8e:ab:b0:1d:d3:32:e5:
         a4:c9:d6:9d:1c:fd:81:74:1e:47:e9:c2:47:db:8f:f2:fb:2a:
         5a:54:8d:71:0f:87:43:2e:14:74:ee:7b:30:5f:41:ec:ac:02:
         60:4a:3f:ad:ed:e5:c4:1a:97:18:c6:78:cb:ed:59:91:f8:d4:
         64:8a:e6:33:73:b1:5c:47:63:2e:49:e8:b3:a8:c7:67:9f:b8:
         ef:ba:3c:64:5a:0e:ea:b1:49:65:49:23:dc:8a:9e:35:6d:8f:
         5a:c9:96:dd:f9:99:21:00:36:d2:28:10:ad:00:0f:c1:c3:37:
         02:e2:60:17:2a:e7:16:c7:eb:01:21:de:41:b3:57:74:3e:19:
         c9:5e:fa:80:20:8c:3d:88:d4:d2:19:39:2c:17:94:3e:02:97:
         4d:50:e2:f7:2e:cf:65:4b:5a:65:15:29:62:43:6a:ab:f9:7e:
         90:a1:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org