Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
File:                     323830333a653563303a3a2f34382d3438203d3e20323636373235.roa (raw, json)
Hash identifier:          ILIQVUFvfgIOiazG2m98/fJKOFbnp40wj35JLNWmZcU=
Subject key identifier:   39:CC:E8:2B:AC:EB:87:97:CA:D6:C4:E1:35:F7:4E:E7:02:A7:C8:AE
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       2E74E3D4CF150B4A6D295D8DCAA535BA775B9570
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:45 +0000
ROA not before:           Tue 05 Mar 2024 17:55:45 +0000
ROA not after:            Tue 04 Mar 2025 18:00:45 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:74:e3:d4:cf:15:0b:4a:6d:29:5d:8d:ca:a5:35:ba:77:5b:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:45 2024 GMT
            Not After : Mar  4 18:00:45 2025 GMT
        Subject: CN=39CCE82BACEB8797CAD6C4E135F74EE702A7C8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:a0:d4:de:f1:ce:24:0e:4b:99:10:f3:c1:
                    6d:c3:45:6a:13:c1:1f:fc:90:91:94:21:b8:f9:41:
                    2d:c3:ff:97:c5:8b:48:b1:7f:f8:67:b5:79:0b:dd:
                    77:4c:4b:e5:0c:64:ea:d3:02:ce:a3:bf:8c:df:81:
                    c8:ec:52:bb:af:a3:66:b7:b0:dd:9e:f2:af:b0:d3:
                    d7:8c:13:87:a6:60:04:02:b2:26:2e:a1:20:51:98:
                    cf:b7:df:d7:e7:3b:7f:ac:7b:88:4e:74:21:2f:e0:
                    40:3c:52:50:09:8e:96:f7:e2:5e:b2:86:d5:21:b6:
                    e4:d8:22:16:2b:c9:db:ce:cd:5f:18:a3:59:ca:34:
                    62:56:f7:f8:04:27:3a:b0:55:f5:c7:cd:ad:38:f9:
                    7e:38:a3:40:1d:03:3f:a0:a3:b5:e6:a0:c4:a5:2b:
                    47:0c:79:58:9e:56:4d:fa:5f:64:d7:ff:fa:23:c8:
                    c7:7f:5f:95:7f:d1:0b:95:02:a9:b1:3c:d8:39:0f:
                    74:79:9c:46:69:8b:75:42:23:07:4c:c3:35:0d:b3:
                    7e:63:2b:50:a6:0e:12:eb:a5:b0:b9:85:20:2e:57:
                    12:bb:fc:2d:fd:8c:50:d6:22:11:d4:70:d3:ab:a3:
                    8e:45:a6:4c:a7:58:ad:5f:21:cb:d1:81:ae:2b:e8:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:E8:2B:AC:EB:87:97:CA:D6:C4:E1:35:F7:4E:E7:02:A7:C8:AE
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f34382d3438203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:a1:3c:93:ef:3c:1c:63:3f:bb:8b:59:00:7c:0e:52:d4:
         4f:da:1a:94:81:e4:32:de:55:04:c4:ee:b3:16:b1:80:86:8e:
         4f:67:13:15:a3:f3:57:ac:10:df:12:6e:ef:03:06:f6:c3:9d:
         3f:4b:58:41:d9:f7:01:ae:64:12:41:04:a1:2d:35:91:3a:68:
         0f:d5:12:56:bb:30:04:20:41:c1:7a:10:d5:52:63:8a:7f:a3:
         65:50:61:97:82:ff:8b:14:c2:26:89:2c:80:d3:d6:22:1c:7d:
         13:4b:e2:17:61:88:00:f0:cd:aa:1a:c8:84:fb:43:07:07:8b:
         1e:d1:17:19:3b:89:de:dc:86:85:29:5b:43:a3:36:28:49:73:
         35:2f:ca:ed:98:53:ab:6b:54:dc:e6:b8:c6:be:8c:29:6a:6d:
         e4:5b:0c:30:5e:3a:27:0a:84:a8:a0:7d:b8:74:1f:5c:39:f1:
         9b:5c:76:e0:51:1e:bb:be:d4:1f:36:c0:ff:40:e2:5d:09:f5:
         6b:8d:5e:c4:20:82:94:55:e9:2b:30:80:a1:a4:df:44:b5:b7:
         3a:bd:f0:f4:0e:d3:c9:be:11:de:37:f4:c2:10:99:b8:93:d4:
         11:f8:28:33:1a:17:16:ef:1e:e9:f3:d3:35:7c:12:74:b2:f3:
         f4:3d:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:42 2024 by rpki-client on console-ams.rpki-client.org