Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
File:                     323830333a386238303a3a2f33322d3438203d3e20323732393932.roa (raw, json)
Hash identifier:          aVlvI5B9j0uEvnIZZDVmYOPn4LmF/CQB66y6U3337QE=
Subject key identifier:   6E:BA:77:3F:BD:52:33:0C:89:49:DC:21:6F:22:75:4B:4A:C1:22:82
Certificate issuer:       /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial:       51685C81B1368D02F5E26387835EAB5FA403477A
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa
Signing time:             Tue 05 Mar 2024 18:02:28 +0000
ROA not before:           Tue 05 Mar 2024 17:57:28 +0000
ROA not after:            Tue 04 Mar 2025 18:02:28 +0000
asID:                     272992
IP address blocks:        2803:8b80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:5c:81:b1:36:8d:02:f5:e2:63:87:83:5e:ab:5f:a4:03:47:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
        Validity
            Not Before: Mar  5 17:57:28 2024 GMT
            Not After : Mar  4 18:02:28 2025 GMT
        Subject: CN=6EBA773FBD52330C8949DC216F22754B4AC12282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:6f:e9:5c:f8:59:2f:ef:29:6a:35:f8:18:
                    59:f2:6f:76:63:eb:34:2c:23:a8:ac:29:2b:ce:6f:
                    94:52:11:d4:84:b6:89:50:68:88:3f:19:1e:b6:f0:
                    cd:cc:86:20:62:31:69:54:59:16:5b:2c:fd:a4:b3:
                    8f:8b:49:e6:3e:ab:94:fe:b8:63:04:fc:16:72:c5:
                    c2:15:97:2a:c7:67:31:5a:09:7e:ba:9a:e7:16:49:
                    eb:1a:e2:b2:08:d3:db:ed:a9:91:0c:7e:40:e1:bb:
                    7b:fa:2e:df:f8:a1:2f:6e:87:73:39:35:f5:c4:3b:
                    1d:2c:7f:dd:35:b6:89:5b:44:ad:68:1b:21:b7:b6:
                    54:44:7d:b9:fa:0e:fe:96:3b:b6:f8:bf:f0:8f:a8:
                    c4:d4:67:46:66:6d:ca:65:48:31:a1:8b:9d:2e:8d:
                    28:62:94:6b:08:a3:ee:8f:9f:27:96:f2:1b:af:bd:
                    b3:15:ad:53:a0:e5:82:13:1f:09:17:ec:ac:5a:59:
                    fa:fb:97:2c:fa:99:a5:1a:26:20:86:65:c5:3f:f9:
                    63:cd:c1:88:37:34:36:41:66:78:02:8a:de:02:07:
                    e8:54:42:5c:ac:6d:69:de:cc:1e:59:ae:54:93:8f:
                    a9:b1:f5:01:f7:c1:49:9b:24:cb:b8:6a:0f:c1:8a:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:77:3F:BD:52:33:0C:89:49:DC:21:6F:22:75:4B:4A:C1:22:82
            X509v3 Authority Key Identifier:
                keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/323830333a386238303a3a2f33322d3438203d3e20323732393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:97:da:04:e7:10:40:fd:ba:44:2c:33:08:4d:e3:4f:90:40:
         97:30:8a:49:0e:a0:81:d9:8b:6b:e7:9a:df:8b:17:3f:6e:8f:
         22:08:57:bb:1f:b5:18:d2:e1:2f:5f:7c:12:a1:f5:35:89:8a:
         84:a2:0e:46:6a:c0:bd:8b:9a:12:db:4f:67:29:b8:0c:2b:fa:
         67:4b:88:2b:6c:28:40:b8:64:ed:36:5a:b2:56:14:dd:b6:e9:
         c7:7e:8b:43:ad:f4:8f:04:8c:40:00:ed:08:8c:89:bc:2d:10:
         9e:db:58:31:f8:2f:ee:8d:b3:03:e1:92:ba:e9:cd:bb:95:09:
         b7:58:39:f8:07:0f:a7:72:af:3b:c1:42:9b:2a:89:55:21:d1:
         92:0a:1e:2b:24:e9:60:b7:6b:1f:ea:af:23:33:bf:19:94:4a:
         39:20:11:e1:6f:c3:82:b8:4e:e3:a9:83:e8:49:1c:83:f5:99:
         55:1f:40:0c:d0:15:cf:5e:23:a8:12:a8:5a:fe:01:65:c4:b4:
         dd:34:d0:be:58:21:17:e6:49:22:07:93:b0:b2:da:36:41:0f:
         07:82:74:97:46:94:b1:55:59:86:59:6b:5f:ac:59:03:e1:4f:
         34:21:bc:7f:44:56:ce:1c:8a:ed:ca:65:44:80:80:c2:3f:62:
         6c:0a:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org