Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/323830333a643064303a3a2f33322d3438203d3e203634313635.roa
File:                     323830333a643064303a3a2f33322d3438203d3e203634313635.roa (raw, json)
Hash identifier:          sqGjzXoA20wAbzm/+r7aleKmK9FKt3NMqjBbFOxGeHw=
Subject key identifier:   E2:2B:91:B2:DF:8F:7F:46:45:CA:4C:44:80:DA:8A:3D:19:10:9A:14
Certificate issuer:       /CN=4C36552D17EEEB8CC65AE8FB33251E48AA0B2089
Certificate serial:       3992239E0532F1B0762FB2C65BC6F90876B0F744
Authority key identifier: 4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/323830333a643064303a3a2f33322d3438203d3e203634313635.roa
Signing time:             Fri 08 Nov 2024 20:50:00 +0000
ROA not before:           Fri 08 Nov 2024 20:45:00 +0000
ROA not after:            Fri 07 Nov 2025 20:50:00 +0000
asID:                     64165
IP address blocks:        2803:d0d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:92:23:9e:05:32:f1:b0:76:2f:b2:c6:5b:c6:f9:08:76:b0:f7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C36552D17EEEB8CC65AE8FB33251E48AA0B2089
        Validity
            Not Before: Nov  8 20:45:00 2024 GMT
            Not After : Nov  7 20:50:00 2025 GMT
        Subject: CN=E22B91B2DF8F7F4645CA4C4480DA8A3D19109A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:3d:af:28:b3:74:d5:a4:9b:17:6c:04:d2:
                    dd:32:00:04:0a:16:c6:a9:a9:5d:60:eb:55:c0:42:
                    0d:a6:a6:c5:4a:a2:87:59:52:b0:8a:9b:e8:1e:c0:
                    2c:1b:01:ac:cc:88:ba:e7:33:85:34:e0:87:ea:cb:
                    3b:1a:f2:e3:5f:4d:8c:0a:80:14:b5:f1:71:09:c1:
                    da:f2:b2:9d:ea:04:4d:9a:25:03:8a:c1:09:ba:b8:
                    30:fd:91:06:00:43:38:e8:3d:3f:3f:56:4e:cc:d6:
                    a7:7a:2a:bf:43:ba:e4:5a:ca:e6:6a:66:87:8b:eb:
                    a3:da:ce:79:c8:63:62:10:cf:67:73:5b:36:b4:04:
                    6f:17:06:41:a9:cc:b9:39:c0:3f:4a:e7:bc:4f:04:
                    28:d6:c2:19:b5:0c:ff:ab:58:b3:de:4e:be:3e:0e:
                    b7:65:cd:4a:69:98:9d:a1:61:b0:12:1e:32:13:96:
                    7b:bd:56:8c:62:b3:4b:e8:d3:a6:0c:46:aa:c1:6f:
                    2a:f4:c9:96:f5:e9:32:81:11:e0:5f:2b:4f:e5:43:
                    2a:a2:9c:5d:e9:da:3b:73:c9:90:62:84:22:a0:bd:
                    a6:cc:4a:db:cf:c5:7d:4b:c9:72:c7:98:6f:50:0c:
                    56:be:67:13:e4:bb:e2:e1:ee:5b:3f:0d:60:a2:59:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2B:91:B2:DF:8F:7F:46:45:CA:4C:44:80:DA:8A:3D:19:10:9A:14
            X509v3 Authority Key Identifier:
                keyid:4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/323830333a643064303a3a2f33322d3438203d3e203634313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d0d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:2a:62:d4:aa:63:c6:3a:fb:3a:50:76:34:59:67:75:8d:
         31:56:41:79:7e:1e:5e:e9:47:68:54:50:96:46:01:84:1a:e5:
         b8:50:e7:61:3a:f1:34:d1:c4:29:6b:e1:b8:5d:36:a0:13:ae:
         f3:40:c3:1b:2f:67:07:2d:de:c3:5f:33:f9:c7:5b:47:db:36:
         a5:02:bc:c8:f4:62:14:c3:9c:b6:75:dd:05:db:21:5b:60:d6:
         2e:1d:29:1d:a3:61:c4:7b:1c:77:ab:3d:ed:dc:2f:c7:cd:06:
         ec:a7:19:5b:01:63:a9:a5:c9:a1:8e:d0:3e:ed:5e:68:a7:65:
         26:1d:71:3f:5f:ca:90:9d:9a:77:36:c4:69:0a:19:97:43:d1:
         d3:c1:6f:e0:5e:80:10:6f:22:78:6b:f2:7f:63:e7:d3:aa:64:
         0f:45:5b:72:b0:b6:88:a4:10:eb:1f:ff:53:e4:0f:12:98:89:
         e4:99:ef:af:fc:f8:88:46:c3:b9:8b:57:35:34:4d:d6:15:f4:
         19:92:ba:5f:c4:37:d6:08:6f:9d:dc:8d:ea:2f:a9:82:1c:dc:
         6d:ce:70:df:a3:4e:b4:2a:81:9b:10:f9:38:22:c1:6a:45:e6:
         d9:33:b2:dc:34:1a:97:78:68:30:d6:d2:6e:5d:66:15:23:8a:
         86:df:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org