Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa
File:                     323830333a353130303a3a2f33322d3332203d3e20323633373631.roa (raw, json)
Hash identifier:          SV1EBEngF2vnA0V10TtVSTMABiUhNskYpQ2eELeRsUw=
Subject key identifier:   32:AB:AF:CB:26:BF:B3:44:DC:15:55:00:A1:56:95:06:D4:77:8E:62
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       2CFDAE4DB2E54C37AED11D63D746E23AAEFEE817
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa
Signing time:             Tue 05 Mar 2024 17:48:03 +0000
ROA not before:           Tue 05 Mar 2024 17:43:03 +0000
ROA not after:            Tue 04 Mar 2025 17:48:03 +0000
asID:                     263761
IP address blocks:        2803:5100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fd:ae:4d:b2:e5:4c:37:ae:d1:1d:63:d7:46:e2:3a:ae:fe:e8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Mar  5 17:43:03 2024 GMT
            Not After : Mar  4 17:48:03 2025 GMT
        Subject: CN=32ABAFCB26BFB344DC155500A1569506D4778E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:12:2a:ac:25:b4:45:88:c6:d0:2e:a8:74:
                    18:6d:a8:3d:5f:33:4c:d9:95:1c:ab:44:8a:01:65:
                    6e:40:f3:7b:36:8a:db:87:43:96:90:cd:23:e2:31:
                    d3:a0:1a:6b:97:22:0d:1a:85:8d:7b:1a:ee:13:f7:
                    12:8c:ce:9e:29:96:f7:a9:e4:d1:5e:91:d0:b6:49:
                    66:4e:7b:f0:51:29:da:0c:ff:54:a5:94:84:c7:27:
                    41:25:a1:94:c1:ca:85:8d:d8:9f:7d:f8:ec:73:9c:
                    9b:43:96:ad:20:4f:34:aa:f7:8f:1a:9e:18:4c:e7:
                    37:8b:8d:98:53:54:9c:94:96:bd:6d:6d:ca:90:ff:
                    5d:a6:43:18:1b:cf:c8:60:84:7f:20:b6:ef:cf:c7:
                    26:f3:5e:c7:0f:5d:4d:6e:fd:01:59:a1:86:89:6c:
                    fb:46:af:89:ee:dc:ce:2c:5f:d2:8b:64:80:b6:56:
                    e2:01:5a:69:c1:1e:42:f6:0c:1f:1b:7c:e5:5a:b3:
                    b7:f3:c7:ed:b9:90:f9:1d:8a:48:8c:75:de:80:33:
                    3d:0a:84:25:98:2e:75:72:54:65:cb:50:5f:00:32:
                    85:1a:c4:ae:94:29:76:e3:81:35:e6:9c:b4:02:6f:
                    fc:7c:38:32:e7:95:06:6d:94:b1:7c:8e:a5:3e:fb:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:AF:CB:26:BF:B3:44:DC:15:55:00:A1:56:95:06:D4:77:8E:62
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/323830333a353130303a3a2f33322d3332203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:55:59:05:ef:33:8b:01:7a:33:ae:4f:5a:20:35:8b:23:b3:
         a4:60:d8:b0:03:33:7a:ed:2e:44:3c:04:a5:7d:27:0d:fb:d4:
         00:ff:fb:50:d7:48:69:65:41:41:e5:d5:78:c8:70:39:4f:91:
         ef:68:5a:c2:8e:c2:d8:22:50:90:4d:8e:6f:3d:97:4d:4d:45:
         0b:bd:0e:28:e5:c7:ed:ad:09:a9:c1:2e:9a:48:79:b3:f2:c6:
         cf:31:48:5d:94:46:14:92:fa:87:d5:f2:c8:c0:99:40:fa:a3:
         b0:5b:a5:1f:a2:ab:48:0f:4c:f1:29:84:e7:bb:a4:61:cd:d5:
         c2:73:ce:59:f5:b3:e1:d8:5c:26:f1:49:a3:0d:eb:f2:24:f8:
         5b:fe:c9:2e:f1:c3:2a:41:32:5b:ab:14:37:bc:fe:67:90:c4:
         81:2c:18:27:ab:19:be:73:8d:3f:d8:19:d8:0a:24:f2:9f:2c:
         c6:0a:a9:c8:ab:0a:04:70:7f:41:74:78:53:4c:53:1b:32:c6:
         e6:32:b0:f7:85:1a:32:d6:af:33:3a:0f:00:a8:5b:cb:5f:60:
         5f:d3:6e:b1:0e:4d:95:bc:43:7e:76:bc:64:7a:dc:fe:12:c6:
         2f:58:f1:32:2d:19:93:0c:ab:50:58:c4:58:a9:29:dd:27:ff:
         64:f8:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:33:44 2024 by rpki-client on console-fra.rpki-client.org