Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/323830333a323736303a3a2f33322d3438203d3e20323639383230.roa
File:                     323830333a323736303a3a2f33322d3438203d3e20323639383230.roa (raw, json)
Hash identifier:          Rt8KXoh0amXV1gq+jRAmEeNHlZijv0vymTmgeDJ57ig=
Subject key identifier:   6E:E1:27:AC:CD:E3:65:7A:9E:24:CB:DC:3B:F1:5F:F4:68:A1:DA:B2
Certificate issuer:       /CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
Certificate serial:       5BEACA725B96933541C112DD854130A1AB83E042
Authority key identifier: 8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/323830333a323736303a3a2f33322d3438203d3e20323639383230.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     269820
IP address blocks:        2803:2760::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ea:ca:72:5b:96:93:35:41:c1:12:dd:85:41:30:a1:ab:83:e0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=6EE127ACCDE3657A9E24CBDC3BF15FF468A1DAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:ee:ea:b5:b9:8c:ab:38:28:38:00:ea:98:
                    9b:d7:d0:97:b5:01:d3:47:cc:1a:4e:54:87:bc:3a:
                    11:d6:55:dd:d7:15:23:c5:aa:74:ed:27:e3:85:7d:
                    4f:ec:ef:08:e2:8d:70:a3:09:bf:e2:69:85:a5:fd:
                    ad:6a:dc:3c:86:c8:65:46:22:9f:65:54:19:59:54:
                    26:4b:30:08:1c:f2:87:4b:34:4a:24:0f:70:74:ed:
                    81:92:22:24:08:d6:f2:aa:4c:9f:3c:7f:99:e6:dd:
                    0d:09:09:bd:62:1c:66:bd:66:60:f9:23:dd:c0:9b:
                    3a:8d:cd:35:fa:a6:e9:05:1c:ad:04:64:72:75:44:
                    5d:f6:86:f7:1a:e2:fd:fc:d7:c8:12:9f:21:e1:44:
                    f8:56:ba:3d:40:d7:d3:88:fe:50:2a:bf:b0:80:de:
                    93:01:32:eb:a2:21:0f:17:6f:27:9e:6b:90:ae:72:
                    96:79:b3:75:be:cd:41:ee:df:80:2f:b3:f8:eb:cb:
                    e5:6a:9b:6c:b3:b3:2a:21:37:68:bb:89:30:35:52:
                    8d:02:23:e0:ec:c2:0b:a3:31:c5:4d:a6:0a:c1:bd:
                    1a:b3:bb:ef:71:73:ee:53:37:06:22:bd:ef:0e:70:
                    ff:d0:e3:80:02:df:1a:a7:ce:f1:b8:c8:41:e5:24:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E1:27:AC:CD:E3:65:7A:9E:24:CB:DC:3B:F1:5F:F4:68:A1:DA:B2
            X509v3 Authority Key Identifier:
                keyid:8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/323830333a323736303a3a2f33322d3438203d3e20323639383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2760::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:f5:d3:1b:8c:e0:77:6f:6e:a9:2d:da:18:ce:b6:c5:e8:
         75:c3:42:b5:60:53:94:5d:75:e3:7b:78:2b:8b:e1:27:7d:b1:
         0b:e5:50:f0:87:d9:cc:b3:bb:a7:6f:a5:75:b6:ff:dc:db:4d:
         0f:c3:a8:69:3d:30:f7:48:2d:f0:0b:5c:4f:ef:83:de:32:05:
         3d:61:d5:67:8d:e7:15:35:a0:e8:45:f3:d0:11:43:40:28:f0:
         90:0b:65:e9:9b:5a:f2:25:4b:19:46:25:db:85:c7:d9:27:e2:
         0e:14:ba:b2:e9:e6:a3:81:14:c1:bf:75:54:2c:62:67:d3:fa:
         5a:90:5b:a9:41:6e:46:49:00:ab:1f:f5:a7:b9:06:3e:20:51:
         07:78:b8:20:f4:dc:dc:2b:da:d9:ff:92:b1:17:a8:df:77:bc:
         3e:11:25:e1:1d:9d:24:b4:23:21:1b:bc:63:21:f7:e3:43:5a:
         ca:88:f8:f5:da:84:b7:9d:f2:72:be:dc:31:28:90:f8:18:56:
         b8:5e:0c:ec:29:65:1c:c4:89:88:35:2e:38:4b:d8:00:a8:39:
         01:83:9d:a9:79:93:bf:8d:f4:f4:1a:4f:7e:ec:55:11:21:6f:
         c2:b6:24:dc:f8:b1:4a:2f:29:7a:16:a4:11:64:d9:44:92:f3:
         97:02:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org