Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa
File:                     323830333a323234303a3a2f33322d3438203d3e20323633373737.roa (raw, json)
Hash identifier:          gfDbDKcdtBXlj8NO1bJ6GIhuNx2tiwZg3F6BhFVioUo=
Subject key identifier:   1F:72:A7:4F:76:A4:4D:FB:85:FA:EA:EE:8B:B0:BB:0E:11:FF:91:19
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       2BE4A7B156FDD376B0552EAC8082CB211FE7B7A4
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa
Signing time:             Tue 05 Mar 2024 17:52:04 +0000
ROA not before:           Tue 05 Mar 2024 17:47:04 +0000
ROA not after:            Tue 04 Mar 2025 17:52:04 +0000
asID:                     263777
IP address blocks:        2803:2240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e4:a7:b1:56:fd:d3:76:b0:55:2e:ac:80:82:cb:21:1f:e7:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Mar  5 17:47:04 2024 GMT
            Not After : Mar  4 17:52:04 2025 GMT
        Subject: CN=1F72A74F76A44DFB85FAEAEE8BB0BB0E11FF9119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:45:b0:71:f5:7e:6b:e6:59:6e:ca:27:c6:
                    81:96:e0:da:9e:9f:e9:2f:a1:5f:15:2f:c3:96:35:
                    6a:b6:f4:c2:71:87:fc:b2:f8:7d:e2:fb:08:14:6c:
                    20:f5:36:1a:c6:40:87:66:5a:67:7c:14:12:0a:62:
                    d8:2d:ac:59:54:77:2e:69:80:f0:89:ca:81:b4:14:
                    ba:e6:78:03:aa:96:c2:19:09:40:19:6d:45:9d:ad:
                    a3:28:f1:b8:e3:cb:27:51:13:d4:2a:e5:89:47:88:
                    2c:f2:af:b4:09:25:43:72:93:84:9a:99:50:58:86:
                    93:44:64:7c:70:e6:3d:30:eb:29:37:7c:d7:49:34:
                    13:f5:33:1c:5b:fa:8e:8e:5f:4a:20:e9:e1:72:b6:
                    23:4c:2e:b1:88:e7:7b:0a:e6:f3:51:70:da:f9:0a:
                    02:d9:e5:f6:c1:b9:e2:a2:63:84:61:ee:0f:a1:ce:
                    54:23:ab:46:5f:05:82:f8:7d:6a:40:b2:8f:9c:72:
                    9f:6a:ba:fb:ad:4c:e4:37:d2:fe:b6:74:1e:fe:44:
                    1e:89:0d:a0:2f:81:7d:86:b7:66:76:0e:06:6e:66:
                    cf:99:16:4e:5a:83:1a:57:48:94:df:e5:8e:c8:f4:
                    0d:b3:af:b9:bf:cf:8d:08:8d:0f:03:04:f5:ff:db:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:A7:4F:76:A4:4D:FB:85:FA:EA:EE:8B:B0:BB:0E:11:FF:91:19
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/323830333a323234303a3a2f33322d3438203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2240::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:23:1a:76:e2:0b:46:6d:b1:3a:d8:f6:a6:80:c6:8c:18:74:
         0e:12:38:20:a5:79:9e:e2:b4:1b:fd:3d:9d:88:8e:46:a5:14:
         a7:9f:c8:c0:ae:a9:d5:e6:8d:51:eb:5e:09:93:9f:f2:c5:06:
         cc:a5:88:f6:77:c1:49:15:1d:af:37:db:0d:ba:9c:0b:af:34:
         67:18:f6:29:96:26:89:30:54:8c:d1:24:a7:99:fd:7a:6d:4f:
         70:3a:b8:a2:5d:75:9d:28:d2:e1:84:bf:69:92:e5:94:c1:8b:
         87:67:9e:b7:79:7f:55:02:fe:77:3e:1c:1d:3b:a9:f4:72:86:
         71:79:b4:f2:a7:4f:06:89:18:1b:70:0a:85:16:b2:af:a5:ec:
         a6:b2:c6:b2:c9:ea:96:43:d6:10:0f:28:fb:04:d4:e6:57:6b:
         30:e1:ce:30:86:3d:4a:97:e6:ff:30:90:7b:bd:2f:cc:16:9e:
         b6:ac:67:67:66:00:ca:30:b1:98:2f:4b:c5:15:b4:92:e6:99:
         75:2a:8c:e3:56:45:ec:81:0d:26:42:22:f7:01:b0:9f:7d:61:
         97:8a:57:07:c5:2c:f3:2d:c0:af:72:88:5e:b4:a0:ee:b2:a4:
         ce:20:04:d9:5e:ed:6d:5d:dd:6b:59:15:e5:a3:36:8c:a5:ce:
         dd:9a:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:02 2024 by rpki-client on console-ams.rpki-client.org