Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa
File:                     323830333a653136303a3a2f33322d3332203d3e20323639373331.roa (raw, json)
Hash identifier:          61qKwmVY+URQ++PezVkmoD3XMSWBmpvE9ob4jupRNQ8=
Subject key identifier:   50:5E:8C:0B:49:86:CD:27:29:68:74:59:F6:82:7D:4C:1C:C4:43:8A
Certificate issuer:       /CN=E4C7EE5584B5FC557011BD69AB6E2D42593B85E7
Certificate serial:       4BAE8A97B148697DCB449C1E98FB957F98C3876A
Authority key identifier: E4:C7:EE:55:84:B5:FC:55:70:11:BD:69:AB:6E:2D:42:59:3B:85:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa
Signing time:             Tue 05 Mar 2024 17:48:20 +0000
ROA not before:           Tue 05 Mar 2024 17:43:20 +0000
ROA not after:            Tue 04 Mar 2025 17:48:20 +0000
asID:                     269731
IP address blocks:        2803:e160::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ae:8a:97:b1:48:69:7d:cb:44:9c:1e:98:fb:95:7f:98:c3:87:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C7EE5584B5FC557011BD69AB6E2D42593B85E7
        Validity
            Not Before: Mar  5 17:43:20 2024 GMT
            Not After : Mar  4 17:48:20 2025 GMT
        Subject: CN=505E8C0B4986CD2729687459F6827D4C1CC4438A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:94:21:70:76:78:b9:17:6f:12:ae:75:53:
                    e2:6e:f4:77:e3:1d:0f:61:7f:e2:67:6d:67:04:fb:
                    db:f4:48:0f:35:f6:2d:6a:cf:be:8d:37:4e:6e:3a:
                    37:e6:e3:91:5f:c4:07:31:09:53:95:97:83:47:5a:
                    d4:6c:e0:17:36:7f:80:ae:c5:06:15:ff:90:5e:40:
                    cd:0f:2b:cf:24:08:f8:27:2e:19:3a:14:7e:8b:53:
                    06:fc:e7:62:c4:05:35:48:13:48:03:36:0f:0b:01:
                    cf:3f:b2:32:0d:b4:70:51:42:3a:8c:90:55:92:21:
                    c7:85:bc:0f:ef:96:32:0f:6f:6d:45:0d:91:d9:60:
                    95:f6:bb:aa:2b:a8:a5:bd:e8:3e:0b:64:56:44:81:
                    f6:17:28:06:e0:2b:d9:06:8a:d2:30:f2:d0:33:ea:
                    9f:9b:65:ab:68:7d:0e:24:f5:5a:3d:d0:f6:67:c4:
                    73:c2:7f:5c:3a:b0:15:ab:b3:36:f6:d3:0c:b6:4c:
                    da:88:fb:b8:77:47:97:90:65:da:f8:8c:1b:9c:4f:
                    19:10:50:35:72:51:fa:9b:86:39:77:6c:12:34:64:
                    e5:6a:b1:ee:cf:0f:b7:4a:fc:00:0d:f3:ad:95:88:
                    43:cb:64:16:a2:98:a3:b1:0a:99:50:de:07:ae:5f:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:8C:0B:49:86:CD:27:29:68:74:59:F6:82:7D:4C:1C:C4:43:8A
            X509v3 Authority Key Identifier:
                keyid:E4:C7:EE:55:84:B5:FC:55:70:11:BD:69:AB:6E:2D:42:59:3B:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4C7EE5584B5FC557011BD69AB6E2D42593B85E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F74A068DD9F6E2ED2CB3A58C17CC145377EAD573FC489E94B37A04D4CB43F9F4/0/323830333a653136303a3a2f33322d3332203d3e20323639373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:04:12:c4:c6:bb:99:79:a0:ae:e7:3e:0c:1f:c3:4f:b5:ec:
         7b:c9:3c:41:b6:58:2b:b7:25:fb:a4:7b:8a:6d:b2:10:84:6d:
         d1:12:b0:5f:d9:8b:25:11:02:6e:7d:ba:13:1c:0e:2d:a3:63:
         86:2c:67:8c:53:15:29:cb:39:64:16:aa:0f:b3:bc:db:be:cd:
         ef:26:ec:fa:4d:41:65:3d:e7:22:c8:b1:bf:44:24:20:17:be:
         2f:a1:cb:4c:a7:97:4e:07:85:a5:85:4d:11:04:e8:02:06:86:
         60:6c:72:c1:de:45:98:7b:7e:52:42:22:4e:e4:e7:71:99:f7:
         d3:66:18:7b:23:64:61:c2:86:28:9b:9d:2b:0e:14:d5:d1:20:
         d8:49:31:c6:2c:98:2c:9c:a0:3c:0b:be:e0:f7:a9:b7:5e:ce:
         ae:b5:e1:71:13:85:61:0b:c5:51:90:6c:c5:b0:a7:45:ae:00:
         f1:ba:ec:c6:63:d3:d0:24:0a:3a:6f:4f:54:ad:61:63:d4:70:
         78:1c:b1:6c:3b:16:69:99:67:ae:e4:b8:81:49:9d:fa:53:a0:
         f8:0f:e7:98:c3:ec:bf:8b:53:b0:dc:d4:2e:cb:41:fc:de:fe:
         c2:55:82:50:a9:a9:c1:d1:a8:6f:bf:4d:9e:43:51:df:93:ac:
         7e:8a:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:53 2024 by rpki-client on console-ams.rpki-client.org