Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa
File:                     323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa (raw, json)
Hash identifier:          WN1dY2stvnYADEyYY2XGtYjvs3CToVS8gUwg5lTZTgM=
Subject key identifier:   66:E4:EA:BD:8D:E3:B8:79:7B:E5:3D:9B:2C:8D:43:9D:00:7A:0D:2B
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       091C6E45D4AC0E342376F71FB4CE28A4F5B5CC06
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa
Signing time:             Fri 01 Nov 2024 14:00:00 +0000
ROA not before:           Fri 01 Nov 2024 13:55:00 +0000
ROA not after:            Fri 31 Oct 2025 14:00:00 +0000
asID:                     262186
IP address blocks:        2803:de80:1000::/38 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1c:6e:45:d4:ac:0e:34:23:76:f7:1f:b4:ce:28:a4:f5:b5:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Nov  1 13:55:00 2024 GMT
            Not After : Oct 31 14:00:00 2025 GMT
        Subject: CN=66E4EABD8DE3B8797BE53D9B2C8D439D007A0D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:13:93:48:05:52:8e:79:6b:ac:3b:0a:1f:
                    a9:b0:b1:77:43:f2:4b:53:24:98:81:0d:68:5d:2c:
                    0f:d3:45:e9:48:95:f9:6a:84:bf:df:84:72:a4:99:
                    58:38:45:1b:58:91:fb:67:b8:88:bf:48:98:7a:83:
                    17:da:53:e3:9f:7b:a6:8e:e4:97:c1:ab:fd:df:ec:
                    3b:27:0c:de:92:ba:ea:e6:9d:44:7b:c6:b4:8e:f4:
                    4a:cc:15:43:93:5c:5b:ef:22:96:03:6f:72:20:ad:
                    00:69:f4:d1:86:46:a3:bc:6d:af:a1:d8:e8:0f:4e:
                    53:c7:67:7c:c2:2e:7b:71:10:7e:9a:93:61:75:a8:
                    40:60:b1:77:c3:f8:4f:07:61:0a:8e:9e:57:98:23:
                    f1:98:6b:87:c5:5d:53:c7:c6:b5:97:04:60:f7:ad:
                    1c:6e:c2:3e:28:12:49:c2:cb:dd:5e:38:cc:c6:b7:
                    3a:f0:36:fa:57:18:39:3b:e7:c7:74:8d:31:41:ae:
                    15:ba:e4:a7:3a:a5:d2:e7:76:64:17:8f:95:47:b6:
                    d4:01:18:bb:44:2c:8b:74:0e:ee:22:1d:b5:d0:ad:
                    00:cf:a0:03:05:f9:e5:cb:e7:dc:7e:b9:7e:09:c5:
                    68:9e:e8:ce:9a:4a:63:33:b4:d9:36:6e:cd:02:ed:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:EA:BD:8D:E3:B8:79:7B:E5:3D:9B:2C:8D:43:9D:00:7A:0D:2B
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a313030303a3a2f33382d3634203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de80:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:8b:00:0e:c4:0f:c1:d0:e0:52:f1:fd:af:a0:d4:31:96:
         49:01:7a:b6:1d:d0:6b:b2:ed:89:70:4a:11:b5:af:ad:31:31:
         3c:97:08:a5:d1:a7:28:2a:f3:36:66:7a:2d:67:47:22:3f:43:
         35:47:1a:82:aa:6b:ac:ec:88:48:a8:bb:39:80:ea:4a:23:56:
         b8:98:04:8a:19:2e:e2:fa:82:78:55:ec:c4:8e:b6:af:c6:f8:
         96:db:a8:23:a0:bc:75:4c:7d:3a:63:71:81:c1:bd:b3:e9:80:
         c6:a2:8c:a3:c1:f2:71:9a:69:29:72:71:02:6a:bd:e6:91:64:
         30:1a:59:56:a7:08:23:75:59:cb:af:5d:90:d7:fa:ba:20:a0:
         60:95:00:58:21:c3:eb:e6:e4:53:7f:fe:f1:a6:45:ec:57:20:
         75:73:78:e1:b2:aa:c4:84:66:18:3a:81:d7:58:68:f6:8c:d9:
         b6:0c:d4:84:f4:52:59:d3:08:ff:e7:df:5b:0f:15:61:b1:75:
         1c:b3:41:17:90:b9:8b:ef:24:35:f2:1c:57:44:62:bf:d8:b2:
         90:4b:eb:95:90:bf:f9:bc:21:b7:01:71:7a:1d:76:b7:37:6e:
         34:1c:5a:7d:a9:e7:c5:1e:45:9f:27:2d:0e:ac:6d:13:70:15:
         60:03:51:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:55 2024 by rpki-client on console-ams.rpki-client.org