Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa
File:                     323830333a333636303a3a2f33322d3333203d3e20323637393035.roa (raw, json)
Hash identifier:          tXk/zf9WO71jPa2n7oBZTPs4kMo19xFPdp0vbZxoTEs=
Subject key identifier:   D9:7F:A4:7F:8B:CF:1F:08:59:5F:6F:44:85:39:B2:60:BE:B4:02:D9
Certificate issuer:       /CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
Certificate serial:       0351D9C9CD83C2E1D03D27357D7C5209ECE1A8A3
Authority key identifier: 5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa
Signing time:             Fri 24 May 2024 15:35:00 +0000
ROA not before:           Fri 24 May 2024 15:30:00 +0000
ROA not after:            Fri 23 May 2025 15:35:00 +0000
asID:                     267905
IP address blocks:        2803:3660::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:51:d9:c9:cd:83:c2:e1:d0:3d:27:35:7d:7c:52:09:ec:e1:a8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
        Validity
            Not Before: May 24 15:30:00 2024 GMT
            Not After : May 23 15:35:00 2025 GMT
        Subject: CN=D97FA47F8BCF1F08595F6F448539B260BEB402D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:c9:f2:a7:83:df:80:98:6c:ab:b3:0b:81:
                    53:58:13:ec:18:38:f4:69:a0:37:67:10:2c:dd:fc:
                    94:63:60:4f:2c:b7:8f:ba:e1:1f:a2:0f:20:50:3c:
                    ef:bb:03:8e:38:00:46:de:34:b2:c6:42:d2:a6:28:
                    39:f2:56:f6:78:01:d7:c3:10:c6:7b:23:8e:b5:64:
                    ef:a8:64:cc:ab:de:0e:79:5a:1f:e2:01:79:01:62:
                    76:a9:34:36:a6:05:5a:b9:0e:93:c4:e2:8a:13:db:
                    9f:b6:ea:fe:e5:dc:28:af:79:bc:47:8f:36:c5:39:
                    9b:bf:b1:0e:ec:81:b0:e0:d4:94:60:cc:27:5f:7a:
                    f8:dc:83:00:ce:8f:79:86:6a:d8:32:08:45:fa:fc:
                    82:60:b1:c3:36:d3:1c:49:1c:73:9d:db:7d:8b:60:
                    e8:09:ab:ca:94:c1:b4:0b:98:78:78:49:7b:2c:d8:
                    e7:25:d8:7f:6d:b3:57:25:60:21:8a:0e:87:11:73:
                    1a:53:b7:88:f4:dd:76:7f:90:17:e6:ee:6e:9b:90:
                    c2:1f:69:ea:e1:80:43:65:e3:6d:8a:c5:84:2a:ed:
                    35:7c:89:80:2b:5d:92:00:14:6d:06:e5:25:81:8e:
                    68:6d:77:45:ab:9e:d3:e6:5c:36:7e:5e:a0:46:40:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7F:A4:7F:8B:CF:1F:08:59:5F:6F:44:85:39:B2:60:BE:B4:02:D9
            X509v3 Authority Key Identifier:
                keyid:5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3333203d3e20323637393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:aa:db:f5:b8:61:17:c6:74:b2:00:19:06:c0:eb:6c:cd:
         8d:ef:59:6d:ea:7a:48:74:28:32:4d:85:fc:46:e6:1e:b9:93:
         de:61:23:b2:bb:86:86:a9:61:95:e9:49:c2:76:43:7b:c2:05:
         19:1c:0b:8c:da:6c:43:1f:46:fd:1d:30:9a:1c:d6:48:e8:ee:
         22:7f:3b:9f:21:86:46:04:06:db:8b:11:4b:ac:40:98:00:12:
         47:a7:12:31:2a:1e:63:b4:86:2a:a5:0c:7a:6c:86:06:0f:b0:
         12:a3:e4:65:48:12:b9:67:94:58:59:86:bd:c2:63:00:64:92:
         29:cd:00:b6:2d:e6:25:8e:5b:0f:7d:eb:4c:6a:d0:83:11:34:
         2f:82:19:ad:fc:81:87:b6:8f:5e:7e:4b:4d:e9:d5:09:16:a1:
         2e:43:dd:5c:5d:bd:e6:e1:e4:8d:ae:3f:1f:f3:ac:11:33:af:
         48:7a:88:27:d4:c4:29:99:ef:89:6d:11:77:10:10:3b:d4:2b:
         d7:cb:1a:80:d1:31:b8:f1:1d:40:67:61:bb:77:60:28:4a:75:
         ce:d6:09:c2:e4:46:77:69:5d:57:d3:0c:c0:06:3a:b7:99:f1:
         8a:6c:45:76:e9:7e:88:20:96:1b:03:37:7c:93:ef:98:9a:be:
         fe:14:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org