Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/323830333a316461303a3a2f33322d3332203d3e20323633373835.roa
File:                     323830333a316461303a3a2f33322d3332203d3e20323633373835.roa (raw, json)
Hash identifier:          LIMdZNntcRVImFqdlMSy6EsDgftudUjAAKSIOMOzqlo=
Subject key identifier:   D4:D0:A0:C8:0B:8A:80:2D:FB:19:88:2C:47:30:70:51:94:FA:C3:CF
Certificate issuer:       /CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
Certificate serial:       736BA15F92427171B1415D49EC7939968081A225
Authority key identifier: E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/323830333a316461303a3a2f33322d3332203d3e20323633373835.roa
Signing time:             Tue 05 Mar 2024 18:08:28 +0000
ROA not before:           Tue 05 Mar 2024 18:03:28 +0000
ROA not after:            Tue 04 Mar 2025 18:08:28 +0000
asID:                     263785
IP address blocks:        2803:1da0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:a1:5f:92:42:71:71:b1:41:5d:49:ec:79:39:96:80:81:a2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
        Validity
            Not Before: Mar  5 18:03:28 2024 GMT
            Not After : Mar  4 18:08:28 2025 GMT
        Subject: CN=D4D0A0C80B8A802DFB19882C4730705194FAC3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:56:e6:75:d1:13:29:ea:b3:2a:9f:37:c9:
                    13:52:28:f7:39:b3:3d:21:53:af:8f:e9:65:7e:51:
                    8f:be:86:d5:36:62:d5:1d:60:b9:1a:62:30:10:7b:
                    01:74:d4:32:c6:b6:85:49:b8:64:b3:35:e0:62:45:
                    3c:9c:86:75:13:c6:67:f9:19:fc:10:8e:07:35:bf:
                    5a:a4:03:44:fc:05:a4:69:f0:b1:a8:5c:4b:66:35:
                    e0:18:0e:a0:21:36:aa:49:9c:ed:39:ff:7b:d5:ea:
                    f7:d6:61:65:ca:99:dc:42:a8:ae:50:c0:61:da:fa:
                    06:72:fb:e7:d7:66:47:1b:be:ab:21:d7:4d:f7:4e:
                    17:fa:37:00:f1:84:2d:ad:5a:a5:ab:8b:4f:5d:84:
                    51:91:9d:31:9c:c2:19:8f:dc:75:5b:d0:83:c3:1a:
                    a2:c2:c9:9e:ac:33:38:4d:53:21:a2:2f:7d:2d:cd:
                    96:bd:6f:b5:1d:6d:d1:d6:89:51:92:1a:f0:50:5c:
                    30:fc:96:f6:7f:3a:1c:23:fc:2d:18:e8:e6:12:f6:
                    a0:20:68:cf:64:cf:4c:42:aa:08:4d:0c:7f:ad:10:
                    dd:fc:a7:51:9b:a5:36:ee:7f:f7:39:8f:81:4a:4c:
                    79:c8:c2:5a:5f:9b:77:8e:a1:83:ff:29:0f:dc:f5:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:A0:C8:0B:8A:80:2D:FB:19:88:2C:47:30:70:51:94:FA:C3:CF
            X509v3 Authority Key Identifier:
                keyid:E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/323830333a316461303a3a2f33322d3332203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:80:1e:5f:8c:79:26:c4:db:02:4b:a5:a4:b0:6a:18:c1:14:
         51:65:81:d6:48:94:56:71:7f:9b:96:03:2f:75:1c:eb:4b:06:
         f7:ec:36:f9:d6:27:5c:42:1d:5d:09:98:8d:96:24:03:ad:03:
         0b:0d:14:e0:c1:5f:b0:1e:d4:e8:3a:21:39:96:41:0f:f6:99:
         25:9d:13:e9:81:7f:6b:a3:3a:68:10:e2:5a:cf:61:39:d4:82:
         a1:f5:9a:e2:70:4a:3d:29:7b:a0:e4:52:07:69:a8:5f:47:1b:
         d3:31:41:86:aa:62:18:2e:db:3e:a5:a6:c1:ef:c0:30:a2:f6:
         9c:85:9e:e5:42:c5:da:19:30:f6:00:a6:52:94:c0:28:fb:9d:
         8b:a8:cd:ca:d4:5b:c6:2e:04:82:3a:75:3d:54:cd:f2:9e:ac:
         08:eb:6d:a5:9c:b7:3d:97:db:c0:cb:17:83:02:46:4c:fb:98:
         55:0b:07:be:0d:5f:f8:76:2d:be:6c:ad:3c:e0:19:f7:ae:62:
         06:8f:46:fb:6d:08:3c:6f:3a:54:11:c4:ad:ff:f3:11:b9:b8:
         a4:0b:4f:d6:6d:f3:a6:fe:8e:ad:f2:ad:60:23:18:4a:5e:dc:
         14:ae:bf:6c:e4:89:3d:3e:94:ea:47:a9:9b:4b:e4:af:ed:63:
         a5:8e:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 14:38:32 2024 by rpki-client on console-ams.rpki-client.org