Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa
File:                     323830333a356236303a3a2f33322d3333203d3e20323639383038.roa (raw, json)
Hash identifier:          teG1xzRy1tiEDxuu0zma81fpVWHELs3EgSdKNyg3usg=
Subject key identifier:   77:C3:EC:4A:52:AE:F0:E4:B3:F8:E0:0E:99:F1:F9:8F:4C:5E:7C:60
Certificate issuer:       /CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
Certificate serial:       5B41FE5206C76FE133C68F71466C35322745FF8F
Authority key identifier: EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa
Signing time:             Tue 05 Mar 2024 17:52:25 +0000
ROA not before:           Tue 05 Mar 2024 17:47:25 +0000
ROA not after:            Tue 04 Mar 2025 17:52:25 +0000
asID:                     269808
IP address blocks:        2803:5b60::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:fe:52:06:c7:6f:e1:33:c6:8f:71:46:6c:35:32:27:45:ff:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
        Validity
            Not Before: Mar  5 17:47:25 2024 GMT
            Not After : Mar  4 17:52:25 2025 GMT
        Subject: CN=77C3EC4A52AEF0E4B3F8E00E99F1F98F4C5E7C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:a8:29:94:fb:4a:46:1f:26:89:d3:3d:9b:
                    32:77:69:7f:32:c7:ea:89:2e:ea:77:a5:71:67:fb:
                    58:8b:b2:15:90:75:7c:15:ba:1b:2c:15:f6:11:87:
                    51:11:fa:a4:19:0a:ab:ef:8d:8d:61:42:b4:a0:9f:
                    62:07:95:49:42:d6:f5:11:8b:24:dc:ac:f3:ea:53:
                    f0:18:42:95:4b:20:10:db:a8:15:3b:c9:a0:7a:bf:
                    35:5a:dc:03:85:0c:b5:13:c6:47:0c:0e:e6:d3:7f:
                    25:a3:4d:54:d5:19:d8:90:d3:4c:8b:7d:ef:5b:3e:
                    24:b5:2f:10:7f:6e:6f:86:f6:88:e7:24:82:ba:54:
                    22:69:79:62:93:49:aa:cd:8b:43:94:97:c8:88:30:
                    50:c5:0e:9d:ad:b1:f3:a6:90:34:6c:ec:13:43:c6:
                    b3:e1:cc:aa:f5:4f:f5:a3:5b:a2:85:29:14:ba:00:
                    35:20:f5:a9:e7:b0:5e:19:5d:68:b6:a1:ec:45:6b:
                    24:9c:9a:19:8d:03:5e:52:f2:46:bb:4e:29:f8:1c:
                    5a:fc:0c:79:60:a2:44:10:34:f9:0a:2d:f9:4c:45:
                    2e:39:0d:9d:e8:4a:2a:47:26:43:67:5c:3b:a1:ef:
                    e0:6e:d5:ce:10:d1:03:53:59:3f:e1:cf:90:89:4a:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C3:EC:4A:52:AE:F0:E4:B3:F8:E0:0E:99:F1:F9:8F:4C:5E:7C:60
            X509v3 Authority Key Identifier:
                keyid:EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:e4:52:96:47:cf:0e:7b:39:d4:83:30:2f:f6:18:a1:e2:27:
         fb:58:47:a1:f6:ee:6f:3a:cf:8f:a7:4d:c0:1a:3a:db:34:33:
         19:f4:bb:4a:98:93:b8:22:7e:b0:78:29:62:47:c1:b0:b0:2c:
         e7:0f:f2:f5:c0:08:8a:2c:88:68:40:8f:c5:82:35:23:cd:9d:
         f2:53:68:8b:c0:a2:5c:65:9e:40:03:5a:59:33:51:37:d3:a8:
         3f:54:d3:06:29:fc:16:f0:80:50:f9:50:f3:48:de:c0:7d:a5:
         c9:26:51:95:5c:cf:d9:ce:ae:aa:57:c1:83:70:41:43:f4:76:
         71:38:f8:43:a4:7c:9d:69:a7:76:89:94:3e:2d:29:ac:e4:56:
         28:9f:45:3b:b5:4a:09:2d:1f:78:cc:45:d5:8b:a8:88:c6:9c:
         dc:cd:d9:63:d1:05:71:64:b0:49:76:29:97:59:b1:87:b4:d5:
         7b:14:49:88:49:ca:e8:be:81:0d:44:fd:87:a0:48:fe:01:ec:
         70:ce:87:f8:3a:34:8e:32:0e:12:83:58:9b:1b:cf:e3:cc:b2:
         be:a5:6a:e3:24:65:88:35:d0:c8:1f:af:55:52:30:08:fd:c3:
         82:81:18:36:4d:3e:c8:c2:aa:37:46:b9:5e:51:b5:ae:81:2e:
         64:a0:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org