Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/323830333a396363303a3a2f33322d3438203d3e20323635363239.roa
File:                     323830333a396363303a3a2f33322d3438203d3e20323635363239.roa (raw, json)
Hash identifier:          RQk4dQFPOo0HgT7MiwgNPFUyfpPQSaXj3Wh18nzYX2c=
Subject key identifier:   CF:15:0F:10:90:82:29:87:D6:D2:3E:07:FC:D1:E6:5D:F2:A3:A5:1F
Certificate issuer:       /CN=27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42
Certificate serial:       0ED9D1B600B85033330E13C4A25D33D0CBC93B09
Authority key identifier: 27:D4:1D:63:3A:2E:F6:7B:9D:5F:1C:7C:B9:F7:7C:4B:5E:47:4E:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/323830333a396363303a3a2f33322d3438203d3e20323635363239.roa
Signing time:             Tue 05 Mar 2024 18:02:36 +0000
ROA not before:           Tue 05 Mar 2024 17:57:36 +0000
ROA not after:            Tue 04 Mar 2025 18:02:36 +0000
asID:                     265629
IP address blocks:        2803:9cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d9:d1:b6:00:b8:50:33:33:0e:13:c4:a2:5d:33:d0:cb:c9:3b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42
        Validity
            Not Before: Mar  5 17:57:36 2024 GMT
            Not After : Mar  4 18:02:36 2025 GMT
        Subject: CN=CF150F1090822987D6D23E07FCD1E65DF2A3A51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:9c:af:af:f7:ac:a2:87:4f:34:9b:51:fa:
                    49:12:7f:dc:52:6f:b4:97:25:1a:77:aa:86:fa:0e:
                    4e:db:e9:51:d4:98:df:25:3b:15:59:dc:93:88:9d:
                    2c:a6:4f:d7:2b:70:4d:12:1f:5f:e0:4e:e2:08:9b:
                    ac:21:49:1f:f8:3e:f2:36:3e:2e:b7:17:ca:54:c2:
                    42:16:c4:06:84:1e:2a:2c:b6:c8:cb:b8:a4:3e:0f:
                    55:42:d6:c1:52:32:95:a0:cf:c4:24:15:ac:f3:2f:
                    38:2f:84:b2:5e:5d:f0:56:c2:84:f9:18:0a:69:46:
                    93:03:73:a0:a9:3d:0c:5f:ea:1a:58:50:f8:c2:13:
                    2a:1a:52:17:07:17:c9:9f:32:e0:03:a9:0b:a2:5b:
                    75:ab:fe:96:e1:11:e1:3c:a9:3c:ca:d7:fe:63:6c:
                    99:66:34:7c:a5:cd:75:9e:94:81:77:c9:ce:14:b7:
                    3e:75:7c:dc:18:5f:4a:01:b2:4e:9c:16:a2:c1:fa:
                    69:5a:7f:0f:62:aa:f7:14:74:61:54:00:ae:90:de:
                    30:52:22:cc:73:54:a3:07:5e:a9:fc:f8:a8:8b:70:
                    ed:29:6f:83:d6:84:a6:40:20:2b:ed:43:4e:17:e1:
                    82:ba:f5:9e:54:3a:19:22:aa:6e:e7:6e:af:f5:2d:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:0F:10:90:82:29:87:D6:D2:3E:07:FC:D1:E6:5D:F2:A3:A5:1F
            X509v3 Authority Key Identifier:
                keyid:27:D4:1D:63:3A:2E:F6:7B:9D:5F:1C:7C:B9:F7:7C:4B:5E:47:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/323830333a396363303a3a2f33322d3438203d3e20323635363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:c9:2e:00:b4:40:a4:ab:4e:f4:17:d0:59:41:b5:33:c3:
         43:64:e7:0e:cf:9d:41:3d:7a:0c:9b:13:6d:c9:e4:81:04:7b:
         9a:ae:b0:e7:54:71:ec:ac:24:a3:c4:a5:fc:96:d2:f4:55:e1:
         14:33:6a:fd:04:e4:16:c5:dc:74:44:6e:47:62:f9:4a:b7:5f:
         56:4e:d5:a7:84:e0:c3:a0:13:b1:78:ba:19:b2:5c:e2:c5:2e:
         16:e9:e4:9e:7f:41:2a:10:61:0b:a2:1f:60:46:4c:66:f6:b8:
         86:39:a0:1c:fe:ab:1b:77:59:4c:89:ab:9a:2f:a4:22:e6:dc:
         c3:a2:d2:d1:d3:24:4d:24:6b:45:98:91:31:ac:9a:9b:87:79:
         ca:25:26:dc:a4:7a:ed:16:ad:b9:31:a7:2d:35:a4:45:68:e5:
         60:82:51:d3:1c:0b:8a:9e:59:76:64:bf:68:30:cc:e3:da:b0:
         22:50:0f:d4:4a:48:35:fd:d1:9d:ac:21:76:36:4b:87:37:ea:
         42:b7:71:11:25:30:11:08:75:5c:6c:f3:a1:e4:ef:39:bb:20:
         2c:e0:75:c3:b2:6f:bb:e0:32:8c:77:c4:be:c8:56:cc:99:97:
         ed:4e:d1:98:2e:0b:dd:fb:e6:31:34:39:cd:73:71:78:28:37:
         f5:80:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 07:39:57 2024 by rpki-client on console-ams.rpki-client.org