Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/323830333a366334303a3a2f33322d3332203d3e20323633373436.roa
File:                     323830333a366334303a3a2f33322d3332203d3e20323633373436.roa (raw, json)
Hash identifier:          L+/ZhsNn3zIvUy2t0gP09HeGwtdSa6tJ54aBSMj+HTU=
Subject key identifier:   84:9E:C3:39:6C:AC:C8:41:A3:47:84:DE:91:C1:24:0A:FB:E3:14:01
Certificate issuer:       /CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
Certificate serial:       0C5554DFB61D8E6119D3F4E04BF6F049BF196607
Authority key identifier: DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/323830333a366334303a3a2f33322d3332203d3e20323633373436.roa
Signing time:             Tue 05 Mar 2024 18:14:07 +0000
ROA not before:           Tue 05 Mar 2024 18:09:07 +0000
ROA not after:            Tue 04 Mar 2025 18:14:07 +0000
asID:                     263746
IP address blocks:        2803:6c40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:55:54:df:b6:1d:8e:61:19:d3:f4:e0:4b:f6:f0:49:bf:19:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
        Validity
            Not Before: Mar  5 18:09:07 2024 GMT
            Not After : Mar  4 18:14:07 2025 GMT
        Subject: CN=849EC3396CACC841A34784DE91C1240AFBE31401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:1e:cb:41:9a:c9:fd:4a:48:30:b7:bc:66:
                    32:8d:9a:ec:e7:74:19:19:d7:9d:98:29:71:45:33:
                    c7:a3:bb:c4:11:0c:99:1c:2e:03:a2:d1:be:a8:86:
                    3c:89:5e:68:bb:e7:e6:0f:ab:43:6a:3a:b6:c4:16:
                    46:71:03:93:99:15:41:6f:6f:06:b6:73:a0:ce:7b:
                    9d:9d:c7:e5:7e:9d:2f:77:52:7c:cc:25:d4:05:1c:
                    e9:a5:b4:b0:9d:36:fb:fb:02:ef:3e:24:6d:80:55:
                    b2:8c:98:33:db:da:7c:fe:e9:7c:69:b8:96:f7:25:
                    50:68:ac:90:87:e3:13:12:3a:9e:cc:b8:74:9d:de:
                    0c:2c:8f:a2:8a:fb:cc:e3:dd:be:1a:d0:9a:23:b4:
                    30:70:7a:6a:4d:db:88:fd:d0:9e:36:16:3f:9e:4c:
                    b1:8f:31:4f:57:c8:5e:ff:77:c4:31:24:11:df:db:
                    3e:60:1c:44:e3:8e:e7:b7:58:7d:3d:a0:72:19:04:
                    13:77:c2:93:81:5a:27:c1:6d:3a:d1:fb:09:95:1a:
                    88:15:0d:0c:7a:60:43:27:82:c7:cb:be:b7:33:61:
                    ed:02:fd:11:c6:e3:b9:f4:4d:f9:0b:e6:07:44:b4:
                    b3:0b:f1:30:1d:3e:ed:82:32:aa:d4:a8:55:fc:cc:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:C3:39:6C:AC:C8:41:A3:47:84:DE:91:C1:24:0A:FB:E3:14:01
            X509v3 Authority Key Identifier:
                keyid:DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/323830333a366334303a3a2f33322d3332203d3e20323633373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:da:df:6c:33:d8:f7:58:56:55:73:95:17:c5:4c:36:fa:
         56:34:e6:cc:d4:f0:bb:68:50:f2:04:b3:d1:84:e5:98:7d:0b:
         51:3b:7c:1d:ca:ba:ec:70:72:eb:38:66:52:a6:ba:bc:09:93:
         01:dd:51:2b:ff:9a:e9:a3:90:6b:0c:24:1f:81:46:83:9f:30:
         f7:e0:b8:7e:7e:b2:60:5e:85:c7:2a:9f:cc:ef:32:1c:38:e0:
         3a:de:f3:ff:1a:fb:4c:ad:10:e6:cc:ce:8b:ce:c6:f9:0f:17:
         f1:17:44:e3:23:a8:19:2e:03:c9:68:ec:42:10:fe:17:dc:ef:
         cd:93:94:41:d8:b6:36:62:34:35:f6:bf:d3:7a:5b:94:1f:4c:
         f1:33:7d:ad:d5:1c:57:5c:29:9d:7e:fa:46:97:ad:1f:bc:28:
         4e:e9:b9:fe:86:1d:73:23:b6:5c:8d:ae:e7:98:06:09:f2:5b:
         be:9e:79:3e:47:ca:e6:a7:dd:94:5f:15:11:88:41:f1:93:78:
         90:19:cc:34:5b:38:52:89:2b:91:28:82:f8:f1:d7:b2:a3:12:
         97:62:83:c0:3a:fa:5c:88:95:a9:f5:7f:a5:e6:7f:14:ed:ce:
         e7:96:ae:6e:31:32:94:23:7b:43:b2:f0:65:a6:60:13:55:f3:
         61:71:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:02 2024 by rpki-client on console-fra.rpki-client.org