Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa
File:                     323830333a613465303a3a2f33322d3438203d3e20323639383837.roa (raw, json)
Hash identifier:          JEY/6xLeMKdfFkSzkTV09l3FYG1WeozTa8BzoQZP2n4=
Subject key identifier:   7C:8A:81:91:92:72:89:8E:1B:17:60:51:50:CD:D3:1F:A8:DD:0C:E6
Certificate issuer:       /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial:       1875504012446C7D41149EACE109C3FC4BF64F2A
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa
Signing time:             Tue 05 Mar 2024 18:05:21 +0000
ROA not before:           Tue 05 Mar 2024 18:00:21 +0000
ROA not after:            Tue 04 Mar 2025 18:05:21 +0000
asID:                     269887
IP address blocks:        2803:a4e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 00:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:75:50:40:12:44:6c:7d:41:14:9e:ac:e1:09:c3:fc:4b:f6:4f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
        Validity
            Not Before: Mar  5 18:00:21 2024 GMT
            Not After : Mar  4 18:05:21 2025 GMT
        Subject: CN=7C8A81919272898E1B17605150CDD31FA8DD0CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fb:28:5e:3c:25:ed:3a:38:1a:42:e4:2f:4b:
                    ed:e2:0b:cd:87:4f:85:9e:51:e4:20:19:5d:6f:c5:
                    13:09:81:65:0f:0f:17:d8:f8:52:fd:9a:44:e4:68:
                    61:e9:d8:41:e5:a5:1a:d5:7e:87:92:39:f7:e4:bb:
                    59:9b:f4:68:75:8f:7d:1e:c8:57:02:b9:1c:d0:72:
                    a1:cc:15:70:6e:cd:85:ef:fd:30:d3:1b:b6:68:1e:
                    19:fc:56:3d:2e:76:fc:3c:4d:ae:5c:7e:69:0a:32:
                    07:e5:92:46:8b:67:b4:07:d6:1d:e6:d8:91:b9:ae:
                    95:42:02:c0:08:c1:6e:2b:9b:cc:cf:08:2a:f2:f3:
                    dd:ab:6e:0f:7b:e5:bd:9c:ab:db:4a:de:68:b2:b2:
                    79:d9:6b:e3:fd:fb:92:92:dd:17:11:10:8e:c5:ae:
                    0a:82:06:de:a6:31:6c:fb:02:06:93:c1:45:6b:08:
                    82:a4:b2:22:50:b6:72:f2:7c:b5:78:da:50:71:cb:
                    47:f4:f4:e4:46:78:9d:14:c0:61:ba:cf:b2:60:1c:
                    3a:1c:e8:33:00:17:20:32:db:46:a9:09:50:bf:d5:
                    01:b9:04:da:62:ac:5b:a3:09:08:b9:d7:f1:fd:45:
                    b3:8b:00:e6:d7:3d:8c:b0:46:23:25:79:1d:63:1e:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:81:91:92:72:89:8E:1B:17:60:51:50:CD:D3:1F:A8:DD:0C:E6
            X509v3 Authority Key Identifier:
                keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/323830333a613465303a3a2f33322d3438203d3e20323639383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:8b:ae:46:80:52:ee:f6:16:3c:95:3d:e9:91:48:45:64:
         fc:45:f3:c1:39:74:bf:84:c1:4b:b1:f0:d1:58:46:6e:85:8b:
         59:b8:2f:cc:37:87:c3:08:34:dc:a4:55:f0:51:a7:ad:90:ef:
         0f:6f:d1:aa:d9:6c:72:f3:1d:4b:ed:00:9d:c2:56:12:ab:57:
         a8:81:60:4c:de:ee:4d:6d:66:31:67:6d:69:6b:62:1a:6a:39:
         e4:f4:16:3c:79:9c:e9:40:8f:2f:4a:65:a4:ce:cd:64:a2:4e:
         d3:e1:81:6c:fc:df:e6:a4:30:ee:b0:91:54:2e:f2:d9:16:d4:
         74:f7:f9:b8:bf:c8:61:0a:78:be:d8:89:14:a1:06:2a:55:a7:
         df:29:13:bf:3e:1a:85:63:64:07:3e:de:87:1c:7c:f9:e8:b5:
         34:9e:94:24:4e:b7:37:37:6c:33:9e:84:6a:13:80:58:d5:b1:
         c8:f5:7a:3b:98:2a:2e:e9:ea:de:41:d1:c9:95:d2:d3:0e:06:
         8f:ff:4b:70:c0:c2:1e:b5:90:34:36:3f:32:6a:ec:39:cf:0b:
         9d:ec:8d:e3:43:b6:fb:68:3b:29:1a:00:55:0a:98:01:80:06:
         d0:90:43:89:cd:02:5e:5d:37:ed:eb:29:d3:ef:69:d1:78:29:
         29:53:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org