Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa
File:                     323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa (raw, json)
Hash identifier:          rYGRjgrr4gS7jbZPsdBozcT9Kjan8u/yoVrgGV5W2OE=
Subject key identifier:   D0:B1:DE:72:01:F8:5E:43:AB:6A:E8:77:8A:2D:C7:45:31:EC:D7:D9
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       19C3E4DF14A6FBCC74B1E2B76D0900342490A401
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:01 +0000
ROA not before:           Tue 17 Sep 2024 15:00:01 +0000
ROA not after:            Tue 16 Sep 2025 15:05:01 +0000
asID:                     269918
IP address blocks:        2803:dd80:e000::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c3:e4:df:14:a6:fb:cc:74:b1:e2:b7:6d:09:00:34:24:90:a4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:01 2024 GMT
            Not After : Sep 16 15:05:01 2025 GMT
        Subject: CN=D0B1DE7201F85E43AB6AE8778A2DC74531ECD7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:67:dd:c5:f2:60:30:87:c9:f4:db:a3:60:
                    b9:4c:c9:3e:c9:a7:a3:6f:60:17:7b:d2:f6:a5:f1:
                    01:cd:9d:da:17:e6:94:ed:4c:6f:ad:dd:b9:b3:c5:
                    36:44:17:5d:08:a0:ea:8a:e3:a7:86:0b:47:07:7b:
                    c9:6f:7f:40:1c:6e:eb:65:b6:3f:5d:06:61:80:94:
                    0e:bf:06:57:74:06:78:fd:d6:de:2d:ad:4c:71:21:
                    16:a2:6b:89:2b:f5:86:5e:da:6e:8f:f9:d1:f4:77:
                    37:5e:45:7f:4b:1d:bc:bd:0b:0b:7b:99:01:44:05:
                    a7:27:39:c1:7e:cc:7a:13:72:fd:72:23:80:2f:e9:
                    af:0a:0a:a6:73:3d:33:81:0e:0c:02:e0:6b:63:7f:
                    17:55:5c:7f:5e:54:25:89:57:05:41:5d:5a:43:1b:
                    ad:e4:d1:c3:a4:30:ea:b3:9b:4f:0d:3f:ad:ab:c0:
                    71:52:10:8c:dc:d6:8d:93:e7:2c:47:f5:3d:08:54:
                    4a:e2:cd:31:64:fb:8f:58:a4:46:48:83:bf:76:f9:
                    fb:65:32:02:bb:80:5a:ca:5e:4d:8d:e4:ea:af:4e:
                    8b:0f:c4:cb:f5:b8:d7:38:d2:b4:9d:32:8d:ad:66:
                    81:2f:98:72:0e:b0:33:0b:62:64:4a:15:3a:c4:6a:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B1:DE:72:01:F8:5E:43:AB:6A:E8:77:8A:2D:C7:45:31:EC:D7:D9
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f34372d3437203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:e000::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:b6:22:11:29:6b:55:b3:d8:2d:2c:2e:88:f8:ad:ba:1d:
         5f:e7:9a:25:cd:39:85:25:8c:7c:55:8c:29:0d:0a:9e:8b:e1:
         6d:2d:92:f1:f3:f6:15:3f:76:ee:4e:57:13:42:07:28:e1:10:
         a0:21:80:1f:fe:f2:7a:49:33:b8:89:86:83:56:69:e5:51:e0:
         7b:cb:ed:03:a5:c0:19:ba:dc:3f:88:68:d9:d6:67:4a:b4:8f:
         90:7f:2e:4a:a7:cd:47:36:ef:63:1f:ab:ef:9a:6e:22:a9:52:
         30:b6:73:64:c2:81:f2:e7:49:d7:b0:c2:e2:2c:21:71:76:07:
         3c:8f:cd:e7:e8:54:a2:5d:de:bb:f2:cc:35:9d:a1:d6:45:80:
         36:14:57:cb:2d:e7:9f:65:b6:aa:69:44:58:fe:50:d3:99:d7:
         56:1c:b7:95:8d:63:79:db:c0:61:81:cb:07:e5:7f:41:47:54:
         51:ca:12:77:db:c5:09:14:bf:5b:62:5b:7c:d9:29:88:21:5f:
         4f:48:d5:80:49:5b:ca:54:f4:c8:b7:0e:26:a4:f9:32:28:c5:
         0e:7b:6e:7b:5e:21:26:4e:0b:dc:a8:1b:46:0d:72:f0:d6:6a:
         42:d7:6f:6e:24:42:43:41:f8:ac:b8:fd:da:c4:f8:d7:61:13:
         2f:87:d7:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org