Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa
File:                     323830333a323765303a3a2f33322d3332203d3e20323730303939.roa (raw, json)
Hash identifier:          TrwJA6mx0fu8yjmn+9iTcqIU5I9ke2GtcGg4jKQL7yk=
Subject key identifier:   C6:69:B5:AA:D7:19:FC:C0:5A:D5:05:96:18:57:34:B2:16:D1:59:71
Certificate issuer:       /CN=ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9
Certificate serial:       3BD6476750A6E2ABBFAEF6CE1111244BC4A4D538
Authority key identifier: AD:D2:79:A2:ED:BB:13:0D:21:D1:E8:1F:BE:BC:CC:B6:62:12:C2:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa
Signing time:             Tue 05 Mar 2024 17:52:35 +0000
ROA not before:           Tue 05 Mar 2024 17:47:35 +0000
ROA not after:            Tue 04 Mar 2025 17:52:35 +0000
asID:                     270099
IP address blocks:        2803:27e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:47:67:50:a6:e2:ab:bf:ae:f6:ce:11:11:24:4b:c4:a4:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9
        Validity
            Not Before: Mar  5 17:47:35 2024 GMT
            Not After : Mar  4 17:52:35 2025 GMT
        Subject: CN=C669B5AAD719FCC05AD50596185734B216D15971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:dc:7d:b9:b5:13:7e:d5:bf:79:3b:bf:3a:
                    07:00:d8:18:db:3f:a2:ef:06:44:8b:d9:37:45:22:
                    73:79:2b:a6:65:00:d1:c5:1f:85:39:7f:e2:2f:b5:
                    37:a9:b6:0a:0c:3b:19:c3:b8:07:a0:41:3c:2d:81:
                    97:58:d6:9d:07:a7:a8:12:1c:04:92:0a:cb:03:d4:
                    78:1f:20:4b:1e:5d:95:24:1b:cf:46:66:f9:a0:0d:
                    77:f0:fe:0d:e4:08:83:4a:8b:88:4d:14:14:fb:6c:
                    cf:d2:2d:33:53:6b:3f:3c:07:8d:cd:8d:63:30:48:
                    f1:84:c4:24:0d:19:f0:6f:44:57:8d:84:17:75:2f:
                    b9:38:8e:b5:ed:c8:0b:48:14:63:bd:e2:f4:00:3c:
                    6f:e4:d0:83:b9:5c:0d:b1:5f:36:e9:0d:34:10:23:
                    a3:f1:89:7f:0b:9c:d9:ab:a5:9d:20:92:07:aa:43:
                    71:a3:41:05:03:cf:44:b3:ae:74:8b:ca:39:c7:47:
                    72:88:e8:a6:ee:a6:14:75:04:04:df:51:21:cc:39:
                    f1:66:4a:3d:bf:52:f2:23:09:13:3c:6b:63:9f:c3:
                    5c:ef:fe:f4:df:7e:be:dd:c8:87:dd:17:a5:e8:46:
                    02:15:ff:74:ef:9b:13:d4:8d:ba:b5:41:cf:fb:72:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:B5:AA:D7:19:FC:C0:5A:D5:05:96:18:57:34:B2:16:D1:59:71
            X509v3 Authority Key Identifier:
                keyid:AD:D2:79:A2:ED:BB:13:0D:21:D1:E8:1F:BE:BC:CC:B6:62:12:C2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:27e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:60:62:a8:66:91:46:7a:f6:fa:d7:c8:29:64:a1:81:85:
         32:cd:90:9f:cd:72:d4:11:af:b7:06:d4:80:56:15:3d:87:30:
         61:70:a9:37:de:8e:96:8d:34:43:ad:5b:e1:13:d8:99:f8:44:
         6e:29:f2:b2:19:a9:79:0d:4e:c3:1c:b2:fe:0b:f2:c7:d7:11:
         a6:c4:0e:59:07:c1:48:2f:1f:3f:71:ba:a7:05:ad:00:a8:e9:
         f6:a7:fb:ae:ba:5a:67:25:c0:a9:fc:06:4e:6f:9e:e7:6f:13:
         ee:33:4b:77:90:24:dc:e5:12:8d:60:9e:4b:0f:f2:97:e1:35:
         0a:95:0b:cc:8e:07:f6:a4:6c:54:59:d2:fc:a7:37:31:bb:dd:
         05:d6:34:37:3b:68:fe:ed:78:69:67:66:a2:48:07:c3:90:84:
         59:b4:a3:d7:b1:d0:f0:83:74:df:4c:85:e3:8e:33:d7:37:8d:
         db:84:66:7c:98:3e:37:e5:8f:c1:22:3c:22:c0:5c:98:ea:c5:
         95:6a:2e:94:67:73:da:07:6e:79:c6:92:f1:62:9c:3e:b2:47:
         42:84:1f:d5:8c:52:f2:e2:85:15:d7:32:81:05:b9:3c:cb:d5:
         e1:bf:f7:95:ae:56:d9:c0:95:14:33:9d:62:1f:56:b6:dc:f8:
         5d:16:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:46 2024 by rpki-client on console-fra.rpki-client.org