Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/323830333a323632303a3a2f33322d3332203d3e20323639373435.roa
File:                     323830333a323632303a3a2f33322d3332203d3e20323639373435.roa (raw, json)
Hash identifier:          uH5OrRJXzUfPmBm3IgfumnsIReFV4v/Foz+6PCoCjFE=
Subject key identifier:   C3:15:B9:54:31:4E:64:24:A5:AD:0B:F7:6E:6F:C1:82:14:F1:A3:DF
Certificate issuer:       /CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
Certificate serial:       2E151304D5D6358E815584E0224C006437D9EB1B
Authority key identifier: 9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/323830333a323632303a3a2f33322d3332203d3e20323639373435.roa
Signing time:             Tue 05 Mar 2024 17:56:27 +0000
ROA not before:           Tue 05 Mar 2024 17:51:27 +0000
ROA not after:            Tue 04 Mar 2025 17:56:27 +0000
asID:                     269745
IP address blocks:        2803:2620::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:15:13:04:d5:d6:35:8e:81:55:84:e0:22:4c:00:64:37:d9:eb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
        Validity
            Not Before: Mar  5 17:51:27 2024 GMT
            Not After : Mar  4 17:56:27 2025 GMT
        Subject: CN=C315B954314E6424A5AD0BF76E6FC18214F1A3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:66:09:bc:c2:95:40:59:6a:8d:a8:a4:7f:
                    c0:82:28:c8:98:b8:b7:f7:ba:4e:d0:3b:f2:73:ce:
                    49:5b:f6:ed:8b:44:50:e1:d7:55:09:17:2c:ab:94:
                    77:90:84:46:f3:0e:c3:ad:1b:40:70:cf:41:f6:64:
                    05:9d:f6:28:89:38:08:5e:62:71:a3:8d:16:50:b1:
                    19:1e:f7:7f:15:e5:bf:8c:9d:8e:36:b9:af:e4:b4:
                    b0:d4:da:12:c9:0e:ac:a5:6e:fa:f3:6f:15:4f:57:
                    8a:78:d3:50:ec:c5:fa:a4:df:43:29:e5:e9:62:9e:
                    a7:a3:22:b8:00:a1:a2:99:bb:af:16:ed:b2:40:e8:
                    6d:1d:6c:8d:21:3c:2b:32:a9:e1:de:85:a1:cc:5e:
                    11:f1:95:12:44:19:b0:03:34:e0:98:4c:52:55:87:
                    6f:bd:02:30:1d:4f:8c:73:24:ce:c0:73:8e:6c:b8:
                    b3:50:38:ce:48:aa:0d:64:54:89:9b:7e:25:c1:dd:
                    c9:bd:50:92:f7:bb:61:a8:27:86:1d:c7:9e:c2:55:
                    7b:3c:dc:b4:99:be:37:6e:0d:39:ec:56:8c:31:32:
                    b5:17:d5:da:71:2f:df:7f:a8:93:c1:1b:90:64:b9:
                    5b:71:db:4f:3d:1a:c6:55:96:8a:b8:6f:68:4b:a5:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:B9:54:31:4E:64:24:A5:AD:0B:F7:6E:6F:C1:82:14:F1:A3:DF
            X509v3 Authority Key Identifier:
                keyid:9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/323830333a323632303a3a2f33322d3332203d3e20323639373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:b1:7c:68:5e:dc:a2:cc:f8:f5:41:5f:49:6b:de:1b:8d:
         83:4b:b5:32:05:d8:69:4f:79:d2:37:fc:43:a0:63:9c:30:64:
         a2:b2:4e:e4:20:35:de:5f:d0:8d:12:b7:34:79:e9:ae:8a:ac:
         a1:80:f3:58:bd:fb:7d:ff:57:47:32:d0:5d:3a:05:56:dc:13:
         10:92:df:10:46:38:bf:b7:3c:14:d5:3f:48:9d:0c:ae:18:4a:
         74:fe:e0:be:bc:ba:cd:a0:07:76:83:47:ab:fd:5c:39:2b:af:
         70:e8:cc:b5:34:1c:dd:e5:ac:19:94:8a:7f:91:46:d4:b5:ec:
         b3:be:ec:42:92:82:c7:4f:84:cc:e7:cd:75:8c:26:77:5b:40:
         b5:0c:4d:ca:98:e6:50:ff:7d:b9:ad:ed:ae:dc:36:90:4a:96:
         e6:f8:11:ff:87:67:04:85:8a:38:7a:e6:2a:7a:7f:d7:9d:9e:
         19:9a:f3:f3:59:e0:d7:c1:bb:0c:f7:63:e1:6a:4a:aa:0e:f7:
         66:f1:17:bc:ee:32:34:15:e1:4a:7b:9d:a8:d7:05:85:f5:ec:
         95:38:6e:61:08:fc:2c:e2:a7:a2:84:c2:09:80:78:a2:cf:be:
         fa:49:88:b2:6d:39:52:d7:0b:27:26:f3:c6:74:c0:78:30:78:
         ae:f6:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org