Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/323830333a643861303a3a2f33322d3438203d3e20323636383132.roa
File:                     323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (raw, json)
Hash identifier:          lY1fT6QkZmYxNXre4stC5phZ+tO9O74AzD3ll5q4guQ=
Subject key identifier:   A9:CE:AB:16:47:CD:C6:CB:E6:96:08:9D:E1:41:0E:BB:90:C3:8C:98
Certificate issuer:       /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial:       5204702F5DC32CB438C27B7A30CB4DE651CF227E
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/323830333a643861303a3a2f33322d3438203d3e20323636383132.roa
Signing time:             Tue 05 Mar 2024 18:14:00 +0000
ROA not before:           Tue 05 Mar 2024 18:09:00 +0000
ROA not after:            Tue 04 Mar 2025 18:14:00 +0000
asID:                     266812
IP address blocks:        2803:d8a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:04:70:2f:5d:c3:2c:b4:38:c2:7b:7a:30:cb:4d:e6:51:cf:22:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
        Validity
            Not Before: Mar  5 18:09:00 2024 GMT
            Not After : Mar  4 18:14:00 2025 GMT
        Subject: CN=A9CEAB1647CDC6CBE696089DE1410EBB90C38C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:81:bb:96:5b:03:c3:5c:12:f3:95:ee:9e:
                    dd:66:93:bd:ca:b9:db:a5:39:09:1e:23:b3:ce:10:
                    4c:93:02:9c:e4:e8:4c:62:5b:6e:af:75:56:84:8d:
                    e2:24:16:1c:20:5f:56:a2:f0:30:40:17:d4:36:ed:
                    bb:c4:30:3c:0e:e1:14:29:53:23:b6:0f:92:af:42:
                    c6:6c:73:b6:c7:9b:90:5f:02:47:9d:db:56:5c:9d:
                    64:bb:13:b3:43:55:3e:7a:f2:6f:f0:20:45:5f:3c:
                    85:8c:a4:2a:5a:6c:13:1a:05:e6:7b:b5:e2:c5:fd:
                    1e:5f:ca:80:ed:3b:24:4f:96:5a:4c:c9:81:74:b7:
                    c2:7f:57:ed:d1:ca:fe:6b:db:30:4a:3b:d7:25:2f:
                    72:c5:cd:c8:a3:cd:4e:5e:a9:14:87:a0:4a:e4:c5:
                    fe:a2:6e:20:1c:d0:a9:41:fd:a2:70:cb:96:70:bb:
                    f7:96:ba:38:f1:01:12:63:98:be:dd:98:2e:4d:52:
                    c5:ec:10:b9:fd:19:f1:25:4e:81:dc:8a:24:93:25:
                    6f:d2:b9:e0:8e:b1:9d:97:ed:8d:9f:7c:46:fa:43:
                    ae:d4:da:2d:f1:f4:65:20:52:60:0c:a2:e7:1c:ee:
                    fc:4b:a4:de:cc:66:7f:48:9f:78:dd:95:39:a9:54:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:AB:16:47:CD:C6:CB:E6:96:08:9D:E1:41:0E:BB:90:C3:8C:98
            X509v3 Authority Key Identifier:
                keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/323830333a643861303a3a2f33322d3438203d3e20323636383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:6a:e3:74:86:97:0b:05:6d:08:53:13:33:e4:13:e5:ed:
         cf:41:12:d8:b1:9a:36:c7:dc:c2:1e:bf:c6:ff:b5:e6:73:f2:
         df:a8:eb:6e:ea:c4:bf:f8:5d:53:22:f8:76:a5:7a:e4:cf:ab:
         f7:67:97:a9:41:42:fe:a8:9b:19:02:0e:9a:a9:97:e5:17:2e:
         ec:dc:83:05:43:ec:29:74:c7:67:34:fc:be:12:e7:62:af:6d:
         b0:57:77:22:23:3f:e2:9b:6e:4b:fb:ca:d3:0b:49:84:e5:7f:
         75:a1:87:c1:27:fa:2f:da:fd:56:db:8b:f5:fc:70:17:fd:f3:
         37:67:ea:43:70:48:8d:f4:0f:9d:63:74:dd:2a:f6:6a:8e:4c:
         ea:f0:74:69:a1:23:4e:11:35:04:17:42:1a:ad:82:61:0d:25:
         2d:30:36:ad:b4:99:0c:74:35:78:73:ca:c6:2e:7f:e7:b5:fc:
         1b:f6:6d:45:a8:0c:d1:6b:48:fb:0a:1b:54:80:f5:f1:a9:61:
         0b:87:ce:0a:09:c7:91:4e:ce:b6:d9:d9:27:bc:0d:39:e7:b3:
         40:f3:2a:71:41:f6:68:88:f7:f0:6e:c5:4b:b2:6c:60:5a:e0:
         64:84:cd:ee:5e:25:77:fb:61:ca:9b:28:96:ac:13:18:cf:16:
         6d:8b:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:28 2024 by rpki-client on console-ams.rpki-client.org