Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/323830333a376132303a3a2f33322d3332203d3e20323635383538.roa
File:                     323830333a376132303a3a2f33322d3332203d3e20323635383538.roa (raw, json)
Hash identifier:          3e6+9yoXOX451qywJZgmA0quKh5HHBxDER6XisZxf8Y=
Subject key identifier:   29:3F:E3:57:BB:D5:5A:A1:F8:83:09:FB:00:EC:FE:C5:CE:DE:3D:F0
Certificate issuer:       /CN=9ABC96F3F41D57A6A6056243ECD365FDC7178290
Certificate serial:       59964521BBF99D0A0BCF1A3C7A8CA7559A4D5E0E
Authority key identifier: 9A:BC:96:F3:F4:1D:57:A6:A6:05:62:43:EC:D3:65:FD:C7:17:82:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/323830333a376132303a3a2f33322d3332203d3e20323635383538.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     265858
IP address blocks:        2803:7a20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 19:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:45:21:bb:f9:9d:0a:0b:cf:1a:3c:7a:8c:a7:55:9a:4d:5e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ABC96F3F41D57A6A6056243ECD365FDC7178290
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=293FE357BBD55AA1F88309FB00ECFEC5CEDE3DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:1e:c5:ce:a8:fb:32:ea:80:9f:ec:3d:7f:
                    cc:a8:94:1c:e5:f3:3d:36:54:87:8c:25:26:56:3d:
                    6b:66:40:0b:54:cd:26:85:77:63:ff:df:c0:97:ce:
                    0f:d2:6a:5b:95:5a:6e:86:b1:6d:56:5e:97:51:0e:
                    a3:c7:49:36:e1:72:cf:0c:0b:e9:6c:29:eb:b4:10:
                    29:a6:6f:02:4b:b6:4e:ab:61:41:1a:96:8b:a8:18:
                    57:ba:67:38:bb:e4:1a:7f:f9:e9:5f:41:fc:25:41:
                    40:8d:68:5d:1c:f0:77:f7:93:b4:3b:59:61:d4:fb:
                    33:4e:8d:01:a7:e7:73:0f:bb:65:4b:c6:31:2a:10:
                    92:d8:49:61:b8:45:85:69:c8:c8:f6:3b:92:b3:da:
                    85:d9:8d:f1:79:24:05:84:2c:69:d0:d0:81:65:5b:
                    48:18:2f:63:9f:1f:9b:c7:01:65:90:1b:88:e1:2e:
                    b9:d0:3d:4d:b7:50:9a:e9:d1:80:a7:a0:8e:1f:a0:
                    94:7f:11:50:55:38:a9:d3:b8:aa:58:68:af:25:2d:
                    db:97:72:6f:c8:56:05:c1:8c:b8:b5:89:d3:07:c0:
                    d2:a0:5a:cb:a7:a8:93:04:66:ac:29:81:9b:cb:48:
                    e6:f8:db:06:fc:06:41:5c:22:f2:d6:5a:15:43:0f:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:E3:57:BB:D5:5A:A1:F8:83:09:FB:00:EC:FE:C5:CE:DE:3D:F0
            X509v3 Authority Key Identifier:
                keyid:9A:BC:96:F3:F4:1D:57:A6:A6:05:62:43:EC:D3:65:FD:C7:17:82:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/323830333a376132303a3a2f33322d3332203d3e20323635383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:24:ad:2f:d5:da:43:00:6c:eb:dd:63:15:a0:99:0e:ec:
         75:db:55:db:28:42:a4:a4:ff:ba:f3:bf:77:c8:c5:e4:ab:89:
         5a:0f:1a:30:96:dd:98:d8:ec:29:08:05:c2:e1:f0:e5:99:b7:
         3c:0b:74:72:e5:ad:fe:62:e4:5e:20:23:b8:98:bf:ba:6e:ec:
         d0:63:3b:cf:d8:90:33:13:30:19:dc:d2:84:e9:bd:da:e9:c7:
         ae:d9:b0:eb:06:0d:a1:ad:2b:56:0c:32:27:3d:c5:03:10:60:
         95:31:4f:d2:ac:65:39:44:74:fe:bc:91:25:9c:ae:e1:b8:8a:
         50:12:3d:01:8a:9f:ae:07:11:76:c2:3b:1a:76:6e:f1:eb:71:
         dc:72:d9:2f:b6:e4:4d:37:32:bb:ca:94:d6:18:96:99:09:b8:
         94:ee:3c:55:9d:f6:15:9f:da:e4:3c:57:72:57:c4:78:71:fb:
         10:09:6d:83:ed:bc:70:9a:24:61:d4:6c:25:18:f9:7d:56:6a:
         f2:4e:c5:8d:a4:8c:ab:30:b3:44:45:25:e8:36:ce:a3:da:43:
         9a:95:73:09:43:ff:58:60:bc:f1:b2:b9:ca:59:93:f6:0c:59:
         b6:b1:69:74:e2:65:0a:23:cc:16:2e:20:21:ec:03:1f:6f:bd:
         7d:33:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 20:25:51 2024 by rpki-client on console-fra.rpki-client.org