Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa
File:                     323830333a363034303a3a2f33322d3634203d3e203238313030.roa (raw, json)
Hash identifier:          DUVr0Gg+KYwqW3Pv2tygNYFkN3OnhCF1JGSyXcBiEBY=
Subject key identifier:   9A:27:3F:21:1F:DA:25:42:31:02:AD:ED:C0:E3:52:5C:9A:0D:17:DD
Certificate issuer:       /CN=9BB48437780CEE6FE64466284396591E2DFF47AF
Certificate serial:       58152803311F29DBAF010A6EB69E187E91FCB3B7
Authority key identifier: 9B:B4:84:37:78:0C:EE:6F:E6:44:66:28:43:96:59:1E:2D:FF:47:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 18:19:09 +0000
ROA not before:           Tue 05 Mar 2024 18:14:09 +0000
ROA not after:            Tue 04 Mar 2025 18:19:09 +0000
asID:                     28100
IP address blocks:        2803:6040::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:28:03:31:1f:29:db:af:01:0a:6e:b6:9e:18:7e:91:fc:b3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BB48437780CEE6FE64466284396591E2DFF47AF
        Validity
            Not Before: Mar  5 18:14:09 2024 GMT
            Not After : Mar  4 18:19:09 2025 GMT
        Subject: CN=9A273F211FDA25423102ADEDC0E3525C9A0D17DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ac:27:04:62:a7:f5:33:e7:19:34:f6:19:
                    c3:85:05:30:25:e3:6a:ee:1a:90:ed:3b:05:24:0a:
                    40:29:aa:74:74:36:ec:82:96:88:be:bb:1f:cb:a0:
                    5b:3f:87:64:1d:17:bd:9c:2f:e7:3e:b7:f9:ac:39:
                    eb:9d:e0:4d:1c:1e:42:0e:5a:e9:7a:87:7b:52:4d:
                    40:fd:d2:f6:b5:04:f1:a0:2d:23:34:89:5b:35:ef:
                    d4:bd:3d:82:2d:fc:74:3e:2c:63:1b:1c:96:c2:b4:
                    27:96:a7:19:08:61:f0:cf:40:e5:1e:b7:d4:ee:1b:
                    d9:90:d8:55:3d:f9:4c:80:94:94:47:cb:cf:49:5f:
                    a0:36:d5:c4:e3:b9:e8:ec:1e:4c:4a:48:d8:3c:51:
                    80:b4:c9:ed:8c:b9:85:b2:f3:19:51:ae:da:7d:64:
                    08:92:e8:37:c3:16:dc:5a:d1:ab:f5:25:ab:10:29:
                    5a:9e:87:ce:fe:de:64:9e:b8:70:ab:09:03:fa:c9:
                    99:50:8b:0c:62:b7:ff:32:b3:c0:30:45:42:7f:ff:
                    b5:12:bd:ea:d6:9d:cd:55:a4:c0:20:ea:9f:b4:9f:
                    6a:24:cb:64:f1:f6:0b:c5:c0:d5:49:7a:c5:c1:01:
                    f5:6c:79:f1:85:e8:a9:77:47:f7:8e:12:51:1f:1c:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:3F:21:1F:DA:25:42:31:02:AD:ED:C0:E3:52:5C:9A:0D:17:DD
            X509v3 Authority Key Identifier:
                keyid:9B:B4:84:37:78:0C:EE:6F:E6:44:66:28:43:96:59:1E:2D:FF:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/9BB48437780CEE6FE64466284396591E2DFF47AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BB48437780CEE6FE64466284396591E2DFF47AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19108E5B0DEEEC1152C05A46FBF63B2C09B9BB6DF58E069E3E07BB4A30DF9004/0/323830333a363034303a3a2f33322d3634203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:55:5a:b5:c6:52:52:14:00:b9:1f:64:ab:ca:de:89:c2:57:
         c0:42:bd:68:3e:8e:14:c8:75:c1:cd:df:e8:7c:9d:42:db:6f:
         dc:41:66:54:6e:72:66:54:8e:3b:01:dd:af:ea:03:27:e4:4f:
         97:4b:d2:ce:62:4d:ea:f6:18:bb:0d:e8:f8:14:9e:55:1f:f0:
         12:93:e9:94:ca:cd:77:27:e1:51:4a:14:ad:31:0d:d5:f7:5b:
         0a:0a:2b:f8:0c:bc:ab:12:8e:0d:c1:15:b1:34:fe:3e:ec:c8:
         7e:58:43:e9:56:a7:24:1e:75:59:c2:b3:8a:88:b0:8c:79:6e:
         ed:c3:66:bf:9c:7c:82:1d:d4:45:7b:3c:63:53:8c:e3:b1:31:
         b8:05:68:49:6e:c9:63:c9:90:4b:b0:5a:f0:b9:ff:3c:7e:a2:
         da:23:8a:df:4b:11:92:64:52:37:9e:c7:bd:5e:f7:a2:26:94:
         59:25:8e:fd:1c:23:19:82:a9:f4:e6:8f:c8:11:34:93:dd:62:
         b8:5d:fa:13:b8:62:f8:34:2e:ad:3e:bd:03:f6:90:b4:04:a7:
         7a:2a:e5:ed:93:d8:5f:73:79:0e:a3:c7:8e:77:78:82:30:5e:
         da:44:5b:c4:a7:ca:91:77:d1:96:e8:a0:f7:93:b5:56:06:c4:
         26:d4:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:42:47 2024 by rpki-client on console-ams.rpki-client.org