Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa
File:                     323830333a643038303a3a2f33322d3634203d3e203237393630.roa (raw, json)
Hash identifier:          kMFPqR49W5pkj6CFwC4/cMM0Dg7OqM/F2Kwo4BCQGXg=
Subject key identifier:   48:6E:A4:48:45:08:03:7B:97:C0:8B:10:F8:DF:A9:0F:08:8A:E9:29
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       7547ECD5319C18A8B453DA2AACF486C3468D85E2
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa
Signing time:             Tue 05 Mar 2024 18:07:47 +0000
ROA not before:           Tue 05 Mar 2024 18:02:47 +0000
ROA not after:            Tue 04 Mar 2025 18:07:47 +0000
asID:                     27960
IP address blocks:        2803:d080::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:47:ec:d5:31:9c:18:a8:b4:53:da:2a:ac:f4:86:c3:46:8d:85:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Mar  5 18:02:47 2024 GMT
            Not After : Mar  4 18:07:47 2025 GMT
        Subject: CN=486EA4484508037B97C08B10F8DFA90F088AE929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:f0:fa:65:06:3d:63:dd:68:bb:34:fc:56:
                    03:20:e1:41:64:8f:99:32:4f:fb:cb:d3:6c:83:a4:
                    92:d5:4d:de:97:50:cb:41:d1:bc:3a:b1:6f:bd:eb:
                    cb:70:75:ea:e7:0a:bf:27:0a:e4:39:36:a5:37:85:
                    cf:34:a5:11:b1:43:da:0a:1b:fa:c4:cf:c0:b7:35:
                    9b:d9:fc:12:01:a4:c2:5f:97:34:5b:3e:c3:72:2d:
                    48:ce:08:a4:46:c8:a6:38:1c:a2:e5:3b:09:ae:55:
                    a5:ee:96:70:e4:75:99:c7:c3:41:00:22:e1:2b:bf:
                    eb:6f:fe:05:a4:bc:8a:c9:71:e3:80:7c:7b:53:c1:
                    b9:17:1b:82:d9:ee:30:d8:a4:d2:a9:0e:09:35:76:
                    3a:1a:ce:9f:6a:e7:e8:d7:42:77:21:ce:56:ac:11:
                    da:68:50:e6:e6:05:7c:68:35:d6:85:a7:e1:d8:41:
                    26:1d:66:62:39:25:40:5c:0e:b8:ab:c3:9f:52:16:
                    27:39:e0:2a:8f:a5:2b:08:77:e0:42:b1:d7:fe:76:
                    6b:4a:0d:b9:b6:d8:99:02:a1:58:02:4c:24:dd:7b:
                    ab:3e:8e:9c:e6:50:86:e3:a7:c6:7d:c5:18:a2:f5:
                    8a:d0:ce:5f:09:1e:49:9d:44:54:45:cf:8b:59:27:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6E:A4:48:45:08:03:7B:97:C0:8B:10:F8:DF:A9:0F:08:8A:E9:29
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/323830333a643038303a3a2f33322d3634203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:ab:f0:00:6b:7a:d8:c0:3c:bb:e6:26:8f:55:45:50:fc:53:
         cb:14:32:69:44:93:6f:20:db:95:05:32:92:ea:10:69:b3:4b:
         c4:70:4f:2f:0e:25:ea:b2:26:04:3f:84:ef:2f:80:d2:be:66:
         c2:17:46:ed:bc:84:8e:2e:e2:66:b6:b8:10:97:83:97:30:85:
         ef:6d:20:3d:1b:c4:6e:6e:b6:48:9b:6c:38:5c:4c:30:db:5e:
         60:67:d0:b7:ef:b9:d7:40:93:9f:1f:79:84:af:26:fa:af:70:
         0a:25:18:b3:18:4b:e5:34:83:d3:3b:7a:38:58:82:2e:28:be:
         d7:1e:bf:28:61:65:60:06:d9:84:d3:32:c0:60:94:ff:04:18:
         72:96:85:5d:f5:55:26:23:7d:8a:4d:fc:da:6f:46:f0:29:ff:
         6b:41:25:27:1b:79:24:b9:6c:d6:1d:de:76:4e:e8:32:e6:89:
         d2:25:bd:da:b6:88:9a:3f:e6:c5:56:e6:bc:f2:88:f0:1e:e1:
         94:66:9b:33:43:73:95:23:26:55:93:0c:94:62:3a:fd:e7:c6:
         b2:7a:ab:cd:32:07:6a:e5:20:3a:00:7a:2b:05:84:98:ff:a0:
         67:9b:4b:66:0f:43:c1:7a:4f:b4:44:d7:8c:83:b7:f0:3b:e2:
         0b:ca:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org