Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/323830333a626138303a3a2f33322d3634203d3e20323632393332.roa
File:                     323830333a626138303a3a2f33322d3634203d3e20323632393332.roa (raw, json)
Hash identifier:          BYOtVkmTECrZwernSTDrgDW1o9uCHiKACMNuOlixmHM=
Subject key identifier:   9D:40:09:56:3B:E9:56:E4:7A:55:73:B1:03:9F:34:12:3C:D0:81:3C
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       74BFB78075E955260A46125C7F423B8828C76FC5
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/323830333a626138303a3a2f33322d3634203d3e20323632393332.roa
Signing time:             Tue 05 Mar 2024 18:15:38 +0000
ROA not before:           Tue 05 Mar 2024 18:10:38 +0000
ROA not after:            Tue 04 Mar 2025 18:15:38 +0000
asID:                     262932
IP address blocks:        2803:ba80::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bf:b7:80:75:e9:55:26:0a:46:12:5c:7f:42:3b:88:28:c7:6f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Mar  5 18:10:38 2024 GMT
            Not After : Mar  4 18:15:38 2025 GMT
        Subject: CN=9D4009563BE956E47A5573B1039F34123CD0813C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:ec:19:8e:0f:3d:2d:af:76:f5:27:7b:cb:
                    dd:0f:34:2f:0b:89:3d:b9:95:22:04:e5:31:ab:61:
                    d7:03:c5:5a:b7:e7:3d:00:d5:25:38:6a:ba:8b:91:
                    81:19:a1:b2:ba:f1:60:70:dc:a3:ed:7c:1c:fc:37:
                    ed:ff:3c:0d:bc:45:35:22:26:a1:97:ac:c0:02:1d:
                    1e:ab:02:e1:57:94:52:d7:1e:c2:b8:8c:77:34:c0:
                    ae:7e:84:ab:ba:7a:3d:8c:82:06:da:5b:73:e0:50:
                    8c:27:b6:ed:c9:ff:67:b0:1a:24:4f:d9:cd:e1:e4:
                    d5:a9:9d:40:41:42:ca:8b:df:4d:f5:5c:5d:59:bb:
                    5d:4e:1e:c9:40:0f:c4:ec:1c:54:51:c3:ff:1e:67:
                    13:ea:f8:52:99:e5:ee:8c:fd:df:58:c1:ab:67:2c:
                    13:3a:d3:8e:f7:ff:1e:12:9b:d3:d8:6a:59:40:b7:
                    14:d3:a3:a0:a8:4b:75:17:1c:ca:5f:37:56:2e:be:
                    d8:57:77:a6:f1:0b:3b:e1:18:52:3c:cb:21:cc:27:
                    1e:ba:78:91:81:c4:89:5f:70:98:e1:85:4f:68:b7:
                    cb:86:28:c4:d5:d1:f3:f1:cb:49:87:39:d3:b4:d0:
                    dc:e7:da:3a:2e:d2:00:f6:47:5f:97:7e:30:7d:e9:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:09:56:3B:E9:56:E4:7A:55:73:B1:03:9F:34:12:3C:D0:81:3C
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/323830333a626138303a3a2f33322d3634203d3e20323632393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:f2:92:a0:02:bd:c9:e2:f3:06:b3:81:d3:ae:f2:64:f4:
         43:96:d5:b9:4c:dd:4c:ed:4a:ba:cb:7d:09:0d:41:9a:f9:74:
         60:18:ac:2c:51:1d:f8:d3:db:42:aa:65:2f:07:d7:86:d2:5d:
         88:4d:a1:7e:61:e4:78:5a:8c:0e:6d:6c:af:df:b6:d0:f9:2e:
         3e:92:24:9e:2f:9d:c2:7f:55:33:f4:9b:6a:42:5d:b1:1f:29:
         f6:7b:4e:2b:c9:ec:59:cb:a1:dc:0e:c2:e6:1f:db:91:68:77:
         9f:22:44:99:c3:41:e9:03:b7:58:9a:da:aa:87:72:4f:7b:48:
         55:a6:29:87:90:26:e1:b9:71:4b:02:8e:5c:6b:e4:d1:39:95:
         86:77:26:20:42:ff:0f:16:e6:ed:6f:70:77:eb:6e:ae:70:ce:
         d6:90:ae:12:d1:a8:c4:38:f5:1b:0c:d8:50:84:58:63:82:67:
         03:6c:c9:e6:b7:46:3c:09:ad:69:69:dd:e0:0d:de:a4:80:89:
         2d:ed:80:8e:e0:20:f5:ae:d0:2d:24:ff:1f:71:cf:1b:e5:6d:
         d9:12:bf:f0:ea:6d:0c:22:74:6c:a4:6c:3b:8a:95:4f:16:25:
         de:92:2e:ec:3f:f6:83:fc:9e:fb:cf:f6:e9:5e:42:81:d5:4a:
         f3:30:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org