Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
File:                     323830333a316239303a3a2f33322d3438203d3e20323733303434.roa (raw, json)
Hash identifier:          qAcpWfGrx/NzgD7xR5Fy7ILkdtPolLV6eKoaan/Gvx4=
Subject key identifier:   94:9F:90:65:CF:CE:8C:FC:2A:DE:9E:AA:01:D3:7D:26:E6:5C:28:12
Certificate issuer:       /CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
Certificate serial:       767C579202828188F92CDF7ADACF0829624ECCFD
Authority key identifier: 28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa
Signing time:             Tue 05 Mar 2024 18:17:24 +0000
ROA not before:           Tue 05 Mar 2024 18:12:24 +0000
ROA not after:            Tue 04 Mar 2025 18:17:24 +0000
asID:                     273044
IP address blocks:        2803:1b90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7c:57:92:02:82:81:88:f9:2c:df:7a:da:cf:08:29:62:4e:cc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280C606B42E3E29D27F6E5ADC0ED5E13093C25E8
        Validity
            Not Before: Mar  5 18:12:24 2024 GMT
            Not After : Mar  4 18:17:24 2025 GMT
        Subject: CN=949F9065CFCE8CFC2ADE9EAA01D37D26E65C2812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:f4:3b:f3:c4:c6:69:5a:f8:e2:e2:54:5f:
                    5e:22:b6:25:37:57:ad:3e:88:66:4e:74:b9:bc:4e:
                    d5:09:18:a6:b9:b8:26:8a:85:02:df:8f:f3:d6:b1:
                    64:ea:39:06:4a:d0:aa:e2:35:ba:a6:4a:b0:e1:40:
                    1a:d1:d8:9e:6e:d8:23:10:6d:c2:b7:8b:aa:a6:b6:
                    5f:f6:db:b3:2d:a7:38:bd:df:4c:f3:22:d3:ac:75:
                    35:fb:9f:22:a9:35:47:ad:6a:a8:b2:0a:6c:1b:ac:
                    46:ef:8c:b4:22:30:58:4c:8f:30:0e:ef:00:28:27:
                    cf:e3:af:8f:25:6a:48:3e:6d:a5:67:ff:e0:ad:73:
                    ab:32:ed:39:13:85:54:d2:16:fc:7e:ed:f2:41:e8:
                    73:1b:f8:44:5f:64:03:f8:89:b0:1c:e3:c2:d9:5a:
                    7e:07:c5:5c:47:4f:e9:89:42:83:9c:b2:48:2c:92:
                    b1:d7:88:a6:05:bc:81:17:68:a4:27:c5:85:7b:6b:
                    3d:51:c6:c6:e1:1f:49:ca:43:c8:79:ae:c1:40:56:
                    5f:87:b8:1f:61:29:11:19:e4:b6:fc:7e:fb:fe:90:
                    97:dd:f2:0d:f2:7c:ae:da:ac:15:35:d1:1e:ed:81:
                    fc:02:2e:2a:c0:e0:b7:46:da:d4:40:d6:93:e8:1b:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:90:65:CF:CE:8C:FC:2A:DE:9E:AA:01:D3:7D:26:E6:5C:28:12
            X509v3 Authority Key Identifier:
                keyid:28:0C:60:6B:42:E3:E2:9D:27:F6:E5:AD:C0:ED:5E:13:09:3C:25:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/280C606B42E3E29D27F6E5ADC0ED5E13093C25E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/221BC9A45A30D015AB28757C460799FAF7F6A39E81FA566F6704E576144ED50E/0/323830333a316239303a3a2f33322d3438203d3e20323733303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7f:62:73:d8:ac:52:a0:ce:c4:2f:97:02:2d:d5:ab:6a:1f:
         c5:0d:3e:5f:ae:a2:83:1a:54:66:80:15:7b:14:d2:85:e4:46:
         e7:ef:eb:7f:dc:b1:58:40:0f:47:6d:47:f7:f9:e8:17:eb:5d:
         4f:a6:16:d8:69:7d:75:1d:91:e3:6b:7c:1a:2a:b2:bf:b7:e0:
         70:d6:90:47:10:6a:d3:d5:a4:c4:03:78:27:a6:30:f6:2c:ba:
         7d:86:b3:89:32:c4:af:9f:a3:10:0b:5c:5e:3d:4e:b4:d9:9c:
         0e:1d:49:6a:cd:eb:fa:07:0e:b7:59:12:6e:2b:8c:7e:2a:0a:
         43:f4:a4:9d:23:13:a7:d3:5a:ec:d3:a2:c8:12:b7:7d:7c:a8:
         17:75:ac:57:d5:22:a4:07:4f:e0:61:db:c2:30:76:20:f2:d4:
         59:46:61:8b:2d:eb:e4:2d:07:c8:ca:2f:e7:4e:2f:e3:18:d9:
         b6:dd:36:0b:9f:b9:1d:20:5b:69:69:b0:47:95:d3:95:e4:ac:
         9c:0c:e5:43:ee:be:61:c3:19:0d:fb:79:9c:35:d4:fa:ab:63:
         5d:21:65:4d:5c:3d:ae:e6:e8:f3:89:b8:08:8a:5b:d2:a2:6a:
         37:be:f7:d9:5a:8a:cc:63:92:c0:10:e9:bf:ee:4d:8a:c2:da:
         59:17:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:28 2024 by rpki-client on console-ams.rpki-client.org