Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa
File:                     323830333a396232303a3a2f33322d3634203d3e203131383330.roa (raw, json)
Hash identifier:          HJiGHqErCrOMe6j44a2sXTN/q+7mC/v1/Z9NmID7f+w=
Subject key identifier:   61:20:AD:D5:AA:E3:9D:57:C7:20:50:AA:63:54:9F:19:49:61:C7:83
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       094551A2FC7AF9C7C9829F2D087A8E5A15586A38
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:02:41 +0000
ROA not before:           Tue 05 Mar 2024 17:57:41 +0000
ROA not after:            Tue 04 Mar 2025 18:02:41 +0000
asID:                     11830
IP address blocks:        2803:9b20::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:51:a2:fc:7a:f9:c7:c9:82:9f:2d:08:7a:8e:5a:15:58:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:41 2024 GMT
            Not After : Mar  4 18:02:41 2025 GMT
        Subject: CN=6120ADD5AAE39D57C72050AA63549F194961C783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dc:c0:86:e4:49:fa:1b:6d:78:30:7b:97:fd:
                    bc:30:4c:66:1b:45:e2:09:2c:1f:e2:63:96:bb:02:
                    27:f9:52:0e:3f:4f:8f:9a:93:11:86:a5:fa:e3:33:
                    0c:96:9e:c2:fb:b5:53:3b:74:aa:33:e4:d7:c5:e6:
                    7b:79:05:b9:cc:ce:7d:ad:5c:56:7b:86:fd:0f:7f:
                    a2:41:71:97:68:d7:f6:a3:f6:56:6a:7c:8e:41:98:
                    5a:be:b5:70:25:e6:c1:c3:b1:06:64:b5:62:ee:ac:
                    ba:ad:7c:7e:f0:df:fc:ac:1b:15:30:42:fa:df:8b:
                    0f:52:ce:0d:bb:32:de:74:6c:11:e5:93:22:1e:85:
                    9b:1f:86:3a:7d:c1:b7:ae:5f:6d:2b:d7:bd:d5:21:
                    8c:0f:6a:3a:5b:56:e4:01:77:09:08:d4:bc:d7:ba:
                    7f:a7:bf:da:6d:1e:a6:5c:dc:2c:3d:83:bd:c6:cc:
                    9b:e8:6e:de:79:32:a0:78:4c:c9:27:1c:63:bb:1f:
                    c9:a5:f2:e7:b9:9a:1d:7e:00:d7:2c:0a:d4:0d:c9:
                    87:11:ae:9e:c7:2a:d5:72:80:4b:3c:b3:f0:f1:18:
                    48:35:f3:55:f5:1d:3c:aa:31:f6:46:b4:26:fa:ed:
                    4b:69:81:d9:13:ee:46:c9:3b:e7:1f:8d:4b:23:8d:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:AD:D5:AA:E3:9D:57:C7:20:50:AA:63:54:9F:19:49:61:C7:83
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:51:e7:5d:38:32:ae:8e:38:07:a4:ac:7c:62:06:09:a2:93:
         da:e9:31:4e:7f:54:26:bc:98:f1:bf:19:c4:04:74:ba:61:ae:
         64:78:89:0b:37:8f:e2:ac:b4:e6:6c:15:32:02:f7:5d:19:6a:
         07:77:4e:34:6d:4b:27:07:be:7c:e0:aa:6f:3a:53:07:33:b0:
         41:ec:65:01:26:a6:74:6c:59:4e:03:81:29:69:fb:41:a6:d5:
         65:b8:92:f8:29:44:f6:2e:1f:a4:79:ca:bd:43:25:f5:57:07:
         af:9f:c4:c3:61:2b:20:58:08:1d:27:b3:a2:72:0e:8c:41:cc:
         4f:f8:77:b6:f0:ff:12:62:e5:11:4e:33:3a:a6:48:40:43:43:
         8c:f0:52:ff:e4:ab:78:55:3c:de:f2:1c:5c:03:d3:8f:a0:64:
         56:48:30:da:4a:0b:e8:d0:7e:0e:a2:37:ea:bb:92:c8:75:3e:
         b3:da:17:8b:50:6d:04:8c:c6:5d:49:3e:c7:5e:9b:68:da:7b:
         b2:52:cf:fc:63:2f:63:28:1f:4e:47:53:15:a5:2b:83:ad:26:
         db:e3:ae:9b:59:a9:b0:fc:ea:bb:16:ce:02:ab:9d:84:94:7e:
         e3:f4:bf:db:bc:81:13:6e:03:e7:28:ae:50:91:df:70:14:34:
         45:49:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:02:07 2024 by rpki-client on console-fra.rpki-client.org