Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
File:                     323830333a396232303a3a2f33322d3634203d3e2033333536.roa (raw, json)
Hash identifier:          ICvZhtAePO7vNIjZuoQPfM6r7Up0NSNf4z9P3E8b7Bk=
Subject key identifier:   B8:E6:42:6F:16:07:76:00:4F:45:A3:92:EA:3C:5D:13:16:E2:10:CD
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       7731179B010269307EFAC5890B55E2DE546D1E93
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 18:02:44 +0000
ROA not before:           Tue 05 Mar 2024 17:57:44 +0000
ROA not after:            Tue 04 Mar 2025 18:02:44 +0000
asID:                     3356
IP address blocks:        2803:9b20::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:31:17:9b:01:02:69:30:7e:fa:c5:89:0b:55:e2:de:54:6d:1e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:44 2024 GMT
            Not After : Mar  4 18:02:44 2025 GMT
        Subject: CN=B8E6426F160776004F45A392EA3C5D1316E210CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:64:a7:f0:ab:16:34:02:f8:eb:e9:ed:d9:
                    57:cb:91:14:cd:2c:7c:74:ac:6f:80:ab:55:ff:ec:
                    f8:c0:59:1c:4c:d1:53:08:5a:a3:f2:c3:c1:51:c0:
                    8a:1a:bc:88:aa:96:01:54:38:b1:8a:e4:47:2f:ad:
                    6f:cd:eb:bb:49:20:54:37:5f:fc:02:2c:40:07:33:
                    27:17:9f:f1:a2:93:59:25:79:8d:17:30:58:83:e0:
                    67:d6:7a:03:3c:dd:40:ce:56:c9:94:93:ef:a7:c0:
                    8c:aa:db:fc:f4:a7:d6:3c:95:b8:4c:bc:1a:e3:5f:
                    cd:b3:16:64:7f:2e:8a:a5:50:6d:6f:b0:97:ff:ea:
                    3c:d8:7c:85:cd:4a:b1:0a:b1:a3:34:fe:84:4c:13:
                    a0:4b:e3:71:21:50:83:a3:f3:ba:d5:ff:80:f3:ad:
                    ab:c2:54:11:ce:c3:dd:e4:2e:c4:72:00:38:a7:93:
                    84:a7:f6:c3:3f:04:a1:b1:9b:9e:95:3e:35:87:1c:
                    2d:4d:13:d2:5b:42:7b:c6:9b:9d:6c:4e:b7:d7:10:
                    04:d6:d1:c5:66:76:ae:c9:15:ee:46:29:e3:f9:3d:
                    5f:ee:25:c7:9d:fb:f7:af:97:0d:de:28:4a:fb:b2:
                    86:24:5c:9a:67:e9:87:12:83:a6:f6:50:4e:4a:3b:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E6:42:6F:16:07:76:00:4F:45:A3:92:EA:3C:5D:13:16:E2:10:CD
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:16:18:55:b7:5d:3f:de:24:d2:5a:ff:e7:96:76:1d:c8:
         58:7a:a1:d1:8a:e5:55:46:ea:0f:6e:3b:a6:75:90:ce:97:e8:
         4d:ec:86:0a:55:dd:b5:4c:39:81:36:f4:06:fb:d4:0b:3d:ec:
         82:ac:4d:38:0f:b0:a7:8b:7b:fa:6a:c5:25:63:4e:4c:2a:d4:
         21:22:bb:b4:63:58:e1:73:23:ca:c5:18:92:c8:47:aa:1d:7e:
         47:ed:7a:c7:de:64:f6:77:75:3a:85:00:e6:e3:09:d0:8c:72:
         12:3d:0d:35:bf:b8:dc:c2:f9:76:9b:66:e9:74:f9:9c:1c:f1:
         92:c9:5e:e9:b9:fa:9e:5a:a8:d2:b9:19:4a:c5:fc:2d:ab:c2:
         a7:bc:12:8f:84:90:39:ad:9d:95:61:4f:05:4a:47:3c:53:57:
         f0:7a:e0:b1:fa:e6:29:32:a3:68:77:a2:86:1f:7e:c5:98:69:
         ed:03:9f:5c:e2:8a:28:5a:77:0c:e2:bb:40:2e:d5:2d:ee:d8:
         d9:86:23:c5:60:0f:05:65:fd:75:d1:bf:d8:d0:ee:c3:83:14:
         20:c9:89:84:b7:e1:22:62:a2:6a:ec:a9:e0:77:2a:0b:73:42:
         35:1e:cd:ad:34:3c:e6:0e:24:85:a8:db:4c:f8:f4:de:70:4a:
         82:f5:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:14 2024 by rpki-client on console-ams.rpki-client.org