Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a396332303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          IwA0kfMvNekDHDi1gBqw/RBTen2rsAqh4zOW7nylvqs=
Subject key identifier:   8A:AD:40:00:E3:BE:19:18:6D:FB:AE:B2:5C:F8:BC:68:73:6B:1B:10
Certificate issuer:       /CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
Certificate serial:       177FA8266122BEFBA9E099672BB503306AB3B672
Authority key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:50:23 +0000
ROA not before:           Tue 05 Mar 2024 17:45:23 +0000
ROA not after:            Tue 04 Mar 2025 17:50:23 +0000
asID:                     264668
IP address blocks:        2803:9c20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7f:a8:26:61:22:be:fb:a9:e0:99:67:2b:b5:03:30:6a:b3:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832
        Validity
            Not Before: Mar  5 17:45:23 2024 GMT
            Not After : Mar  4 17:50:23 2025 GMT
        Subject: CN=8AAD4000E3BE19186DFBAEB25CF8BC68736B1B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:d7:ca:10:5c:1d:42:f6:a1:f3:99:1b:91:
                    4f:cf:99:ee:73:ba:3c:00:fd:4c:e4:c5:3c:7e:40:
                    7a:d9:1e:58:9e:9b:4a:6b:bb:45:48:7b:75:da:19:
                    d5:c9:6d:dd:91:32:de:05:48:ce:32:cc:7a:4d:87:
                    ad:79:7b:dc:90:fe:50:0e:3c:2d:fe:21:df:58:8d:
                    ca:86:91:4d:a2:28:3c:e1:9b:3d:cf:95:22:45:79:
                    5e:70:b8:c7:db:37:a6:21:12:4a:e6:5e:6b:5c:3d:
                    13:f5:ec:41:d5:c6:7f:7d:85:0e:66:48:7b:e5:9d:
                    94:c3:65:55:e0:47:c2:c5:79:f1:3a:eb:ec:dc:c6:
                    73:ac:79:61:e3:1c:3c:23:fc:ab:12:07:1d:07:aa:
                    38:73:b4:60:ca:ad:f2:09:01:4c:5c:81:0e:64:8d:
                    ea:ba:41:af:69:d6:f3:1b:22:c1:fd:72:33:b6:59:
                    bb:cc:88:30:7b:cf:ff:4e:c6:dd:f0:8b:f7:ed:ca:
                    ee:36:48:31:16:29:35:ae:20:d1:0c:c8:7b:3f:1a:
                    8c:d8:35:c4:44:87:63:74:56:b6:22:29:1b:2c:93:
                    86:b9:f7:e6:b3:0f:a4:43:9a:d2:da:95:97:bb:22:
                    74:44:81:d2:dd:64:40:d7:17:bd:24:84:1e:41:44:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:40:00:E3:BE:19:18:6D:FB:AE:B2:5C:F8:BC:68:73:6B:1B:10
            X509v3 Authority Key Identifier:
                keyid:87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/323830333a396332303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:62:cc:23:7f:02:04:f0:15:94:d0:98:7f:8a:6b:57:8d:7e:
         49:8b:a8:62:43:d8:c3:68:51:dc:31:e4:55:2e:41:0c:6c:1b:
         a8:4a:a2:c1:39:02:31:ab:eb:a4:44:44:ad:16:1a:84:b9:d6:
         e8:34:66:3e:e8:69:d5:03:eb:31:13:89:f9:dc:a3:5d:26:fe:
         be:68:f9:9c:24:df:a0:40:86:c3:de:6c:6c:09:c5:eb:14:5f:
         96:6e:61:c7:2d:e7:e9:bb:cb:dd:63:f0:f7:96:f7:10:97:ac:
         7d:c7:e5:38:39:25:e3:6e:31:7a:fb:ff:44:a7:7f:ce:97:f7:
         f3:f3:27:fc:0f:29:27:06:15:d8:73:ca:58:d9:1f:13:05:d0:
         ad:59:55:16:d0:c8:8f:be:87:c5:44:7d:4e:28:c1:11:fd:8f:
         2a:31:10:21:42:8b:85:c1:ea:4b:47:99:0a:a6:fe:6e:2d:2a:
         e5:8c:09:c2:25:1c:0d:a1:b2:dc:20:ec:3b:19:77:15:07:0d:
         3c:82:80:c0:44:b8:dc:63:40:29:80:21:62:7a:26:3a:70:3e:
         f9:38:77:0a:7e:69:1c:73:e4:cd:63:90:25:27:94:ae:a0:18:
         9d:bb:96:5a:74:72:ba:4d:a0:a0:03:af:41:78:25:48:f0:92:
         3b:aa:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org