Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
File:                     323830333a6638303a3a2f33322d3634203d3e20323633373236.roa (raw, json)
Hash identifier:          6QEyDFIyunNAd4siuT+t7KG8w41uqT08OfKHZNczO7I=
Subject key identifier:   89:4B:3D:11:1E:6C:BD:6A:72:66:19:FF:E7:3E:33:F1:CA:55:A7:07
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       498C454EF761993A824E57F26544D4E684728637
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa
Signing time:             Tue 05 Mar 2024 18:20:14 +0000
ROA not before:           Tue 05 Mar 2024 18:15:14 +0000
ROA not after:            Tue 04 Mar 2025 18:20:14 +0000
asID:                     263726
IP address blocks:        2803:f80::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8c:45:4e:f7:61:99:3a:82:4e:57:f2:65:44:d4:e6:84:72:86:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Mar  5 18:15:14 2024 GMT
            Not After : Mar  4 18:20:14 2025 GMT
        Subject: CN=894B3D111E6CBD6A726619FFE73E33F1CA55A707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:ae:d6:d0:c3:4c:42:39:d6:fa:c3:9a:38:
                    39:70:d7:72:1d:15:dd:39:0f:77:88:7b:7a:df:b0:
                    60:4a:d1:63:f7:e5:c2:6b:b9:ab:e5:6a:2b:56:4c:
                    1f:66:8f:9a:f4:86:cd:fd:f9:ff:e5:21:55:c4:50:
                    92:cb:b1:46:76:bf:9b:e0:0e:bc:b3:89:2f:79:23:
                    e3:d3:84:db:53:6d:ed:53:64:fa:30:d3:54:10:62:
                    88:f7:8e:00:be:02:b9:12:76:d7:63:98:c0:e1:d3:
                    18:be:b2:62:64:a6:09:7a:9b:9b:5b:7e:8d:78:5b:
                    a0:10:32:00:d9:d0:2b:b2:d2:64:6a:bd:3a:40:ce:
                    ae:cd:7a:ab:3d:a9:1c:59:83:a5:5c:f1:e1:12:01:
                    c5:74:d7:a7:ef:f3:3f:ae:0e:d7:f1:80:7b:af:15:
                    74:96:03:e2:eb:75:e5:84:e1:12:45:8b:e4:a2:ad:
                    a5:47:d9:74:99:b1:10:7e:ff:a9:aa:1b:4c:ca:5b:
                    d4:23:40:9d:f4:12:73:0a:53:e9:5c:ca:54:26:39:
                    cc:d5:40:76:f6:27:e7:97:ed:f9:18:e6:53:ca:7b:
                    e5:2a:70:1b:e2:a3:bf:92:a7:55:c8:82:a9:8a:ad:
                    ee:ef:45:c1:98:a2:d6:b3:de:dd:b3:8f:23:92:2a:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:3D:11:1E:6C:BD:6A:72:66:19:FF:E7:3E:33:F1:CA:55:A7:07
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/323830333a6638303a3a2f33322d3634203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:93:cf:42:61:49:9d:3d:8b:d9:f0:13:00:a4:8a:b6:42:cf:
         5b:54:a7:85:c6:85:83:ef:eb:d1:d0:3c:d1:d8:b6:83:88:43:
         c8:9c:28:a3:76:73:e4:86:7b:f2:6c:d1:0f:d4:2b:7c:55:9f:
         3f:9b:6a:a5:f1:1f:e8:d0:a0:f9:62:93:27:28:58:d8:69:38:
         c5:fe:c5:6c:35:46:0c:d9:82:e4:66:a0:1e:71:20:79:2f:1a:
         1a:7a:6d:a8:de:62:61:fd:00:29:8e:68:d3:06:85:db:d6:ff:
         5a:fc:22:0f:25:24:fe:29:c6:df:b2:b0:b7:7e:0b:b3:b9:7f:
         44:e0:21:e1:b7:36:7b:79:47:ef:2e:17:64:4b:af:8d:11:36:
         5b:e3:78:45:8f:20:74:d3:9e:6a:3b:a4:b9:46:a3:4c:c0:3a:
         0b:07:bc:c1:04:e4:b6:0e:a9:9a:4a:76:bf:f1:e5:3e:73:35:
         78:7e:32:f9:60:9c:74:0c:56:4b:69:74:5d:5b:ef:b8:09:15:
         3e:17:e6:ef:15:9b:08:69:3f:9d:40:9c:02:78:ba:81:8a:4a:
         0a:ff:f9:0f:9d:18:ae:42:fe:ad:e9:51:50:2b:b1:8c:41:9f:
         ca:ad:0f:04:9d:22:5b:43:bc:aa:d8:37:d2:77:e6:1f:59:cc:
         00:3d:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org