Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
File:                     323830333a393134303a3a2f33322d3332203d3e20323634363039.roa (raw, json)
Hash identifier:          R2vPPq/e5jC4cOnOKaCJ3B+7CyqlOCBdEMMT0HkkZks=
Subject key identifier:   7F:BA:73:C0:51:F3:4E:B4:31:C9:94:47:FE:C0:15:7E:36:CC:C6:91
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       02021AD991379293CCC40CE11A8E06A08D19A432
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
Signing time:             Tue 05 Mar 2024 17:55:55 +0000
ROA not before:           Tue 05 Mar 2024 17:50:55 +0000
ROA not after:            Tue 04 Mar 2025 17:55:55 +0000
asID:                     264609
IP address blocks:        2803:9140::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:1a:d9:91:37:92:93:cc:c4:0c:e1:1a:8e:06:a0:8d:19:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Mar  5 17:50:55 2024 GMT
            Not After : Mar  4 17:55:55 2025 GMT
        Subject: CN=7FBA73C051F34EB431C99447FEC0157E36CCC691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:ef:16:c6:8a:55:37:ac:45:4e:71:59:e0:
                    60:10:3c:9f:d1:e7:99:f8:fd:ee:86:a2:b6:39:7f:
                    5e:66:7d:73:6d:7d:34:e8:93:5e:1f:19:86:75:33:
                    1b:1f:cb:a3:f6:a0:c5:cc:3e:29:3d:09:4f:98:4f:
                    93:99:ef:42:e2:e2:32:ce:7c:98:95:e8:92:53:e4:
                    c2:37:8b:f6:0c:c2:bc:53:f0:3f:ba:ec:e3:e1:51:
                    23:1b:07:19:dd:dc:7c:4b:c6:3c:21:58:39:30:63:
                    b9:b6:bc:55:a2:8c:3d:00:cb:30:50:5f:70:d1:a6:
                    fa:c1:3d:c9:05:a4:37:e8:2f:34:0c:cd:97:e1:b7:
                    0a:d0:3a:0b:5c:a6:ec:d3:58:63:26:80:da:46:f8:
                    07:e3:13:4f:71:33:2a:58:c4:eb:50:67:20:35:ca:
                    50:ef:10:bd:d3:db:71:99:89:5b:f1:1e:18:79:e0:
                    a2:2c:2a:cc:f4:ca:80:6f:57:fe:b1:8d:1c:3b:54:
                    b3:03:20:40:e4:cd:e7:2a:7f:60:e3:48:9a:05:fa:
                    cf:c1:0e:d6:99:e0:1a:35:b0:5c:a0:81:89:19:38:
                    80:e3:dd:ee:67:8e:7f:f4:9a:59:28:2e:e8:9b:12:
                    5b:9c:ba:86:e2:09:59:7d:df:d5:d0:d1:bd:3c:09:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:73:C0:51:F3:4E:B4:31:C9:94:47:FE:C0:15:7E:36:CC:C6:91
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:71:cc:51:59:61:8e:bc:43:1f:55:01:87:30:2c:61:3f:
         5e:d5:53:be:de:80:19:2d:87:6f:2a:0c:54:62:5e:b4:ae:0a:
         4a:a5:48:65:22:c8:d4:e6:47:c8:e7:0f:bd:5a:b8:76:f0:0b:
         f5:ed:b4:9b:05:6d:4d:7d:87:a0:c8:d7:e0:21:35:26:3a:da:
         c5:50:bb:05:d7:c1:95:6a:a7:af:4c:49:03:08:3b:11:cd:7c:
         40:09:6f:0d:af:f0:8c:58:0e:59:6c:b3:c0:c8:a2:e2:9f:df:
         d2:b2:6b:ca:ce:c7:27:d9:1b:5f:7f:04:44:a4:91:76:a7:a8:
         b7:d5:69:24:2f:2a:50:17:1a:41:dd:e6:2c:83:2b:a2:f1:6a:
         47:ca:fd:47:2f:e3:b3:15:fd:85:9c:93:cc:4b:00:40:29:b4:
         e8:56:af:3c:05:90:04:83:ca:86:b8:f7:f3:1e:29:20:77:f1:
         e0:7e:a4:b6:48:b8:12:81:c4:44:e6:29:53:3e:7d:dc:92:de:
         60:df:fa:93:01:1b:59:b0:bf:e4:3d:91:78:14:b1:21:6a:9d:
         10:b2:81:79:f7:ae:fa:ff:6a:3c:90:ed:53:12:55:74:93:3b:
         22:b3:c8:b6:25:eb:2e:e0:eb:59:1c:57:1a:3c:da:ab:55:34:
         fe:a6:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:44:42 2024 by rpki-client on console-ams.rpki-client.org