Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/323830333a353563303a3a2f33322d3332203d3e20323635373135.roa
File:                     323830333a353563303a3a2f33322d3332203d3e20323635373135.roa (raw, json)
Hash identifier:          aUp+4DKzStzN4W7FucSgF/3nRF+mS7KrfaSPEafUfII=
Subject key identifier:   B4:CF:39:E9:76:F7:8F:35:5D:BD:89:A5:CF:76:CA:3C:FD:69:A0:12
Certificate issuer:       /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial:       0C211B2BE746386556DFB06D7277C8D03AC58B15
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/323830333a353563303a3a2f33322d3332203d3e20323635373135.roa
Signing time:             Tue 05 Mar 2024 18:02:45 +0000
ROA not before:           Tue 05 Mar 2024 17:57:45 +0000
ROA not after:            Tue 04 Mar 2025 18:02:45 +0000
asID:                     265715
IP address blocks:        2803:55c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:1b:2b:e7:46:38:65:56:df:b0:6d:72:77:c8:d0:3a:c5:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
        Validity
            Not Before: Mar  5 17:57:45 2024 GMT
            Not After : Mar  4 18:02:45 2025 GMT
        Subject: CN=B4CF39E976F78F355DBD89A5CF76CA3CFD69A012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:43:8e:42:21:3a:37:46:2f:0b:01:9b:56:
                    b2:ff:e4:1e:fe:10:0a:d3:57:e3:09:a5:63:69:f5:
                    94:d9:80:57:c5:a2:87:4b:91:bf:10:da:04:b0:e5:
                    3c:09:75:51:9e:35:f6:b2:9e:7c:5c:68:c6:45:b9:
                    21:39:5a:69:b8:2a:71:5d:9c:3f:5c:26:5c:b8:2d:
                    d4:d3:95:32:8c:eb:ee:9b:40:9f:94:19:1f:74:6d:
                    ee:14:99:b5:6b:66:a4:86:8d:5e:56:91:12:37:7b:
                    65:ac:8f:e5:e6:37:05:b1:92:9a:da:43:93:72:45:
                    db:13:87:f9:12:1c:35:3f:98:82:45:14:e8:ba:4e:
                    62:6d:4a:e3:40:bd:2b:14:48:85:d3:21:d7:28:fd:
                    77:93:8c:44:76:29:34:8c:28:b9:1c:13:e5:7e:e6:
                    47:bf:23:5f:31:c1:0d:7d:c4:27:00:6d:da:95:2f:
                    dd:3a:a5:56:31:ab:bd:dc:ce:95:36:20:59:0f:8d:
                    40:70:e4:2c:ad:b2:9c:9c:55:1e:20:f0:32:cf:0e:
                    8a:25:dc:26:00:9e:d5:96:0a:6f:bc:48:58:53:03:
                    d9:c1:25:a8:be:4c:7b:2f:4c:f6:68:12:a6:be:1c:
                    93:b3:55:41:10:4e:10:5e:ff:54:56:b3:a0:fa:01:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CF:39:E9:76:F7:8F:35:5D:BD:89:A5:CF:76:CA:3C:FD:69:A0:12
            X509v3 Authority Key Identifier:
                keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/323830333a353563303a3a2f33322d3332203d3e20323635373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:51:b8:39:ee:ee:12:b2:1b:d0:76:17:58:7b:9e:b5:b7:2f:
         99:6d:6d:b0:6f:62:76:f9:01:de:b1:30:98:d2:e7:31:ea:bc:
         59:ed:fc:7e:bd:31:66:d0:c5:d9:d9:42:60:87:22:55:a6:d5:
         83:fc:b8:8d:10:36:e9:51:21:61:2e:6f:1a:b2:c4:83:40:f2:
         f5:6f:28:42:3e:35:6d:65:87:c0:52:f9:bb:bb:67:43:f5:1f:
         04:d9:03:26:5f:9c:9d:bc:9f:5e:5b:0f:ec:5d:6b:c7:9c:5d:
         59:fa:d8:da:b5:0e:8d:a7:dd:7c:4e:1d:44:7b:fd:ad:9d:77:
         88:72:02:fd:0f:e5:81:53:b4:9b:ae:5d:f7:f3:8c:4c:80:55:
         57:26:ee:22:95:bd:60:67:19:55:ca:19:4c:4e:61:c4:b8:6a:
         28:f2:a4:1a:6c:1c:60:25:12:17:2b:90:67:9a:04:13:32:35:
         ae:15:26:ab:03:1f:5e:ce:0c:29:39:e7:3b:61:79:63:34:fe:
         13:d8:52:27:2e:d1:6b:35:d0:d2:51:59:d9:30:8a:3e:33:2d:
         27:28:80:87:19:85:7f:34:7c:c2:7b:f1:b3:54:3e:e4:83:0f:
         dc:1c:cb:a0:81:44:d1:c4:15:07:6b:db:28:d8:ac:16:05:d8:
         7e:95:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:07 2024 by rpki-client on console-ams.rpki-client.org