Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa
File:                     323830333a6234303a3a2f33322d3438203d3e20323634373032.roa (raw, json)
Hash identifier:          JzNKca9AoMV/l+lA4D/ZSc5cCNkzx3s9LzE9zfgfHeo=
Subject key identifier:   D6:0C:28:8B:05:5C:DA:10:EB:0A:CE:E6:D0:28:6E:61:97:5D:12:A3
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       7F11C23FBE50BD72ED9E05785C700638AD7295EE
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     264702
IP address blocks:        2803:b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:c2:3f:be:50:bd:72:ed:9e:05:78:5c:70:06:38:ad:72:95:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=D60C288B055CDA10EB0ACEE6D0286E61975D12A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2e:69:eb:cc:36:02:2e:6a:bf:21:ea:3e:b6:
                    d3:93:c0:f4:b5:57:d1:bb:08:2c:cd:07:d7:6c:09:
                    9a:12:c4:12:f6:05:45:45:69:75:af:0f:bb:29:4d:
                    b1:37:15:8f:bc:2f:b9:b5:62:14:21:93:9a:6e:e4:
                    85:0f:76:9a:cd:67:43:d1:a3:70:80:95:88:cd:7b:
                    01:38:ad:d3:b3:d8:fb:a2:b6:60:8e:83:9f:e3:05:
                    c2:d9:ce:d4:7d:4e:8a:72:d9:8d:84:12:f2:d3:78:
                    1b:a3:fe:f1:a0:b9:8a:f2:a3:af:19:f3:a6:b3:06:
                    6a:bb:90:7a:70:3b:df:5e:e6:52:55:13:1f:84:f8:
                    c8:eb:6e:82:d8:bd:d0:56:22:df:ac:ec:be:37:c9:
                    3c:cc:1c:2b:7b:1b:fc:9e:64:fb:b3:ce:92:da:04:
                    91:b4:ee:cf:77:76:4f:74:12:a6:c2:10:d5:6e:fb:
                    cc:cf:db:c2:25:78:f0:c4:51:b9:ac:2f:19:b9:7b:
                    55:01:74:43:a3:78:13:81:10:f3:e4:59:d2:99:2e:
                    fd:c4:1a:e8:58:ed:96:f9:3f:88:94:44:8b:05:31:
                    eb:c9:1d:e8:37:bb:43:59:e8:b4:db:f3:f8:0c:f0:
                    a7:56:c5:75:44:7d:b1:c1:cb:b9:97:bc:30:fd:3e:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:28:8B:05:5C:DA:10:EB:0A:CE:E6:D0:28:6E:61:97:5D:12:A3
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:58:c2:62:ea:bb:4a:17:c1:5c:ae:a8:d8:74:62:e8:c6:12:
         de:eb:11:4a:24:13:9b:1e:f3:b3:9a:82:6a:d3:00:f5:70:10:
         bd:b4:a5:ee:29:cb:f0:88:01:e1:11:fd:16:73:e5:57:eb:6f:
         9e:67:fd:f2:20:37:a3:1c:86:ad:53:46:d3:6a:7b:06:f3:a9:
         67:cb:45:d5:8d:07:fc:22:c2:59:f5:aa:59:7f:4d:b5:53:c7:
         53:37:5e:56:b7:6e:5b:8e:12:23:43:f1:34:43:df:80:c6:38:
         ec:0e:3f:e8:e1:d3:2e:d0:f5:82:4d:c3:26:95:f3:87:f1:8b:
         83:4d:5e:ed:dc:de:d2:c7:e3:b5:59:48:f8:50:ea:5e:b1:b1:
         db:ed:d2:bf:2c:0c:20:fb:d2:68:c1:71:99:0b:db:77:38:bc:
         3e:88:0b:76:cf:f9:27:ac:00:9f:d5:cb:69:fb:01:4e:4f:c3:
         d5:c6:e8:1f:b6:3a:fd:cc:fc:d3:59:60:c6:c9:93:f2:3d:91:
         37:53:cf:c9:d2:ce:01:d6:3e:7a:72:eb:6f:01:77:ae:07:1b:
         e0:d8:0b:68:82:f8:67:07:82:7d:47:d9:d1:10:a7:c0:0b:9e:
         86:d5:92:a6:60:c4:ba:3a:84:fe:77:09:7b:cf:cf:f5:d0:a8:
         98:e4:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org