Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/323830303a3966303a3a2f33322d3332203d3e203237383435.roa
File:                     323830303a3966303a3a2f33322d3332203d3e203237383435.roa (raw, json)
Hash identifier:          NdZAgLLYEa/0Pj/+bNkWUzW29CJfSQPgnhBkoRZ9Xo4=
Subject key identifier:   9F:A3:27:02:19:3D:53:16:54:8E:CF:71:86:BF:4A:4C:B1:88:CD:8D
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       69598B48E059185FD6F012DDD4BEC4BEBCF160D4
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/323830303a3966303a3a2f33322d3332203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        2800:9f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:8b:48:e0:59:18:5f:d6:f0:12:dd:d4:be:c4:be:bc:f1:60:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=9FA32702193D5316548ECF7186BF4A4CB188CD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:b4:65:08:4e:e8:07:0f:da:4f:99:ec:b8:
                    0d:70:14:8b:2b:8c:62:a9:75:56:e1:c1:05:af:d8:
                    98:02:fe:41:8f:92:20:a7:50:80:2c:9e:97:2d:98:
                    53:2d:4b:15:37:0f:18:e8:25:b1:20:aa:86:f1:5e:
                    cb:a6:7f:ea:ad:17:df:fc:88:32:4f:2a:fe:4d:68:
                    f8:02:57:f5:fa:be:5b:a7:05:c0:ca:09:68:75:3a:
                    5a:8b:a5:95:cc:34:d3:23:db:f5:2c:1a:77:41:d0:
                    8b:98:7e:e4:34:c5:65:6b:09:26:48:16:9b:ad:84:
                    9b:c5:64:d9:29:f8:af:90:32:bc:7f:3a:ac:da:bc:
                    ee:be:42:d7:80:87:92:8a:1d:cb:8d:5a:50:a6:90:
                    f5:44:b1:e0:2c:40:09:51:14:a2:85:a7:db:d4:86:
                    2f:66:45:82:16:93:5d:c6:0c:78:e9:ab:b1:4c:ac:
                    6c:ca:f0:40:a7:52:b6:d9:b9:96:91:3f:09:17:47:
                    97:52:ab:15:de:71:66:27:50:5b:28:4c:ab:ee:24:
                    2c:af:39:da:80:be:20:93:6e:56:3f:d0:80:e3:9b:
                    ca:30:65:7f:d3:c7:69:0d:2d:cf:c4:6e:db:1f:51:
                    39:2d:22:20:aa:55:e3:dc:d9:e6:be:55:b7:06:a3:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:27:02:19:3D:53:16:54:8E:CF:71:86:BF:4A:4C:B1:88:CD:8D
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/323830303a3966303a3a2f33322d3332203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:ca:7c:b0:b1:30:a0:ba:8f:18:cd:4e:31:c6:41:7b:2b:
         ba:18:00:5e:9a:cb:18:2a:c9:c5:b1:c3:b0:10:20:6e:e2:ac:
         fa:ef:f6:48:73:11:3b:82:5a:8a:09:a0:e8:7e:9f:92:19:ce:
         26:67:04:27:9d:c2:23:c0:1d:b2:98:e6:c2:58:42:07:18:b9:
         17:9d:3c:cd:2d:35:ae:64:36:4b:bc:0c:cb:c5:09:3f:81:42:
         fc:04:d0:bd:d1:70:b3:34:31:5e:4f:ac:c2:a9:b0:1a:c4:4f:
         1f:16:34:68:b0:f5:8e:52:af:c0:0e:5a:7b:55:80:9c:ba:ac:
         e4:5f:41:a1:3d:71:59:c3:e6:06:73:e0:ef:38:d5:92:3d:06:
         75:e3:e3:c3:7c:af:82:e9:43:54:87:c5:4e:59:51:46:e4:ca:
         7d:b6:36:a4:dc:95:30:5c:e6:8c:3c:c2:c1:b6:ec:be:5f:f8:
         af:94:df:f5:fc:35:c8:06:90:a1:ed:ab:b6:1d:ed:82:d3:51:
         b9:e9:a1:62:65:f2:d7:2a:fc:1d:b2:7f:11:d4:8c:fc:13:3e:
         29:4d:48:f6:bc:ae:95:5f:94:4e:03:a3:34:1e:99:e4:8d:91:
         e6:b4:27:4e:6f:aa:a1:e8:3a:de:4d:ce:00:89:7a:d8:7f:9c:
         eb:1d:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org