Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa
File:                     323830333a656365303a3a2f33322d3332203d3e20323639393130.roa (raw, json)
Hash identifier:          gw46vyNvfNEobSV38qW5YENEZ2Ul23xjYZVwlKf2ymA=
Subject key identifier:   B9:2A:01:C7:B1:99:D5:16:74:4A:A5:B2:7C:25:42:0F:4F:E4:3A:D7
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       0894F2A2D038313EF53D8CA680D6A903A6B052F1
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa
Signing time:             Tue 05 Mar 2024 18:23:18 +0000
ROA not before:           Tue 05 Mar 2024 18:18:18 +0000
ROA not after:            Tue 04 Mar 2025 18:23:18 +0000
asID:                     269910
IP address blocks:        2803:ece0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:94:f2:a2:d0:38:31:3e:f5:3d:8c:a6:80:d6:a9:03:a6:b0:52:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Mar  5 18:18:18 2024 GMT
            Not After : Mar  4 18:23:18 2025 GMT
        Subject: CN=B92A01C7B199D516744AA5B27C25420F4FE43AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:96:78:41:2b:13:c8:a4:73:75:4a:61:5d:
                    d1:a7:be:0e:de:ca:03:7b:1c:1d:fa:78:dc:d6:74:
                    4d:b2:24:06:dd:19:90:bf:7c:1d:f2:5d:f1:f2:bd:
                    3d:bb:4b:bd:d5:35:fa:41:1d:a2:29:b3:4f:cd:bb:
                    39:e1:43:60:80:6a:2e:59:b0:42:a2:5b:a4:a0:6d:
                    43:69:bb:80:63:cd:5d:71:12:3a:fa:9e:3f:07:72:
                    d7:13:8a:52:ea:f3:3b:8a:2a:f0:24:bb:3c:ae:cc:
                    e8:8d:83:83:7f:7a:7a:cf:43:a5:65:84:08:7c:9c:
                    74:58:5c:87:ba:11:91:5e:09:33:76:d0:72:74:ba:
                    8a:29:a5:f8:13:18:7a:26:0a:03:77:67:13:e0:81:
                    e9:67:1d:c1:eb:13:2f:01:6e:a3:29:04:5f:fe:33:
                    94:6a:13:03:69:1c:0f:cc:11:44:c7:75:03:90:12:
                    d3:63:80:f5:d7:e5:7e:dd:9f:58:b4:48:db:84:b3:
                    59:59:93:5b:a6:61:b1:4f:d6:87:4a:66:2a:1e:08:
                    51:64:38:fe:25:a5:92:e3:43:9b:e8:af:b4:b6:bf:
                    1c:31:51:3a:47:43:35:85:17:cf:e9:7b:8d:7d:9d:
                    57:53:2a:cd:d6:14:63:dd:30:67:9e:25:f8:ab:48:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:01:C7:B1:99:D5:16:74:4A:A5:B2:7C:25:42:0F:4F:E4:3A:D7
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:a9:9d:cc:c3:d5:d9:f3:b8:71:13:0d:8c:aa:0b:ee:65:
         d0:a4:cd:4e:36:06:ef:af:b1:f7:b6:71:2c:c5:72:ed:7d:7e:
         10:e2:69:84:64:9b:69:73:3e:fb:b2:eb:70:84:ef:3c:65:87:
         49:37:56:a9:26:67:a2:44:68:51:93:8f:52:12:8d:e2:61:17:
         de:9a:26:0a:83:57:a4:07:84:1c:6b:a8:67:c9:36:a3:a7:28:
         d0:b7:bf:43:da:3b:6b:3a:17:06:a1:99:ae:19:ec:0b:19:1f:
         fe:74:72:69:76:f4:a3:1b:32:db:47:a2:4e:36:c6:b1:d0:b5:
         5a:5e:3c:e1:de:f1:6c:83:c5:9c:30:cc:6a:c8:1e:87:3e:7a:
         31:b8:21:80:89:7f:9b:9f:21:95:1b:db:47:5c:07:64:99:b6:
         1f:fb:39:54:d1:6c:62:66:12:4c:e4:61:2e:24:52:1a:37:3c:
         1d:74:1f:5d:2a:01:50:5d:b9:23:f0:0d:1c:06:81:a0:c8:ce:
         b5:df:8f:50:6a:37:f2:c5:d7:34:fb:d5:c4:1a:fa:68:4f:b9:
         e5:b1:5d:9a:41:cf:63:d3:11:ff:50:66:f4:1b:e1:c7:d0:2f:
         ce:eb:78:19:f1:d9:57:8d:f0:f1:2a:35:f5:1e:8e:61:e5:2d:
         d7:aa:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:25:21 2024 by rpki-client on console-ams.rpki-client.org