Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/323830333a643563303a3a2f33322d3438203d3e20323635373237.roa
File:                     323830333a643563303a3a2f33322d3438203d3e20323635373237.roa (raw, json)
Hash identifier:          ZNMcZ9jEHW0dKzEfLcMHhOmkTGRMa8CD81HK81Ucn1c=
Subject key identifier:   C7:75:66:EB:25:49:24:DE:1E:48:9E:85:9C:A3:1F:2F:0C:7D:AF:1D
Certificate issuer:       /CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
Certificate serial:       4BED1130B3AD59C0D976E740B42AB5FF6F29528E
Authority key identifier: 90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/323830333a643563303a3a2f33322d3438203d3e20323635373237.roa
Signing time:             Tue 05 Mar 2024 18:03:18 +0000
ROA not before:           Tue 05 Mar 2024 17:58:18 +0000
ROA not after:            Tue 04 Mar 2025 18:03:18 +0000
asID:                     265727
IP address blocks:        2803:d5c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:11:30:b3:ad:59:c0:d9:76:e7:40:b4:2a:b5:ff:6f:29:52:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
        Validity
            Not Before: Mar  5 17:58:18 2024 GMT
            Not After : Mar  4 18:03:18 2025 GMT
        Subject: CN=C77566EB254924DE1E489E859CA31F2F0C7DAF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:01:24:7f:be:f3:35:45:3f:f7:bb:73:1d:
                    e0:6b:70:0e:14:47:05:7c:cc:f7:d6:90:ab:8b:1a:
                    a8:8a:14:ac:1e:fb:32:cd:cd:8e:8a:e6:04:2a:bc:
                    dc:99:ad:09:07:0f:54:3c:a7:e4:25:c4:21:c1:1b:
                    19:05:e6:e2:9d:0b:23:46:8a:51:93:18:63:e6:b9:
                    79:6f:95:8b:20:c9:67:d1:31:10:91:9c:5f:f2:91:
                    54:c5:01:09:4a:73:99:8d:52:ee:ad:65:3e:0f:96:
                    0d:55:45:00:32:58:02:d5:2e:50:34:61:bb:0b:70:
                    bd:cd:21:d9:47:70:88:a3:92:f3:4d:2c:57:45:0c:
                    29:6e:b6:0e:08:37:07:b1:54:d0:8f:1b:4d:02:0e:
                    bd:63:65:0d:58:e7:51:ed:b9:a3:d5:09:5e:4a:2b:
                    69:21:b6:ff:41:a4:9c:83:6a:72:ce:1e:f0:95:e2:
                    c2:06:36:b8:22:5f:15:e9:07:c0:bf:e8:1a:4c:5c:
                    d3:63:f9:98:ac:1e:8d:89:4d:db:36:db:bc:a5:4f:
                    fa:0c:4a:c0:f7:58:31:a0:69:ff:2c:af:c3:41:fa:
                    91:ce:06:4d:d8:c0:59:3e:29:57:f9:4c:75:92:5e:
                    3f:8c:04:b9:32:a3:7e:3e:85:a9:76:35:ac:5c:bc:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:66:EB:25:49:24:DE:1E:48:9E:85:9C:A3:1F:2F:0C:7D:AF:1D
            X509v3 Authority Key Identifier:
                keyid:90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/323830333a643563303a3a2f33322d3438203d3e20323635373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f7:1f:04:93:02:86:e0:fd:e1:7a:98:84:3a:3c:99:37:04:
         02:2f:61:ed:f2:9c:95:42:d0:25:4e:88:61:e1:5f:52:21:ad:
         32:f5:29:21:6a:0f:10:d9:4f:19:39:83:7d:36:0c:02:df:70:
         b6:7c:a9:08:55:b4:a8:30:41:e9:31:e3:b0:0c:d1:6d:cd:87:
         d9:e3:a4:d8:dc:ee:56:17:66:d8:17:21:95:b1:e0:90:11:dc:
         c5:77:c6:71:00:b3:b1:43:e6:d8:23:f2:e3:7c:6a:6e:8e:75:
         83:79:ab:aa:cf:d6:e2:85:fe:44:6f:b1:b3:22:29:7f:93:c0:
         4b:a4:f3:cc:2b:0c:c1:fe:96:e8:79:37:65:3d:7f:ac:fd:e8:
         77:d8:8e:44:78:04:6e:d1:b6:06:e6:67:76:86:00:29:0e:02:
         b7:f0:1c:38:2c:7e:4b:a7:d4:0c:31:7c:a3:bc:89:a0:29:aa:
         65:b7:2c:b3:5f:29:80:c1:ab:fc:24:78:f7:8f:cd:68:1f:61:
         45:fc:2d:df:1a:ea:a1:25:5d:b7:31:e9:49:96:7b:50:3d:2c:
         fb:e7:1c:a1:45:37:54:f6:05:92:f5:e9:2e:6a:95:55:b9:ae:
         11:1b:64:19:83:81:74:17:3f:7b:c6:c0:95:ca:7e:e9:f1:c8:
         a1:80:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org