Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa
File:                     323830333a386365303a3a2f33322d3438203d3e20323636373439.roa (raw, json)
Hash identifier:          XxdWXbHrUUGyBXa9E92t9sNBpsqfrmCER8ofBwSr8Jc=
Subject key identifier:   12:D4:50:58:CC:32:80:66:F6:CC:FB:44:A6:9A:0E:60:A4:F8:94:60
Certificate issuer:       /CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
Certificate serial:       24F3591B7F4E23093A2F3AED03D362D479D68917
Authority key identifier: 09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa
Signing time:             Tue 05 Mar 2024 18:18:11 +0000
ROA not before:           Tue 05 Mar 2024 18:13:11 +0000
ROA not after:            Tue 04 Mar 2025 18:18:11 +0000
asID:                     266749
IP address blocks:        2803:8ce0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:59:1b:7f:4e:23:09:3a:2f:3a:ed:03:d3:62:d4:79:d6:89:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
        Validity
            Not Before: Mar  5 18:13:11 2024 GMT
            Not After : Mar  4 18:18:11 2025 GMT
        Subject: CN=12D45058CC328066F6CCFB44A69A0E60A4F89460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:cc:cc:da:b9:eb:6e:77:61:89:6e:75:a2:
                    e9:58:a0:f7:bf:29:72:0c:15:a4:95:d4:5e:9d:6d:
                    2b:97:80:d2:63:5f:ae:f6:a2:42:af:5a:40:5d:ff:
                    07:4f:02:6c:b5:25:7a:2a:ff:34:08:9d:a6:7a:d0:
                    af:c5:95:33:e9:09:d2:79:82:cb:05:98:b4:dc:9d:
                    61:5b:f1:58:04:ee:01:13:b4:a7:af:f0:23:88:8d:
                    fb:cb:50:97:08:3d:ba:18:59:83:35:d0:3e:7c:fa:
                    ca:e6:d7:d4:79:d4:bc:56:2c:fa:3b:89:16:2c:f0:
                    b0:5f:72:e5:5e:68:5e:5c:62:3a:c0:30:6c:c4:3a:
                    25:4f:08:15:59:d3:02:10:a1:d2:ad:91:6a:31:d5:
                    66:9f:67:da:0c:96:f0:2f:7e:47:35:6e:a4:99:f9:
                    1c:ca:ff:3f:df:36:cc:2d:0b:53:ce:f0:76:2f:cc:
                    32:19:1b:2c:bc:81:2a:86:a3:f6:d1:ba:aa:78:72:
                    41:da:9f:9a:e4:a2:4f:84:0f:93:8a:15:04:95:e6:
                    5a:6c:56:a7:6f:be:81:f8:29:94:61:43:b2:2a:d9:
                    cc:16:74:36:6f:77:db:26:05:c2:ce:50:5a:6c:ca:
                    fa:7b:26:56:ec:df:94:00:ba:4d:6e:a9:91:75:36:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D4:50:58:CC:32:80:66:F6:CC:FB:44:A6:9A:0E:60:A4:F8:94:60
            X509v3 Authority Key Identifier:
                keyid:09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:fb:68:b3:69:81:86:80:79:5c:c1:61:b1:a4:23:b9:ff:
         64:cc:bd:68:0d:80:4e:d6:7d:18:db:97:06:c1:4b:c9:ef:fb:
         46:9a:7c:6f:0e:b9:e4:8a:2a:4c:8a:82:1a:be:14:a9:fe:49:
         0a:21:f0:7e:6a:de:03:54:3c:3e:91:42:07:11:34:98:c7:2c:
         de:a2:33:26:50:b1:6c:50:bd:0e:c5:9d:f7:9b:4f:0f:a4:90:
         d0:19:8d:d5:07:95:8f:97:10:c8:f8:a0:17:d0:81:98:3f:50:
         1d:92:89:55:03:93:87:0d:f9:05:11:f3:73:c2:b0:33:b3:00:
         84:45:fb:11:18:1d:13:82:7d:e6:49:b6:9e:f4:7a:8b:0a:2a:
         ca:5c:f8:2d:0f:27:4b:b2:4e:c9:84:8e:31:b9:0d:63:af:7c:
         0c:6b:1a:60:f0:c9:69:15:3a:ca:bc:1e:b9:24:a7:2d:9b:95:
         04:10:51:43:2c:10:4f:98:2f:65:9c:1f:2f:e6:20:10:72:02:
         7e:54:9f:5d:df:cc:d1:91:91:5f:03:d1:0d:cd:e7:7d:61:4c:
         28:de:69:56:31:2e:78:0b:d9:85:3d:3d:c9:45:5f:10:78:fa:
         ab:25:37:cf:13:51:8d:7c:fe:0b:83:a9:f9:85:34:55:c6:f4:
         06:b2:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org