Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa
File:                     323830333a393339303a3a2f33322d3438203d3e20323733303231.roa (raw, json)
Hash identifier:          lNgVl43vOfgsaTzbZn8tQkHklXHD2rBkj3QnraLTigk=
Subject key identifier:   55:DC:4F:DB:E5:FB:30:24:3E:E6:7C:F9:F0:52:42:1D:40:1D:05:A3
Certificate issuer:       /CN=29591D131A7FFB5CA72F55D75A98CE32A3B3EA35
Certificate serial:       1A2565C5192BC8583DE57A38921C2DC7E595C5D9
Authority key identifier: 29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa
Signing time:             Tue 05 Mar 2024 17:53:16 +0000
ROA not before:           Tue 05 Mar 2024 17:48:16 +0000
ROA not after:            Tue 04 Mar 2025 17:53:16 +0000
asID:                     273021
IP address blocks:        2803:9390::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:65:c5:19:2b:c8:58:3d:e5:7a:38:92:1c:2d:c7:e5:95:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29591D131A7FFB5CA72F55D75A98CE32A3B3EA35
        Validity
            Not Before: Mar  5 17:48:16 2024 GMT
            Not After : Mar  4 17:53:16 2025 GMT
        Subject: CN=55DC4FDBE5FB30243EE67CF9F052421D401D05A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:cd:ef:2c:60:8b:f1:37:6f:68:33:f6:8e:
                    85:18:61:1f:55:3e:8e:33:da:d2:80:ba:5b:76:23:
                    39:f8:9b:09:fa:40:cd:b8:15:7f:ea:0f:8d:48:87:
                    cd:51:c0:14:07:9c:e8:27:ab:ae:b0:f2:81:6b:4b:
                    a2:76:9a:b0:7b:fc:40:b0:50:19:99:de:be:57:1c:
                    bf:72:9b:b7:a1:cf:a0:32:90:77:c7:63:41:fb:c6:
                    56:ae:82:d9:21:d8:3e:d6:23:01:5d:bc:f9:84:42:
                    e1:dd:a7:b9:c2:af:78:f6:09:9e:bb:91:18:11:d0:
                    8a:82:d7:b6:37:81:d6:8e:9c:d8:6f:c5:fa:78:f9:
                    c1:33:c8:ff:1c:b9:a9:d9:3e:23:d7:a0:46:a8:f5:
                    fb:fb:65:da:e2:8f:75:25:b7:91:6c:f5:ea:6b:9f:
                    ff:af:e1:74:36:6a:da:2e:0d:8b:95:61:07:f9:b6:
                    09:04:66:64:e1:c5:0d:97:94:f5:ac:be:f8:28:1d:
                    cf:56:a6:f7:1d:fc:80:87:4e:80:30:d4:3b:a7:78:
                    66:d1:bc:12:f1:56:12:a7:59:4c:3c:91:6c:55:1a:
                    a7:e9:28:c0:76:42:ba:87:b8:cc:b3:3f:13:b5:bf:
                    16:ba:7e:1a:85:e0:28:60:81:77:3d:48:e5:e7:51:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:4F:DB:E5:FB:30:24:3E:E6:7C:F9:F0:52:42:1D:40:1D:05:A3
            X509v3 Authority Key Identifier:
                keyid:29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/323830333a393339303a3a2f33322d3438203d3e20323733303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9390::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:26:42:be:c9:4d:d7:41:76:b4:2e:e3:1c:36:6e:26:69:78:
         15:3f:98:bb:46:05:c6:85:a8:0d:11:d3:49:e0:c3:da:dd:e5:
         57:95:33:91:e6:6e:ff:46:52:59:8c:e8:ab:47:16:b7:9c:80:
         e7:87:bf:4b:c2:bb:6b:46:50:02:29:3a:0a:9a:53:27:ca:e7:
         c7:05:e1:ae:5e:67:05:bb:66:5e:fb:71:c2:6f:68:f1:de:10:
         22:69:c4:05:73:15:be:8f:2a:4f:60:b9:87:85:6b:05:4d:88:
         29:cd:58:d9:ee:1d:2d:2b:11:2c:97:ea:6b:31:7a:c2:66:8a:
         29:9d:99:80:79:6c:27:7d:65:ba:8d:8b:fa:7e:8f:ad:15:0e:
         bc:8f:d7:e6:92:e5:d8:1a:07:f9:2d:b4:59:af:55:4e:aa:b2:
         6b:11:b4:14:17:44:26:89:50:83:5f:5b:67:26:d6:ad:f5:61:
         c2:f7:03:fc:b4:5a:77:db:4a:7c:0e:b2:23:d3:cb:8d:67:0a:
         3c:7e:9a:53:06:46:db:2c:5a:54:07:32:88:cd:99:be:14:4c:
         4f:1b:90:19:15:a8:26:f0:07:f8:f3:53:4e:97:36:b0:c4:ad:
         4e:8a:89:c8:47:fb:2a:e2:65:0a:d9:a0:5b:de:6a:40:26:77:
         c9:77:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:45:59 2024 by rpki-client on console-fra.rpki-client.org