Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa
File:                     323830333a366161303a3a2f33322d3332203d3e20323636383732.roa (raw, json)
Hash identifier:          JY9dUsGdo9W1JHOdDEuum4G7Lpv0E2iCFpn+qmDy/uY=
Subject key identifier:   95:C4:E5:BC:E5:61:09:4B:FF:3C:F8:CA:1D:7B:11:C9:2B:C5:6E:03
Certificate issuer:       /CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
Certificate serial:       60E82C71F271EB21B7E9E6F94F90A481B077A439
Authority key identifier: 90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa
Signing time:             Tue 05 Mar 2024 18:07:33 +0000
ROA not before:           Tue 05 Mar 2024 18:02:33 +0000
ROA not after:            Tue 04 Mar 2025 18:07:33 +0000
asID:                     266872
IP address blocks:        2803:6aa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:2c:71:f2:71:eb:21:b7:e9:e6:f9:4f:90:a4:81:b0:77:a4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900922D8B59AC326DD138FED51BC50D7590E1F0A
        Validity
            Not Before: Mar  5 18:02:33 2024 GMT
            Not After : Mar  4 18:07:33 2025 GMT
        Subject: CN=95C4E5BCE561094BFF3CF8CA1D7B11C92BC56E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:ee:06:5d:71:2d:05:d9:01:8a:62:02:86:
                    c1:f8:a9:f6:f7:de:65:3b:78:4a:d5:d4:49:22:64:
                    03:6f:a1:32:74:87:5b:a3:65:f1:57:b7:87:24:88:
                    fc:dc:4f:4b:5f:f0:c3:b9:07:f3:85:65:21:6a:ce:
                    99:07:95:8d:08:d8:f2:a8:95:20:f7:89:fc:ea:cc:
                    d2:ee:39:3c:3c:f4:00:16:93:1c:66:ca:17:13:97:
                    2e:61:99:2a:9b:e2:ea:23:d8:23:1b:cb:8b:9f:d7:
                    7b:dd:ab:e7:7e:7b:29:04:53:7c:93:d8:f9:0d:b4:
                    83:70:a0:3f:f1:6a:e9:4b:3d:c5:ab:04:56:71:81:
                    3d:36:20:3d:c0:b4:ab:2b:8b:0d:bf:da:ed:37:dc:
                    3f:2a:20:25:59:ff:15:7c:70:01:ce:22:03:1c:c4:
                    a2:7b:04:c8:58:dc:e9:4f:3c:a1:9c:97:82:42:78:
                    94:c6:72:cb:14:09:f9:38:3b:ef:bc:20:d8:29:8c:
                    f1:00:a5:5b:62:bb:cb:d6:dc:62:66:2f:d0:85:fa:
                    4b:83:60:e9:57:92:a7:1c:6d:60:79:39:46:20:bd:
                    09:32:2b:23:66:39:35:e0:6a:9b:73:36:50:1d:56:
                    f1:c1:c2:2c:56:24:7d:75:41:9e:93:de:16:7a:5f:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C4:E5:BC:E5:61:09:4B:FF:3C:F8:CA:1D:7B:11:C9:2B:C5:6E:03
            X509v3 Authority Key Identifier:
                keyid:90:09:22:D8:B5:9A:C3:26:DD:13:8F:ED:51:BC:50:D7:59:0E:1F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/900922D8B59AC326DD138FED51BC50D7590E1F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566149848928EB2A75AFD405A3B13A25A2BFF3EFB05D1AA8D0E7D869518DF8F8/0/323830333a366161303a3a2f33322d3332203d3e20323636383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:60:af:9e:c1:01:0c:06:d6:26:e2:63:d4:51:85:f5:33:a6:
         31:7e:ce:d2:82:d7:a9:a9:48:9a:2e:0b:57:39:ba:e7:fa:7d:
         1e:e0:bf:fe:97:fb:06:6f:89:87:42:db:49:51:3b:19:9f:a8:
         be:04:65:99:fe:8f:21:5f:71:c4:a7:83:9e:cb:44:c3:06:30:
         4f:b2:6b:01:30:c4:0a:dc:ab:65:db:d5:85:7a:a3:82:c1:62:
         10:b1:8b:66:ff:01:76:68:a5:a7:13:34:8a:f1:4a:e3:9e:60:
         d4:1c:5c:f9:87:45:63:1d:6c:2d:48:0e:88:a5:67:c3:ec:29:
         88:3f:32:8f:c6:2f:96:3a:7f:9e:16:0b:7f:76:8d:80:1a:04:
         03:2c:af:66:c5:50:b1:6b:bc:a1:07:4c:e4:5f:1d:c5:1c:93:
         90:58:b3:47:0a:0e:46:80:ac:f3:59:b7:bb:d8:6a:52:07:a4:
         ab:8b:eb:16:fa:42:b5:d4:92:2a:6d:fd:34:84:34:06:73:4d:
         5c:24:f3:b8:d9:2c:be:61:7d:19:5d:0f:98:fa:0b:d7:20:f4:
         b1:35:de:25:a9:ee:d2:7f:35:f7:d3:26:20:81:7b:b8:c3:3d:
         e3:06:4a:1a:83:74:42:e4:07:b2:8c:2d:4a:1b:24:ea:7e:03:
         f2:fa:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org