Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
File:                     323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (raw, json)
Hash identifier:          gJzIAABxnni406JorlNLKnwgFBk2C+6lfUjAqBjE0d8=
Subject key identifier:   5A:B3:96:99:63:29:D8:3C:72:CA:DF:B8:FA:27:01:DA:8A:BA:A1:29
Certificate issuer:       /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial:       4735A01A1DB32AE923FEE7D63A4675733AEB1144
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
Signing time:             Tue 05 Mar 2024 17:57:05 +0000
ROA not before:           Tue 05 Mar 2024 17:52:05 +0000
ROA not after:            Tue 04 Mar 2025 17:57:05 +0000
asID:                     270078
IP address blocks:        2803:4be0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:35:a0:1a:1d:b3:2a:e9:23:fe:e7:d6:3a:46:75:73:3a:eb:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
        Validity
            Not Before: Mar  5 17:52:05 2024 GMT
            Not After : Mar  4 17:57:05 2025 GMT
        Subject: CN=5AB396996329D83C72CADFB8FA2701DA8ABAA129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:8e:05:ff:2a:64:0e:bc:3e:1c:7e:c3:87:
                    ec:51:c3:18:07:0b:ad:80:e6:28:d5:13:fd:9b:74:
                    81:6a:73:8e:4c:e4:ea:e7:88:10:13:b5:9f:8d:8f:
                    a1:19:57:78:49:cd:93:52:e8:59:b3:9b:13:62:0c:
                    cc:95:22:25:0c:a7:82:78:ef:3e:c6:9a:67:6a:f0:
                    bc:a4:e7:bd:1f:d0:c4:1a:a6:70:73:87:d0:1a:f5:
                    6a:f1:ee:af:e5:43:3d:39:ad:47:84:82:6c:ac:4d:
                    d5:7c:e6:95:50:81:da:c8:c7:77:a1:99:49:95:3e:
                    38:7a:b0:48:59:9c:a1:69:e1:24:55:87:f5:6f:69:
                    9e:56:3c:88:b2:95:0a:5e:4e:ec:e4:3e:3d:ec:19:
                    87:93:90:94:06:81:20:a5:59:ee:9c:ef:4e:69:4c:
                    9b:d0:8b:1f:a8:0c:be:f3:c4:14:d2:ac:27:40:59:
                    32:40:67:97:03:76:ef:5e:1f:1b:8b:52:61:5d:a7:
                    4d:43:07:da:55:0e:ef:61:90:7a:e3:80:1e:fa:0e:
                    ca:26:e1:d7:f5:fe:d7:d3:38:84:0e:e9:76:12:c7:
                    12:38:1c:af:ba:df:4d:91:2b:48:33:a6:48:cd:7e:
                    88:6c:fc:58:49:47:28:3a:c3:71:1a:7c:10:64:d7:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B3:96:99:63:29:D8:3C:72:CA:DF:B8:FA:27:01:DA:8A:BA:A1:29
            X509v3 Authority Key Identifier:
                keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:0c:32:ba:cb:c0:4f:ab:e0:58:39:b4:18:85:8d:60:e8:
         6a:33:94:08:3b:e5:65:65:75:28:76:84:cb:fd:f6:22:92:89:
         e7:b9:52:32:df:c5:ee:bb:93:01:95:a9:e4:d9:c8:33:b6:4d:
         44:f8:54:13:9c:04:53:43:5f:2c:f0:0a:21:eb:0d:1f:bc:9d:
         64:fa:84:b8:d1:b4:ac:eb:79:f5:fb:62:28:21:63:93:e8:b8:
         db:e5:66:9d:fd:44:89:2a:1d:03:da:92:94:da:11:16:7f:72:
         05:bb:7a:98:93:1b:b2:2b:b7:f6:45:ad:42:4a:3b:ca:25:58:
         f2:13:30:e5:d2:0b:eb:36:df:a6:74:97:91:6b:67:7e:0b:fc:
         a3:15:15:9c:ff:24:1b:f0:3b:63:26:9d:3b:65:6c:ec:d4:41:
         c5:c0:83:c1:d2:9f:f0:cb:40:1c:55:f1:6b:61:a4:98:6a:3c:
         20:85:3c:74:e0:af:16:19:c0:98:6c:92:5f:9f:45:cd:9a:60:
         29:fe:99:0f:6a:81:2f:1c:dc:b4:d5:39:57:3e:70:9f:c7:68:
         89:cf:44:45:72:4b:41:96:16:43:ab:8c:ec:10:30:0d:81:37:
         f3:cc:6e:85:d0:bf:0d:c4:22:13:95:68:2c:b0:82:74:e2:5c:
         9e:f7:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org