Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa
File:                     323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa (raw, json)
Hash identifier:          sjp5SFDeTpg/agiwH6un4Nitg3wgkO7l052tNjRyhRU=
Subject key identifier:   B3:AA:98:64:51:75:CD:CB:A6:82:A8:1F:CC:F6:D8:28:48:AE:21:4C
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       49FE1A74ABFF48925DFDB4C913FFB9DA2DFA5696
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa
Signing time:             Tue 05 Mar 2024 18:03:43 +0000
ROA not before:           Tue 05 Mar 2024 17:58:43 +0000
ROA not after:            Tue 04 Mar 2025 18:03:43 +0000
asID:                     271842
IP address blocks:        2803:b0e0:9982::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:1a:74:ab:ff:48:92:5d:fd:b4:c9:13:ff:b9:da:2d:fa:56:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:43 2024 GMT
            Not After : Mar  4 18:03:43 2025 GMT
        Subject: CN=B3AA98645175CDCBA682A81FCCF6D82848AE214C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:13:a5:a2:3d:95:d1:19:5c:b6:82:fb:44:
                    e7:79:24:5e:7c:5a:89:ad:b3:50:16:5f:99:43:44:
                    5b:b2:13:71:5c:95:fa:a1:15:af:12:c2:1e:98:9e:
                    e2:fb:45:a2:ee:4f:34:93:f0:eb:49:6f:59:73:67:
                    5e:0d:b3:4e:d5:a4:0a:5b:99:8d:25:7d:a8:d0:d7:
                    0a:ac:80:1a:2b:c0:86:a3:fa:df:1b:7a:e2:06:d6:
                    9d:cd:8f:91:86:25:95:66:97:23:20:9e:ce:51:ca:
                    28:2b:f0:ff:e9:d9:e0:28:fd:c0:87:d0:ef:01:6f:
                    d6:42:8b:ca:ec:45:ca:a5:97:78:fd:4d:4f:94:91:
                    cd:d2:d0:dd:44:cf:d9:41:c9:5e:3c:38:bc:fc:72:
                    3b:65:02:12:76:45:5d:65:80:af:24:fd:95:e1:63:
                    1b:76:19:fb:34:20:6f:e4:84:40:d4:ae:1b:de:a8:
                    82:6e:c5:65:85:60:a1:8b:d9:2b:40:7f:c4:3d:2d:
                    35:45:cb:a8:9a:84:60:3d:f1:5f:03:a5:02:e5:5f:
                    42:7a:ed:e2:47:43:1b:7e:66:27:72:83:52:82:09:
                    43:1b:c0:1f:03:ea:37:2e:3c:04:8a:dd:94:16:74:
                    56:30:96:75:e2:e6:50:09:99:80:54:55:be:39:f9:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:98:64:51:75:CD:CB:A6:82:A8:1F:CC:F6:D8:28:48:AE:21:4C
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938323a3a2f34382d3634203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9982::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:c2:74:3b:09:0d:a3:49:9a:46:0f:2d:7e:46:d8:0d:d4:
         e2:8b:2a:18:db:2f:b5:8e:82:27:ce:d2:69:d9:ac:1c:66:11:
         80:8a:c3:3a:d7:ba:6c:7c:6f:70:13:b6:db:fc:19:d6:ea:f4:
         de:91:79:85:bc:18:bf:91:43:16:1b:5a:c0:c7:67:ec:41:4a:
         e2:97:ff:69:f6:f6:9c:16:ed:df:d8:ad:9e:9a:c3:34:f6:9b:
         be:4e:d8:dd:69:27:a2:4f:d5:16:bd:c4:b1:b1:08:b6:89:20:
         0b:74:67:11:b0:38:fd:4d:5f:2d:e1:58:95:c8:0c:61:fe:e1:
         9b:ba:2b:ea:fd:80:f5:7f:ea:80:ad:8f:cb:87:91:17:e4:80:
         bd:35:04:ae:4f:1d:20:9d:69:57:33:02:63:a0:f2:db:63:e7:
         9f:f7:27:a6:3d:54:47:05:bc:af:e3:09:47:c5:8c:06:02:c9:
         fa:37:bd:5a:76:4d:b5:32:4e:62:f4:72:24:11:82:c9:f7:a5:
         38:be:b1:b4:f8:45:73:d7:fe:d0:b0:6b:e2:aa:78:ca:30:b9:
         9e:fe:5c:a2:4e:8c:16:f0:12:9e:e9:cf:d9:b6:4f:7e:3d:21:
         00:d8:07:e2:3c:29:3d:ee:96:6b:48:1d:49:4d:97:36:fb:6a:
         09:45:d7:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org