Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa
File:                     323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa (raw, json)
Hash identifier:          7W22A4Optxq/lMOYJ8127MDgZ0itP+gQ9zrnjjI1zv0=
Subject key identifier:   F9:7F:4C:C4:A9:33:B6:DC:08:C5:77:AE:B7:EF:9B:C5:71:65:C1:69
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       569D43820AA34A6743145BA1F7A91E27B47B1EDB
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa
Signing time:             Tue 05 Mar 2024 18:03:50 +0000
ROA not before:           Tue 05 Mar 2024 17:58:50 +0000
ROA not after:            Tue 04 Mar 2025 18:03:50 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9984::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9d:43:82:0a:a3:4a:67:43:14:5b:a1:f7:a9:1e:27:b4:7b:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:50 2024 GMT
            Not After : Mar  4 18:03:50 2025 GMT
        Subject: CN=F97F4CC4A933B6DC08C577AEB7EF9BC57165C169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:31:e7:c0:00:27:f6:fa:e6:ac:64:44:42:
                    3f:da:e8:63:a7:9a:ca:f1:06:b3:9e:e4:99:49:a7:
                    e4:82:db:db:3a:87:f4:46:d9:d2:dd:64:31:37:8e:
                    fc:ea:35:8a:ba:fd:a2:27:93:04:45:0b:ea:3b:2b:
                    75:99:f8:14:98:a8:bc:c2:89:62:11:39:46:4e:9c:
                    8e:83:c7:d4:30:ea:bc:d8:d7:b5:fb:34:d9:9b:51:
                    0a:bb:40:d6:a4:8e:b5:bc:7a:ee:68:84:19:89:f3:
                    bc:06:36:de:c4:d7:3c:24:34:46:58:24:24:49:2a:
                    bc:bb:eb:a3:65:22:be:32:9d:c1:a0:70:52:c3:fc:
                    a1:b8:e8:94:77:ce:43:a6:44:bc:cd:35:be:01:de:
                    fb:12:4f:6f:69:de:52:b0:db:60:07:b3:2d:6e:55:
                    53:30:ba:23:cf:21:4f:fd:bf:84:da:a5:29:10:ca:
                    76:6e:9d:68:93:92:5e:8f:19:15:04:d5:42:d3:e1:
                    41:c1:0c:4a:15:ac:22:01:66:cf:9f:97:5e:c6:18:
                    66:d5:94:5f:d0:1b:60:61:19:98:4f:05:0e:3d:e6:
                    d0:29:17:c4:44:4d:df:00:47:e4:92:3d:d0:7c:8f:
                    50:ab:14:da:ae:c1:6b:ac:8c:c8:3d:70:66:dc:fc:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:4C:C4:A9:33:B6:DC:08:C5:77:AE:B7:EF:9B:C5:71:65:C1:69
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393938343a3a2f34382d3438203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9984::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:75:a3:f5:9a:0d:05:f4:45:00:16:4c:b9:8f:56:1d:b3:
         aa:bb:4d:f1:bb:0d:03:88:4b:19:cd:d2:1b:8d:97:f7:b0:a2:
         5c:90:7f:5f:39:f3:ee:a7:86:33:75:69:2d:72:8c:51:fe:3c:
         14:4e:03:7d:60:33:b3:c8:26:23:c1:75:8e:76:ff:6f:e1:bf:
         1a:5d:b1:3e:f5:87:a2:ca:8a:1d:7f:2d:98:bb:3b:a6:6f:c2:
         cc:60:1a:f3:6c:18:29:4e:f8:c9:3d:0a:1d:a8:95:53:0a:18:
         19:af:10:bb:c0:46:35:52:ef:7d:bc:5c:b5:4b:f8:07:ac:d9:
         ff:e6:50:dc:59:cd:f9:b6:1c:38:95:78:79:b6:71:af:67:e1:
         45:da:28:00:fd:ce:c7:7b:75:aa:5c:a5:8e:09:24:bc:11:56:
         d2:2a:34:9f:d1:b3:a7:d0:81:07:46:37:22:22:8c:e8:9f:c4:
         a1:c7:b6:6a:b0:6e:ee:00:e2:ba:34:fb:09:b7:23:b1:f8:4d:
         7b:84:d3:cc:50:ed:4a:69:b4:b4:d4:e4:40:ba:a5:0b:cc:dc:
         3b:fb:61:74:cd:29:5a:72:54:77:3d:27:c3:8d:75:ae:a6:fa:
         a8:e1:ef:f1:12:0a:bc:08:55:c3:f5:fa:87:dc:ab:90:f8:3b:
         93:cf:ce:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:30 2024 by rpki-client on console-fra.rpki-client.org