Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/323830333a393863303a3a2f33322d3438203d3e20323634373836.roa
File:                     323830333a393863303a3a2f33322d3438203d3e20323634373836.roa (raw, json)
Hash identifier:          W1zbo0zjUYWW7IRTSe4GAKQiRqOo6KtfU/9XzzDPuv0=
Subject key identifier:   72:01:DB:B8:F5:B6:B3:5E:74:4B:D0:8D:C0:8D:4A:03:A3:3B:1E:F2
Certificate issuer:       /CN=C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B
Certificate serial:       106F7A32E7B14F40FC00A12A1C8688F4D231C85A
Authority key identifier: C1:15:59:B0:FA:CF:2E:1C:A1:30:26:BB:8A:70:BF:9C:12:2A:7A:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/323830333a393863303a3a2f33322d3438203d3e20323634373836.roa
Signing time:             Tue 05 Mar 2024 17:48:58 +0000
ROA not before:           Tue 05 Mar 2024 17:43:58 +0000
ROA not after:            Tue 04 Mar 2025 17:48:58 +0000
asID:                     264786
IP address blocks:        2803:98c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6f:7a:32:e7:b1:4f:40:fc:00:a1:2a:1c:86:88:f4:d2:31:c8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B
        Validity
            Not Before: Mar  5 17:43:58 2024 GMT
            Not After : Mar  4 17:48:58 2025 GMT
        Subject: CN=7201DBB8F5B6B35E744BD08DC08D4A03A33B1EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:32:e3:bf:5d:58:03:9c:80:60:2c:94:95:
                    54:dc:ae:bc:d3:29:f6:6d:e6:19:8b:8a:28:43:3d:
                    fb:b1:19:79:49:6d:bc:41:34:7d:d2:f1:b6:98:43:
                    d2:8f:cc:5c:ce:4a:91:79:5e:88:2a:70:52:37:90:
                    b0:5b:d5:85:c0:7d:03:5e:ae:90:37:b6:1e:20:1f:
                    e4:5b:f5:b8:91:ee:ef:b5:f2:ff:20:92:da:5d:46:
                    7a:91:8f:ac:c2:10:5e:83:f5:09:27:5e:e0:49:1b:
                    30:7f:67:d7:26:d0:12:d0:45:61:9e:4f:04:fd:72:
                    db:fb:66:ca:31:08:01:2a:9c:18:e7:de:7e:95:ca:
                    ce:a0:37:fd:10:5e:f9:bb:a5:97:3d:14:72:16:5d:
                    3f:8f:26:05:55:43:76:20:b8:94:c6:0d:10:bc:76:
                    f1:f8:19:b4:37:5f:c7:e6:52:29:e6:9a:3d:43:f5:
                    9e:1f:d5:a0:0b:77:7f:6f:a1:61:69:63:75:2c:6b:
                    76:31:a7:40:77:9f:49:12:c7:1a:03:54:63:70:01:
                    79:91:fa:65:cc:7f:d4:60:fd:bf:c4:21:a1:bb:28:
                    ba:14:cb:9b:7b:d6:26:6c:e5:ec:fe:91:3d:04:5d:
                    40:b7:51:16:64:c1:0d:87:57:a9:2e:20:7b:48:32:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:DB:B8:F5:B6:B3:5E:74:4B:D0:8D:C0:8D:4A:03:A3:3B:1E:F2
            X509v3 Authority Key Identifier:
                keyid:C1:15:59:B0:FA:CF:2E:1C:A1:30:26:BB:8A:70:BF:9C:12:2A:7A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C11559B0FACF2E1CA13026BB8A70BF9C122A7A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75454880C490A25AC1535A1527B2320E50094EA10005CD3F762C71A2EEF05BC5/0/323830333a393863303a3a2f33322d3438203d3e20323634373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:98c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:df:cf:59:a5:5e:e6:24:47:4b:67:fb:17:68:64:1a:48:
         0b:4f:d4:e4:d0:5a:f3:db:c8:35:6c:ed:4f:d8:40:b7:15:72:
         ce:97:d4:1c:9e:09:2f:0e:9a:73:59:bb:6c:a7:ee:f8:aa:38:
         87:0f:a7:f3:71:53:97:39:e3:10:8b:9b:31:4c:d8:d9:f5:77:
         e5:d9:bf:3b:ae:cf:b5:8e:12:c2:8b:52:0c:fb:61:32:14:26:
         be:6b:2e:67:4f:b0:75:cf:87:1a:f4:ee:a5:20:f1:be:7b:84:
         43:9f:da:4b:43:16:99:30:0d:30:d2:3b:b7:ee:26:c9:21:2c:
         3d:26:a0:24:55:a9:61:2d:b3:ac:4f:fe:d7:d1:0f:06:f9:a4:
         73:69:11:04:a6:3c:f4:83:07:02:d0:1c:8e:61:ed:6a:38:3e:
         79:f5:89:e0:a2:11:84:63:56:91:9b:93:0f:2e:04:b3:e8:97:
         0d:e6:89:6e:b6:11:8d:51:c9:c7:61:dc:df:12:93:4f:86:ca:
         c6:f7:e5:be:4d:70:f8:40:55:de:af:f7:31:75:57:b7:95:7e:
         ea:30:64:f2:9e:13:8c:6c:90:f8:06:83:5f:fb:28:2e:ef:50:
         4b:f2:19:b2:47:82:cc:a7:70:cf:ec:77:e1:00:93:8b:4d:fe:
         b5:e2:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org