Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa
File:                     323830333a643539303a3a2f33322d3438203d3e20323732393737.roa (raw, json)
Hash identifier:          TdePmoTrAdknXbhq4k156372Ggn8AGeJ65ZrcTix76M=
Subject key identifier:   20:E0:8E:87:27:0D:B8:A7:12:D6:18:EB:C6:3C:21:62:DF:82:AC:34
Certificate issuer:       /CN=222EFDDF13923986E70CA86A1D360A28BB13F7FC
Certificate serial:       1969675130C5FCE7B3BAD7924E7EBE770E123715
Authority key identifier: 22:2E:FD:DF:13:92:39:86:E7:0C:A8:6A:1D:36:0A:28:BB:13:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa
Signing time:             Sat 13 Apr 2024 18:55:00 +0000
ROA not before:           Sat 13 Apr 2024 18:50:00 +0000
ROA not after:            Sat 12 Apr 2025 18:55:00 +0000
asID:                     272977
IP address blocks:        2803:d590::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:67:51:30:c5:fc:e7:b3:ba:d7:92:4e:7e:be:77:0e:12:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222EFDDF13923986E70CA86A1D360A28BB13F7FC
        Validity
            Not Before: Apr 13 18:50:00 2024 GMT
            Not After : Apr 12 18:55:00 2025 GMT
        Subject: CN=20E08E87270DB8A712D618EBC63C2162DF82AC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:29:5c:ce:25:9b:ce:17:58:6a:b3:d1:6d:
                    68:d5:67:08:06:4b:c0:fd:2d:8a:3b:2b:3f:fe:ab:
                    0e:cc:d3:49:14:87:23:4e:49:00:66:65:dc:62:d7:
                    29:8b:ab:52:43:fe:f0:b3:6b:9e:c1:cf:ff:81:a7:
                    8e:5c:bc:77:3b:e4:e5:b1:3b:c6:12:58:e2:48:f7:
                    81:c4:b6:72:9d:91:8b:f0:da:70:43:3b:07:d3:ac:
                    b0:51:3f:4b:79:bd:c5:53:3c:fd:48:74:ed:d6:11:
                    7a:c2:ed:bb:ac:90:cb:18:b6:64:79:21:f0:7d:a0:
                    06:42:3f:5f:da:e2:05:01:8f:09:0b:68:1a:59:92:
                    92:7e:c4:33:ae:63:ac:2c:1c:da:9a:7f:66:06:c7:
                    79:fc:88:15:99:1b:4d:3a:37:e5:15:55:28:d2:33:
                    f7:37:dd:0c:62:01:c6:d7:ee:b8:60:c7:2f:67:ef:
                    70:54:75:63:b5:56:4b:3e:44:60:8b:9d:5d:17:d1:
                    41:42:59:5f:ab:a8:92:9b:b8:2f:13:f2:ed:9d:d8:
                    66:4c:19:41:d0:e0:d0:76:c4:bb:a3:7f:c6:fb:08:
                    65:6f:75:b1:47:44:54:59:76:5e:fb:0a:75:ed:80:
                    3f:ec:31:3c:41:a0:c9:21:6c:fd:8c:58:f4:86:22:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:8E:87:27:0D:B8:A7:12:D6:18:EB:C6:3C:21:62:DF:82:AC:34
            X509v3 Authority Key Identifier:
                keyid:22:2E:FD:DF:13:92:39:86:E7:0C:A8:6A:1D:36:0A:28:BB:13:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222EFDDF13923986E70CA86A1D360A28BB13F7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/795B9900F1379B146F88717F3C363EF805713EB5262D6B0D6318F27806FCAAD2/0/323830333a643539303a3a2f33322d3438203d3e20323732393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d590::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:97:82:d5:96:51:60:21:f0:85:52:5f:9d:6f:ef:6e:4d:
         8e:11:1a:70:80:c8:e0:83:8e:0a:31:93:97:5e:c8:f0:d5:44:
         5b:af:de:c9:8b:61:67:96:31:c2:0c:66:1a:32:a1:c2:9a:21:
         f2:30:3b:44:bf:10:6d:7a:37:9a:91:2d:ca:28:df:47:67:83:
         42:ff:c8:e9:0f:47:76:61:cd:c6:9f:a9:bc:44:f2:43:6b:2b:
         e8:94:c4:1b:8a:e0:5d:f3:ca:2c:d6:04:1d:6e:f6:de:08:bb:
         1b:1e:e8:ac:de:33:b6:3a:e3:c3:e1:04:6e:05:0e:ad:cb:19:
         65:b1:4a:f3:4c:0e:9d:17:ca:c6:df:84:9b:95:86:1d:29:2b:
         8e:ff:95:0c:40:e4:0a:e2:25:c3:2c:02:c4:a2:dc:d9:01:4e:
         01:f2:ba:71:ee:c6:f3:2d:b6:29:b4:57:d2:9c:58:e7:b4:5d:
         f1:19:23:de:33:92:6a:56:ae:ee:15:93:02:29:95:08:36:64:
         ad:60:5d:b3:a2:b6:c0:cd:d2:88:74:d0:bb:f3:79:a4:c2:f3:
         47:b2:69:94:27:9f:44:18:ef:46:d6:21:f0:8e:1a:9e:6f:3e:
         2d:9f:45:3e:b1:3c:aa:67:a2:fe:c0:16:3a:0a:a4:b2:8d:a2:
         09:d6:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org