Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa
File:                     323830333a316338303a3a2f33322d3438203d3e203136393231.roa (raw, json)
Hash identifier:          5nCO2Rz5EXaRDhCWERGIGQJM02YhXopXw2Womd9ZeVE=
Subject key identifier:   8A:22:28:DF:E0:D3:F1:3C:EC:F3:5F:AA:BE:62:86:66:F5:34:D8:6A
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       21996BEF788FB2CD2F39D2C5AAA43A71D17FF396
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     16921
IP address blocks:        2803:1c80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:99:6b:ef:78:8f:b2:cd:2f:39:d2:c5:aa:a4:3a:71:d1:7f:f3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=8A2228DFE0D3F13CECF35FAABE628666F534D86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:bd:8f:ef:7e:3a:d5:30:3d:9c:71:11:61:
                    59:c7:22:b0:1e:ed:bf:12:e0:c8:36:c3:ef:9c:b4:
                    35:e6:60:68:fa:fa:e0:c4:07:2a:ce:c7:fd:8a:4b:
                    59:2e:e2:21:71:c3:c1:95:16:e0:98:ef:b3:51:b4:
                    8a:7e:52:5a:8a:10:0b:66:f3:8a:36:ed:25:c1:0b:
                    8b:02:25:a4:f1:22:df:b2:d3:8e:83:7d:b0:ca:26:
                    1f:3b:b1:a5:04:f7:51:ae:ac:8e:31:e7:1c:e4:c5:
                    df:34:9f:10:47:32:6d:e9:14:a0:28:31:42:f2:d1:
                    cf:c9:0d:9c:eb:2b:84:e3:52:ca:51:d5:67:8d:64:
                    ab:05:b5:2a:e4:42:52:46:3a:43:de:fc:f6:c3:1d:
                    4a:af:8a:fd:ab:30:62:7f:79:33:37:b4:19:cf:d5:
                    b2:f6:ca:fc:24:21:7b:d3:66:8b:fd:70:f0:ff:4c:
                    5e:c2:39:8c:f8:40:74:b1:f5:6c:22:a5:c8:cc:23:
                    07:95:ce:b8:36:aa:37:dc:5d:3a:38:d2:b3:13:a2:
                    7d:ab:25:6d:ac:da:68:fe:10:7e:2f:93:79:41:8f:
                    c3:d4:07:8d:be:27:6f:5d:e1:9d:09:23:52:34:55:
                    95:e2:5e:78:6a:6c:b9:e5:10:20:20:fd:a9:9e:1c:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:28:DF:E0:D3:F1:3C:EC:F3:5F:AA:BE:62:86:66:F5:34:D8:6A
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/323830333a316338303a3a2f33322d3438203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:2e:e9:df:c6:81:61:8f:67:a3:f1:30:ab:9a:47:b7:63:
         ca:db:11:dd:8b:1a:78:8a:76:07:50:6e:e8:b8:0a:7b:f2:01:
         1c:58:f5:76:92:c0:c5:fb:e6:f9:98:0f:00:3d:94:74:29:53:
         f5:c0:ce:76:66:2a:d0:6b:d0:05:08:a1:e9:62:67:f4:f3:5a:
         36:79:87:f3:e0:c7:ca:b6:9c:ab:9a:39:d9:67:96:17:65:7f:
         9f:15:e5:d3:9f:cd:50:eb:64:dc:ca:da:1b:dd:11:c6:f0:d4:
         71:9c:79:97:94:cf:1d:19:e2:d4:a6:76:9d:2e:b1:e7:6e:8b:
         0c:43:a6:65:3b:35:5c:db:2f:af:6d:e7:c9:82:ae:15:cc:67:
         50:37:e3:d7:cd:c2:a7:c8:92:57:18:a1:05:25:b7:fe:6d:e5:
         02:3b:33:b6:c4:4e:8d:ba:ae:b3:96:43:df:88:e2:e8:93:f7:
         6c:3c:aa:48:e3:af:9c:f0:95:6f:5e:5d:6f:b7:ab:ca:5e:3d:
         40:d6:28:42:c8:cb:41:f7:8c:e3:46:f6:6b:cc:ad:9e:07:a9:
         48:2b:4e:73:a1:be:aa:5e:99:84:3a:32:ff:08:2e:a7:73:93:
         7d:62:20:3c:32:b9:fa:21:ad:38:7e:1b:9f:5c:b4:eb:cc:6b:
         40:76:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:39:32 2024 by rpki-client on console-fra.rpki-client.org