Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/323830333a393961303a3a2f33322d3438203d3e20323637373135.roa
File:                     323830333a393961303a3a2f33322d3438203d3e20323637373135.roa (raw, json)
Hash identifier:          b0bT3Vvp7mN6jAhQGCuS8XWh+w/HZwfTjw+rTu09yYE=
Subject key identifier:   93:99:EE:F4:6C:E2:F4:46:0C:F3:1E:5E:8F:07:A5:4B:F8:EE:A9:75
Certificate issuer:       /CN=EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65
Certificate serial:       595527D1C86CA52E17D06D830D7042F1F4888ED5
Authority key identifier: EA:B9:A1:B2:3D:B0:94:4F:2F:5A:17:B7:4D:E1:E6:BB:ED:BA:2D:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/323830333a393961303a3a2f33322d3438203d3e20323637373135.roa
Signing time:             Tue 05 Mar 2024 17:57:49 +0000
ROA not before:           Tue 05 Mar 2024 17:52:49 +0000
ROA not after:            Tue 04 Mar 2025 17:57:49 +0000
asID:                     267715
IP address blocks:        2803:99a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:27:d1:c8:6c:a5:2e:17:d0:6d:83:0d:70:42:f1:f4:88:8e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65
        Validity
            Not Before: Mar  5 17:52:49 2024 GMT
            Not After : Mar  4 17:57:49 2025 GMT
        Subject: CN=9399EEF46CE2F4460CF31E5E8F07A54BF8EEA975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:e9:9f:19:45:de:b0:0b:ed:e2:f2:1a:7d:
                    ae:87:9c:79:f7:40:92:df:2a:4f:78:b7:d0:97:64:
                    15:d0:93:15:c4:2f:9e:05:be:1d:8f:93:03:d4:57:
                    7c:0c:4b:eb:04:52:6f:78:27:c5:2c:95:ce:ef:56:
                    ba:10:18:56:cd:49:4f:c9:5d:e1:fd:c8:c0:79:d3:
                    9b:65:71:ce:a9:1e:fc:9d:45:2c:73:aa:28:85:f6:
                    6f:af:2c:c7:56:02:de:12:9d:17:3d:0e:9f:04:66:
                    e3:f8:d9:ea:3c:45:02:73:07:28:60:c8:6d:41:4d:
                    65:9a:49:f8:4b:48:84:4d:ed:e5:eb:7e:ed:5f:f1:
                    35:f7:f7:da:5b:c9:57:96:02:3d:d6:c0:c6:31:20:
                    f5:b1:d1:4c:37:69:e2:33:9f:34:6f:13:fb:21:7f:
                    28:17:41:27:a5:70:54:22:3b:8e:90:ae:b0:00:82:
                    05:ef:cf:38:cd:21:37:e7:95:18:53:52:60:70:59:
                    8f:e7:61:31:98:87:f9:54:da:06:d2:e8:d0:f6:08:
                    16:d8:83:17:aa:05:80:0b:a1:9e:bc:1e:47:8b:d7:
                    1a:9b:7f:46:e9:6e:0c:1a:03:04:d1:e5:ce:84:d2:
                    ff:7f:b8:ce:72:75:7e:0c:80:b1:d6:b3:15:2a:ae:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:EE:F4:6C:E2:F4:46:0C:F3:1E:5E:8F:07:A5:4B:F8:EE:A9:75
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:B2:3D:B0:94:4F:2F:5A:17:B7:4D:E1:E6:BB:ED:BA:2D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/323830333a393961303a3a2f33322d3438203d3e20323637373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:99a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:69:95:12:17:b7:5d:ff:da:8e:99:d1:e8:a0:cd:fd:ac:68:
         a2:65:e3:e8:1e:9f:ad:cb:74:78:73:de:d2:84:e2:d2:8d:45:
         4e:08:21:79:ff:83:19:ae:50:d9:89:42:88:b1:b0:66:a2:03:
         db:0a:10:36:51:06:4e:9a:51:06:57:4c:ca:91:0b:b0:21:85:
         b3:18:08:b7:cd:71:3e:e8:f5:d4:30:d1:61:cf:4c:ca:d7:a9:
         e4:3f:ee:ab:c8:ca:d9:ed:b0:87:0c:a6:d6:0f:18:df:23:a8:
         cb:cb:ec:ed:74:21:f3:0d:24:4c:c4:c8:14:5f:aa:99:27:51:
         a6:0d:2b:2f:84:73:1d:43:53:71:5f:fa:08:5a:7f:e3:7c:72:
         b2:2f:5c:b9:ef:54:47:04:8a:a6:db:1f:d0:09:42:a7:dd:75:
         1f:02:3e:f4:96:28:ed:eb:20:07:e8:43:fb:f1:2a:0b:74:43:
         86:a7:e7:f7:89:5d:71:e7:04:ef:42:97:aa:61:8d:ea:35:7c:
         64:c6:6a:d7:60:24:3e:ca:13:e2:31:20:64:5c:86:4b:86:2f:
         9f:e4:ee:b7:c5:82:f2:ec:09:e2:ac:3b:2e:7c:f1:7d:ff:da:
         a8:ff:53:15:0f:bd:cc:98:05:b7:15:cb:b5:f6:07:be:3c:e9:
         bb:7e:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org