Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/323830333a613132303a3a2f33322d3332203d3e20323636363536.roa
File:                     323830333a613132303a3a2f33322d3332203d3e20323636363536.roa (raw, json)
Hash identifier:          sV7JnQx7mGkTDL7N7Z9oK2E/Se4lPCq0VKeRrCkCpbc=
Subject key identifier:   39:F2:98:55:0B:CB:92:3A:F2:50:B1:80:62:7C:46:99:09:CE:9A:EF
Certificate issuer:       /CN=3CEC774E560107DD99F52374592B3A3BDD8FB69C
Certificate serial:       2AA640DC0B645D1161EE812C861F18AD400933C3
Authority key identifier: 3C:EC:77:4E:56:01:07:DD:99:F5:23:74:59:2B:3A:3B:DD:8F:B6:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/323830333a613132303a3a2f33322d3332203d3e20323636363536.roa
Signing time:             Tue 05 Mar 2024 18:01:39 +0000
ROA not before:           Tue 05 Mar 2024 17:56:39 +0000
ROA not after:            Tue 04 Mar 2025 18:01:39 +0000
asID:                     266656
IP address blocks:        2803:a120::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a6:40:dc:0b:64:5d:11:61:ee:81:2c:86:1f:18:ad:40:09:33:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CEC774E560107DD99F52374592B3A3BDD8FB69C
        Validity
            Not Before: Mar  5 17:56:39 2024 GMT
            Not After : Mar  4 18:01:39 2025 GMT
        Subject: CN=39F298550BCB923AF250B180627C469909CE9AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:94:01:2c:2d:dd:2d:44:33:3c:1c:b3:66:
                    93:31:ad:5f:b3:fb:e7:fe:31:16:bb:95:b9:e0:4a:
                    2d:be:ad:d4:9b:a4:11:bc:45:fe:67:c0:73:03:0b:
                    74:27:fa:91:55:92:65:be:93:60:3c:ca:9a:7a:72:
                    36:be:4c:69:ca:16:6a:6c:74:22:f9:e3:20:50:42:
                    b5:06:86:e0:b8:90:72:f4:b0:60:c7:d6:40:8e:c4:
                    95:71:a4:ef:f2:97:0f:fc:7a:b3:79:0e:64:4c:e7:
                    fc:ea:bd:fc:0d:0b:0f:1e:30:2f:b3:a1:85:34:2f:
                    ed:15:be:3b:61:c8:c5:a6:60:89:a0:08:c1:e3:f8:
                    49:1e:46:4e:33:82:5d:a6:5d:5b:39:72:96:89:fb:
                    b0:bd:7e:27:01:cf:40:87:11:a5:60:4e:0f:99:3b:
                    66:4b:9c:cf:d2:75:ee:c9:64:18:45:8c:1c:9c:36:
                    26:ab:29:0e:47:eb:0f:55:21:41:ac:f7:df:70:16:
                    63:fa:b3:a8:fb:e8:31:7e:b0:f5:c3:3e:78:13:01:
                    49:98:72:ac:21:55:c4:89:72:cd:1c:c1:50:9c:5c:
                    61:8b:73:94:9d:7b:97:59:5b:a8:4d:59:79:c6:ba:
                    f7:23:dd:1c:0d:1e:97:bd:06:8e:d2:44:4b:11:12:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F2:98:55:0B:CB:92:3A:F2:50:B1:80:62:7C:46:99:09:CE:9A:EF
            X509v3 Authority Key Identifier:
                keyid:3C:EC:77:4E:56:01:07:DD:99:F5:23:74:59:2B:3A:3B:DD:8F:B6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CEC774E560107DD99F52374592B3A3BDD8FB69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93CB3AAFCAA2B1349BBC11DDCBEB953F62C31B2D9B677753B95D986901445848/0/323830333a613132303a3a2f33322d3332203d3e20323636363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a120::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:08:37:b5:34:45:1d:f3:c0:9e:da:39:c3:68:a7:a5:6e:2b:
         29:8b:87:dd:af:38:7b:e4:c6:78:a1:75:11:fa:9d:6d:7c:da:
         16:08:52:b4:c5:56:2b:6d:bc:2a:8d:b4:3d:47:3c:7b:ee:ee:
         85:90:54:d0:31:ba:5c:e9:65:d9:c9:86:96:86:2f:c9:de:0e:
         96:9f:f9:90:57:bc:b2:3b:5c:28:17:cf:da:bd:cb:54:b4:f3:
         c0:fc:20:45:a8:6e:1d:f7:90:7d:b7:3a:ad:01:fb:19:fd:54:
         51:44:55:a6:78:b0:67:a0:42:44:77:ab:1f:77:d8:94:9b:4e:
         37:b9:cb:74:b2:ef:34:46:ac:cc:c0:1d:ac:92:9e:8a:7e:83:
         5b:a0:61:56:1e:a4:3f:2b:c6:22:7b:3a:34:bc:0d:04:8a:f8:
         bd:47:fe:f8:58:16:9a:ae:af:89:c4:c2:6b:21:b0:c8:c6:6b:
         9b:16:c3:22:07:a7:57:42:51:7c:be:76:42:f4:d1:fa:86:f2:
         34:48:69:a5:9f:d0:8b:d8:32:94:74:f6:1b:4f:dd:22:01:35:
         a2:9c:2a:8d:15:21:ee:71:93:be:c6:78:17:d8:d8:77:4b:7f:
         a4:ce:fe:ad:61:1e:bd:3f:fa:91:73:b3:5b:ea:ab:66:bb:ec:
         25:83:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:04 2024 by rpki-client on console-fra.rpki-client.org