Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/323830333a313539303a3a2f33322d3332203d3e20323732393733.roa
File:                     323830333a313539303a3a2f33322d3332203d3e20323732393733.roa (raw, json)
Hash identifier:          aL5JhyCMWsrKu2AbUC3U2cXY5TjDj3nc8X0siN9IVhQ=
Subject key identifier:   A5:E4:9E:4C:50:77:8A:84:F2:D0:54:A8:16:87:3E:8D:0B:3E:3E:5F
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       69345ABEB5D58240E50E95615935F15FD732ABF7
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/323830333a313539303a3a2f33322d3332203d3e20323732393733.roa
Signing time:             Tue 05 Mar 2024 17:42:49 +0000
ROA not before:           Tue 05 Mar 2024 17:37:49 +0000
ROA not after:            Tue 04 Mar 2025 17:42:49 +0000
asID:                     272973
IP address blocks:        2803:1590::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:34:5a:be:b5:d5:82:40:e5:0e:95:61:59:35:f1:5f:d7:32:ab:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Mar  5 17:37:49 2024 GMT
            Not After : Mar  4 17:42:49 2025 GMT
        Subject: CN=A5E49E4C50778A84F2D054A816873E8D0B3E3E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:d1:c1:b0:35:bb:1a:8d:92:67:bb:0f:f4:
                    6c:a9:b3:52:d3:f1:28:15:2d:48:e3:ce:42:51:25:
                    70:b1:4f:0a:5e:61:a7:dd:84:be:69:37:be:bb:0c:
                    9b:fb:20:8c:81:a1:ba:63:d4:a6:f5:db:e9:49:22:
                    9e:10:cd:5f:c9:f9:89:e9:10:35:3e:61:6a:ec:5c:
                    7e:8b:c1:7a:23:83:22:dd:76:23:74:f7:fe:2f:a4:
                    9c:9a:82:78:c5:12:ab:d3:6b:87:68:70:e3:c3:81:
                    fa:90:cb:57:f4:07:91:9a:d8:f4:50:66:fc:97:48:
                    d0:bd:c9:06:88:94:9f:eb:05:81:83:c1:37:b4:4e:
                    36:b3:64:9a:b4:0b:f0:49:9a:36:8b:59:ef:20:bf:
                    c3:bc:99:d4:ca:eb:2e:0e:15:b2:25:0c:0b:56:53:
                    ad:1e:0e:05:6e:5b:4d:94:78:35:db:cf:7a:94:f1:
                    eb:43:11:4f:5c:f2:52:93:2d:4d:b4:37:63:30:e4:
                    3b:24:56:74:fa:8a:48:28:71:75:66:09:3d:64:46:
                    3c:08:0f:48:99:3c:4d:b2:dd:69:4c:db:03:07:38:
                    28:25:1e:56:ee:9b:68:4b:8b:28:44:7f:93:20:1d:
                    5c:a4:89:1c:62:ff:f5:e5:26:06:3c:11:47:d1:98:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:9E:4C:50:77:8A:84:F2:D0:54:A8:16:87:3E:8D:0B:3E:3E:5F
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/323830333a313539303a3a2f33322d3332203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1590::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:c3:69:83:66:9f:7f:e7:a3:bd:0b:e9:1b:16:7d:48:57:
         5b:7a:fa:a4:91:67:84:a2:5e:02:c3:a9:9a:b5:e4:df:08:e3:
         57:af:d9:ff:cf:45:69:3a:71:78:8c:00:f8:97:8c:ea:3a:24:
         e5:2f:1f:b5:9e:3e:e8:5d:8b:46:d2:7b:7b:e6:65:2a:ec:49:
         33:36:75:fe:12:10:4c:31:4b:9f:1a:3a:b7:40:1a:75:d4:84:
         9a:11:a4:f2:5b:23:2b:4e:e9:de:08:14:fa:26:f7:fb:56:9f:
         89:b8:28:c5:f3:6e:d2:30:1b:a0:14:bc:21:d6:e0:6e:d3:a2:
         95:84:08:99:28:b9:71:a7:40:5e:b7:e9:bb:4b:12:c3:a0:df:
         d8:32:a4:bb:dd:30:d9:e2:b6:c6:d3:64:27:8c:e4:d4:b5:b6:
         09:f2:f9:e2:1e:ca:8d:89:03:88:a6:41:28:62:97:1e:9f:36:
         e9:df:dc:da:ab:08:98:02:57:66:e0:4a:a4:63:db:76:1f:f4:
         18:25:3c:90:f8:44:91:31:06:8a:b9:f5:bc:0c:27:4a:d5:af:
         ad:df:0b:27:9b:c9:31:22:f8:5e:41:03:02:80:c1:51:14:ce:
         b1:14:49:9d:04:5f:02:b9:a3:3e:ab:53:29:18:16:f1:84:a4:
         57:84:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org