Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa
File:                     323830333a336236303a3a2f33322d3332203d3e20323639383131.roa (raw, json)
Hash identifier:          GkCtKZ+uaIChc+kGzSCh8iyQ+CBc12+TF0tm018z03c=
Subject key identifier:   E8:C2:BC:6F:D0:CB:D8:F7:FC:CE:B4:1C:6F:11:BA:84:63:0C:8C:2F
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       7A2ADEAF1CC636BE8003279B0A3FC4C501D81702
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa
Signing time:             Tue 05 Mar 2024 17:47:41 +0000
ROA not before:           Tue 05 Mar 2024 17:42:41 +0000
ROA not after:            Tue 04 Mar 2025 17:47:41 +0000
asID:                     269811
IP address blocks:        2803:3b60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:de:af:1c:c6:36:be:80:03:27:9b:0a:3f:c4:c5:01:d8:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Mar  5 17:42:41 2024 GMT
            Not After : Mar  4 17:47:41 2025 GMT
        Subject: CN=E8C2BC6FD0CBD8F7FCCEB41C6F11BA84630C8C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:a9:0e:3c:88:d0:f9:60:14:14:a1:77:eb:
                    3d:1d:6d:96:b2:66:de:28:c6:64:15:48:63:28:2b:
                    a7:37:74:0e:f2:52:ee:8a:d0:b0:c5:04:4b:ab:34:
                    ac:4b:6d:72:dc:ed:66:4d:59:c3:8a:5c:f9:3d:ad:
                    53:08:74:cc:ac:f4:2a:b2:fa:35:aa:56:80:84:fb:
                    a3:74:38:c7:8d:af:ee:09:d9:77:5e:be:f9:83:b9:
                    c1:cf:1c:5a:76:69:c7:d2:d6:fd:d7:e8:59:07:6b:
                    7c:08:4e:05:5d:ed:9c:d1:11:7c:c1:4a:8d:7c:91:
                    e4:c1:2b:28:c7:96:ed:27:86:8a:6d:47:4a:f0:03:
                    2e:0f:fa:13:08:fd:43:31:f5:31:80:cc:a9:32:33:
                    f4:5f:b5:5d:09:4c:02:34:ed:7c:c3:01:a3:18:2b:
                    52:bb:6d:26:96:3e:6a:68:9c:a9:c6:75:28:85:ca:
                    e8:08:ed:e5:ed:06:e2:e7:8a:ce:bf:34:5d:90:14:
                    76:a9:c6:c8:cb:ba:8d:3c:ac:50:24:e8:1d:e9:6d:
                    ba:df:f7:4f:5b:4f:8a:47:d3:e3:f7:1e:f3:6f:4c:
                    22:0f:23:7b:9c:12:32:f3:f6:e8:07:15:b5:24:fb:
                    f6:cb:0c:2d:22:47:dd:0e:36:36:98:1b:54:c9:3d:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:BC:6F:D0:CB:D8:F7:FC:CE:B4:1C:6F:11:BA:84:63:0C:8C:2F
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/323830333a336236303a3a2f33322d3332203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:1c:33:5b:07:b8:44:a8:f3:6f:37:43:6b:8e:20:a8:54:
         8b:cd:27:38:5b:36:33:16:e9:8d:02:d7:78:d6:e1:fc:32:47:
         81:9f:8e:9c:34:5e:7b:1b:37:37:37:4b:6f:17:fa:4e:e9:88:
         60:54:0b:ba:ff:dc:17:53:99:5c:92:77:3e:0b:eb:bb:8e:42:
         72:cd:3c:cb:9f:bc:28:aa:8f:5c:2d:95:40:1d:2f:ef:7a:e1:
         f0:9b:05:48:8c:c1:ae:19:0e:98:89:e8:a2:c2:fa:08:f5:28:
         99:46:c9:4e:eb:3f:03:8d:91:be:07:61:cb:9d:c3:13:61:b9:
         29:72:45:1a:d7:61:01:a0:23:c8:48:ca:33:16:55:1e:9c:f9:
         6f:cc:5a:a0:61:6e:8f:34:0f:3e:19:04:38:b9:30:7d:27:c9:
         d2:c3:99:5f:78:0c:58:c6:69:24:00:9d:b0:5e:3f:11:fe:50:
         5e:77:34:db:2a:57:c0:22:96:2a:7a:48:24:d8:fe:3d:0d:c6:
         71:4e:1d:1f:33:a3:90:1e:32:62:bc:b1:bb:88:33:17:3a:68:
         b4:4c:c3:3d:96:22:c5:3c:cc:b1:8a:92:2a:42:e0:a5:14:fb:
         65:88:cc:c6:21:31:7e:d6:33:81:df:e1:4e:fc:41:50:fa:21:
         f8:b0:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org