Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
File:                     323830333a313339303a3a2f33322d3438203d3e20323733303230.roa (raw, json)
Hash identifier:          FW5oSS84INbuVS/ug63KwvM/3Cpibe9mLRRdpmX6HNU=
Subject key identifier:   DC:E5:CB:94:3D:39:C0:58:26:D9:BC:4D:E7:1A:28:06:CC:6C:D7:63
Certificate issuer:       /CN=2A36D11026748140183D59FD0064F6742F81E00C
Certificate serial:       05DB78E0FB4A8EFAA131F0DBCF4792747D15B5F5
Authority key identifier: 2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa
Signing time:             Tue 05 Mar 2024 18:14:48 +0000
ROA not before:           Tue 05 Mar 2024 18:09:48 +0000
ROA not after:            Tue 04 Mar 2025 18:14:48 +0000
asID:                     273020
IP address blocks:        2803:1390::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:db:78:e0:fb:4a:8e:fa:a1:31:f0:db:cf:47:92:74:7d:15:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A36D11026748140183D59FD0064F6742F81E00C
        Validity
            Not Before: Mar  5 18:09:48 2024 GMT
            Not After : Mar  4 18:14:48 2025 GMT
        Subject: CN=DCE5CB943D39C05826D9BC4DE71A2806CC6CD763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:1e:32:f3:48:aa:14:e4:c6:29:c0:e4:7c:
                    71:9c:ff:8d:65:d6:8a:f9:c6:77:a7:4d:fe:6c:05:
                    7b:bb:a1:05:33:9d:de:ba:d1:24:7e:66:81:16:42:
                    45:37:33:b6:d3:db:0c:2d:6e:35:84:05:d8:1d:42:
                    47:fc:ab:58:d5:a1:c3:7f:fa:26:e0:2f:98:72:88:
                    6d:77:b6:48:d6:49:1e:0a:9e:70:74:73:ad:1c:c2:
                    1a:18:6b:25:e8:8d:34:62:42:ec:0c:23:f2:34:41:
                    1b:13:12:08:ba:be:16:06:bc:dd:b5:e0:9f:87:ef:
                    6c:8f:c9:15:a9:cf:ab:e0:3b:a3:24:bc:ff:60:89:
                    f1:48:b2:cd:14:75:fe:1d:54:11:c6:2e:b8:58:4e:
                    06:c9:da:0b:ba:84:ef:f7:36:87:9a:7e:3a:3a:cb:
                    c2:b4:4b:a4:15:43:78:81:b2:de:67:41:3e:aa:d9:
                    5b:6a:96:25:9d:d7:55:f4:21:aa:9e:58:df:f5:9a:
                    18:d1:43:9c:1e:4d:3e:3c:73:fc:31:76:f7:a5:a3:
                    40:66:ed:3b:48:54:c3:d3:63:b2:f3:db:66:a4:31:
                    b4:55:c0:13:fe:58:a4:98:bc:08:3e:ab:4e:b2:0a:
                    5f:c4:6e:be:d3:6c:7e:6a:90:b0:be:0f:7e:1e:4e:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:CB:94:3D:39:C0:58:26:D9:BC:4D:E7:1A:28:06:CC:6C:D7:63
            X509v3 Authority Key Identifier:
                keyid:2A:36:D1:10:26:74:81:40:18:3D:59:FD:00:64:F6:74:2F:81:E0:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/2A36D11026748140183D59FD0064F6742F81E00C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A36D11026748140183D59FD0064F6742F81E00C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C90199A26FC4C3B4378784207C6FDEFD924245D60C6B84C87C517DCB0A637F1/0/323830333a313339303a3a2f33322d3438203d3e20323733303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1390::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:99:87:e7:40:ff:d2:ea:81:0c:42:89:12:18:7d:e9:d6:
         25:7f:d7:69:cb:08:19:04:95:8a:5d:c9:66:a9:97:37:86:1c:
         ae:e4:60:df:bf:33:51:33:7a:db:4c:57:0b:06:64:f4:ba:48:
         44:75:7e:23:e5:35:13:1e:25:50:43:de:3c:d9:4b:d2:dd:7a:
         de:0e:9d:0d:15:ca:97:06:89:95:f3:08:bc:e1:f7:5b:1b:4c:
         cf:ed:40:e7:78:11:06:a7:9f:29:69:dc:6f:81:bd:66:34:80:
         1c:ea:da:d5:07:f8:d0:04:50:50:7f:63:79:fd:c3:3d:7a:17:
         51:8b:9a:f0:37:bd:07:1f:2b:e8:a7:af:56:07:8a:56:2c:22:
         a1:ef:a6:90:08:b0:34:47:45:66:b9:bc:02:cf:a7:1b:ce:2e:
         06:6d:b4:62:24:76:0a:f6:55:de:12:f8:b6:3e:3a:53:10:02:
         a3:27:78:0e:c3:60:f2:26:d3:58:cd:e1:48:1e:df:66:e0:a2:
         2e:79:ac:fc:ec:80:a7:42:cb:f5:ab:00:77:56:e8:0c:f6:aa:
         2f:ba:5c:6f:53:95:f9:f5:fd:56:7a:9d:55:66:31:f2:ca:f7:
         49:c4:06:ad:e1:68:ac:04:cc:fd:28:57:4b:6e:0b:5e:37:8c:
         84:11:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org