Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
File:                     323830333a393465303a3a2f33322d3438203d3e20323639383933.roa (raw, json)
Hash identifier:          YTVEGOvYRF5zxlDuRoFgUMLCyBRnF3+yCP8B32Ql03Q=
Subject key identifier:   DB:7C:B4:A1:92:40:0D:91:51:74:81:40:43:B2:12:4A:C0:A1:7D:B0
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       2059F896A6B175181CC6FFA05CCD7A51005C3760
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa
Signing time:             Fri 26 Jul 2024 16:40:00 +0000
ROA not before:           Fri 26 Jul 2024 16:35:00 +0000
ROA not after:            Fri 25 Jul 2025 16:40:00 +0000
asID:                     269893
IP address blocks:        2803:94e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:59:f8:96:a6:b1:75:18:1c:c6:ff:a0:5c:cd:7a:51:00:5c:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Jul 26 16:35:00 2024 GMT
            Not After : Jul 25 16:40:00 2025 GMT
        Subject: CN=DB7CB4A192400D915174814043B2124AC0A17DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:d5:77:e3:12:f5:f7:2d:06:98:38:26:15:
                    ff:5a:f1:81:c8:5e:48:82:1c:54:0f:a0:74:b5:a4:
                    31:62:13:7a:2c:21:10:65:55:9f:00:d9:ca:4c:bd:
                    2e:3c:33:a9:d1:50:38:8b:5d:a7:c9:ac:b8:fb:f5:
                    74:bd:ab:3b:b4:e8:f6:b6:58:e9:8f:0c:3b:76:e6:
                    9d:04:d2:6b:c8:24:55:2b:67:bf:f5:5c:7c:50:17:
                    79:d0:09:33:18:ed:bd:ef:1e:61:18:52:1f:77:70:
                    5e:8b:12:fa:0f:75:20:b0:8c:45:a3:35:99:b2:d3:
                    36:15:6a:05:6a:94:57:06:17:ef:25:d7:f1:38:5f:
                    8b:f7:80:e1:6d:cd:60:f4:9d:fd:0d:01:80:51:10:
                    33:ab:a0:78:13:3c:70:35:dd:d3:d2:01:09:75:42:
                    8c:78:5f:a3:23:54:99:ca:95:86:6f:72:7d:57:4d:
                    ed:09:14:41:75:35:63:ef:90:2b:c3:7c:85:4f:e3:
                    68:cd:a5:12:e7:ae:ed:d0:87:10:36:f1:90:d6:a1:
                    a7:fc:68:66:52:80:83:97:5c:6e:8d:fe:6c:7d:77:
                    af:88:af:c8:9f:69:27:df:5d:2f:b7:d7:43:84:40:
                    e0:b3:13:4d:54:bc:8a:87:08:1c:3f:34:86:e4:17:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7C:B4:A1:92:40:0D:91:51:74:81:40:43:B2:12:4A:C0:A1:7D:B0
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3438203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:ca:0f:45:40:fd:64:b1:48:33:2d:45:9f:84:82:5e:45:
         61:fe:16:ac:58:d1:1a:36:44:8a:10:eb:a6:4f:2c:68:fd:00:
         c8:de:d7:a5:67:79:b0:f1:10:5c:1e:68:7a:5f:26:d8:5e:08:
         e1:b7:a3:9e:db:d6:e5:16:43:98:ba:d2:d0:a7:bc:f7:6f:d3:
         09:0d:07:23:f5:c5:9f:f2:51:2b:1c:bc:2d:e8:64:50:2a:1b:
         f7:22:d9:c7:ec:8e:a4:1a:33:15:1d:42:80:d9:47:68:b5:a6:
         ac:55:1f:1b:6f:58:87:25:87:a0:b1:af:a9:df:9b:ea:bb:91:
         25:a1:29:1b:47:39:d9:fe:dc:38:f1:07:c1:9c:2b:c0:87:7b:
         92:cc:bf:af:5d:b4:27:46:e9:9e:fa:c6:7d:db:47:a7:45:4e:
         6c:bc:e9:da:1d:e7:c8:8f:21:9b:82:14:7f:37:38:ee:b5:b8:
         fa:d2:2d:94:be:b1:c7:c7:fa:79:e7:f9:27:a5:fd:95:00:52:
         f1:7f:eb:9c:36:c8:e7:13:b5:64:79:0a:36:b0:fa:f4:3f:96:
         01:0d:53:52:56:3e:1e:20:46:be:e9:fd:4a:8b:51:78:4f:d0:
         9d:d2:43:d0:60:1e:c8:06:8f:ef:24:a4:39:42:98:2b:3f:f3:
         d9:e3:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:25 2024 by rpki-client on console-fra.rpki-client.org