Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa
File:                     323830333a626534303a3a2f33322d3438203d3e203238303830.roa (raw, json)
Hash identifier:          xQghAM+4k0a5lncyyujLJHxDB7TW6RMKgIBHTifBLQ0=
Subject key identifier:   B8:4B:8C:72:19:EF:24:34:20:45:06:F1:FF:D0:CA:A8:75:12:E1:30
Certificate issuer:       /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial:       7B9848156284DACC4EF7074F83DA77507B45C44E
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa
Signing time:             Tue 18 Jun 2024 11:20:00 +0000
ROA not before:           Tue 18 Jun 2024 11:15:00 +0000
ROA not after:            Tue 17 Jun 2025 11:20:00 +0000
asID:                     28080
IP address blocks:        2803:be40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:98:48:15:62:84:da:cc:4e:f7:07:4f:83:da:77:50:7b:45:c4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
        Validity
            Not Before: Jun 18 11:15:00 2024 GMT
            Not After : Jun 17 11:20:00 2025 GMT
        Subject: CN=B84B8C7219EF2434204506F1FFD0CAA87512E130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:cb:39:a6:f7:8f:a1:13:e7:b6:d7:25:93:
                    0e:6b:36:0a:68:e9:80:fa:04:0c:4f:2e:b6:af:c7:
                    3a:7b:6c:06:ba:ab:79:13:5e:62:00:f7:e0:c1:5b:
                    7e:64:1f:86:a4:b1:e6:3e:6e:d4:7d:70:9f:42:dd:
                    a7:d3:05:31:cf:a9:0e:d1:8d:da:7a:65:b8:0e:d9:
                    7c:ec:3f:af:ec:70:c5:c9:03:90:29:f8:d6:57:44:
                    b8:85:7d:59:63:27:94:7f:fd:4c:74:5f:64:d2:61:
                    0d:39:72:3c:88:9c:4c:d7:4b:55:bd:16:81:23:b9:
                    2f:6f:99:28:e2:91:cb:1c:c3:51:7e:70:78:1f:77:
                    c9:56:1c:3c:f1:3d:c5:68:30:58:43:71:f4:15:9d:
                    2e:dc:e5:75:e4:49:40:d9:a5:18:ed:e9:46:48:26:
                    cf:15:62:6d:02:26:d6:06:a7:6d:fe:2c:f0:08:5c:
                    bb:e0:04:35:2d:83:f2:90:e7:e1:40:6c:7c:ef:7e:
                    3d:59:df:9e:ec:cd:a2:13:a6:9c:29:c0:d2:52:8a:
                    65:3a:db:cb:c8:d7:41:10:2f:60:62:29:73:de:79:
                    fc:d2:d6:a4:08:a1:de:7f:56:0e:24:6d:72:04:e6:
                    69:a9:fc:b8:5b:e5:d7:31:ae:47:65:25:4b:2f:44:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:8C:72:19:EF:24:34:20:45:06:F1:FF:D0:CA:A8:75:12:E1:30
            X509v3 Authority Key Identifier:
                keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3438203d3e203238303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:c8:a0:ca:21:6b:8c:b6:f8:cd:9d:c7:a9:12:cc:4f:02:
         e5:8f:a2:f2:d2:61:a9:26:ac:d3:02:46:96:59:43:7c:a8:45:
         70:49:d7:61:19:d4:ba:00:44:f2:b4:92:05:f1:1f:d7:8c:27:
         03:92:1a:7c:a0:cb:9d:30:41:9d:88:56:a5:90:41:e4:2d:56:
         30:c2:d0:87:e0:92:ae:87:07:ee:3c:29:59:4b:dc:03:1a:64:
         56:2c:76:1d:ce:f9:ef:42:a4:f2:4b:17:70:fb:2d:d7:ae:f9:
         a1:c0:83:d1:df:19:86:28:c8:43:02:41:dd:13:b4:b2:42:97:
         b4:84:b8:ab:f0:1b:48:af:b8:4f:7e:31:36:d4:b1:d7:d4:f0:
         d6:22:62:4e:a8:4d:74:7d:a4:24:dc:7a:bd:a2:72:4b:ed:fd:
         6b:a5:f7:a7:bd:b3:8b:72:ab:c8:9b:4b:5d:85:3d:db:57:10:
         f4:ac:cc:71:79:31:2d:d4:a4:7a:f5:5f:3e:b8:ec:d3:71:4f:
         b9:82:a6:9d:87:37:c0:fb:73:1f:60:76:43:d1:42:02:a2:f2:
         7d:e8:ce:8c:72:6e:0c:3a:29:68:89:b3:de:2b:94:c3:53:c6:
         2f:30:83:4f:25:52:cf:d5:31:86:96:97:1c:dc:68:d5:f1:f1:
         17:f1:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org