Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa
File:                     323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa (raw, json)
Hash identifier:          z3zXGGrZm0Bj3jvChQHEoF4lgoCobJXCuAIHYIEZAWQ=
Subject key identifier:   A9:6D:C6:86:B0:8D:B4:F4:E2:09:D3:9A:71:E0:39:82:CA:EE:EA:EB
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       747AAF858CF1388EB36C2789E068999E759DAE88
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa
Signing time:             Tue 05 Mar 2024 18:21:05 +0000
ROA not before:           Tue 05 Mar 2024 18:16:05 +0000
ROA not after:            Tue 04 Mar 2025 18:21:05 +0000
asID:                     265799
IP address blocks:        2803:2540:b7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:af:85:8c:f1:38:8e:b3:6c:27:89:e0:68:99:9e:75:9d:ae:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Mar  5 18:16:05 2024 GMT
            Not After : Mar  4 18:21:05 2025 GMT
        Subject: CN=A96DC686B08DB4F4E209D39A71E03982CAEEEAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:ca:04:97:b8:9e:04:31:ac:42:a4:96:9f:
                    c2:7a:a0:51:a9:71:cc:24:ac:88:f4:e3:4c:c6:20:
                    9f:aa:0f:1d:bd:a9:1b:2f:e1:a2:3e:34:f1:54:3c:
                    dd:0e:7b:ff:a9:85:04:71:dc:dd:2e:d7:09:06:cf:
                    cd:14:0b:b3:b3:bb:95:58:14:53:f1:5f:21:a1:f8:
                    5e:7a:51:27:a4:22:92:f7:3c:a5:c9:92:a2:59:07:
                    df:27:40:84:05:2d:99:bb:8d:41:55:36:f3:47:60:
                    23:1e:5c:4e:73:b1:74:1b:c3:3d:11:c5:d8:19:93:
                    32:a2:3e:db:0c:4f:79:1b:a3:52:a4:2f:f1:01:e6:
                    e2:bd:8d:f6:56:5f:6e:6e:1f:69:41:43:67:9a:32:
                    aa:2c:95:dc:ff:7d:3b:2e:48:ed:89:18:47:c1:cf:
                    13:37:3a:77:c3:80:1c:fe:b0:75:14:ba:2c:e2:06:
                    7e:d5:0e:e5:6c:d5:4d:30:d2:77:b0:44:a5:78:46:
                    74:e0:2c:11:0f:ea:91:a3:5e:ea:f9:55:a6:31:07:
                    bb:4b:dc:c9:e2:31:44:86:3e:a9:64:75:93:2a:99:
                    1e:72:df:bb:42:02:5f:bb:a0:c1:e5:e5:43:41:c9:
                    9f:6c:a7:6a:4b:8e:8d:b6:a9:9d:02:df:50:7b:d0:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6D:C6:86:B0:8D:B4:F4:E2:09:D3:9A:71:E0:39:82:CA:EE:EA:EB
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a62373a3a2f34382d3438203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:b6:f2:0c:40:28:ef:cc:7c:2c:13:c1:94:70:4b:2a:08:
         1c:fd:0f:44:a0:cf:25:88:f1:0e:b9:7a:28:c9:37:eb:f9:f5:
         05:10:3d:39:41:86:ea:e9:d1:2f:ae:6f:50:7f:8d:aa:b3:78:
         ce:76:5f:13:e5:96:8f:ae:78:ef:0d:aa:a3:0f:0d:85:ba:b6:
         a7:d3:23:b2:3e:2e:14:88:3b:d2:a9:87:61:b5:56:e2:89:eb:
         c0:83:71:82:1b:3d:4b:b3:cf:1c:58:d7:2f:5a:f2:ef:4f:9e:
         0f:8a:e2:1c:a4:cc:eb:ab:98:89:6c:e1:a9:9c:aa:8d:76:bb:
         25:8c:bf:8e:54:81:40:05:aa:64:58:22:39:a8:21:d6:bf:dc:
         ed:61:8e:d1:0b:c7:d0:ee:9d:41:72:e0:2c:4f:ed:47:c4:30:
         68:0f:c1:4b:ae:59:2c:50:81:c8:9f:35:44:2a:60:02:cf:e9:
         8c:06:2d:40:70:cc:c7:32:be:4a:c7:fe:0a:ca:37:1f:3a:68:
         f1:16:90:9f:f5:a5:02:55:18:9c:51:fd:ed:9a:02:bb:a0:9a:
         35:fc:8f:7c:2e:4b:ca:4f:ba:1d:fe:6b:7b:f8:68:8f:f4:00:
         4d:04:ba:4e:d7:eb:b1:1c:6a:e9:fb:05:5f:b9:3b:97:e6:0e:
         55:b2:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 14:45:36 2024 by rpki-client on console-fra.rpki-client.org