Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3332203d3e20323636363938.roa
File:                     323830333a346432303a3a2f33322d3332203d3e20323636363938.roa (raw, json)
Hash identifier:          QEEg3pwagI1QdhxxISDByrZzCXc5VSPsi5Qc59aToUY=
Subject key identifier:   97:60:B4:A0:79:87:22:AF:45:00:98:55:CF:9C:24:27:65:89:C6:75
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       5921BA71053B229ECE6826DA2549BB1E819F0F98
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3332203d3e20323636363938.roa
Signing time:             Sun 20 Oct 2024 15:50:00 +0000
ROA not before:           Sun 20 Oct 2024 15:45:00 +0000
ROA not after:            Sun 19 Oct 2025 15:50:00 +0000
asID:                     266698
IP address blocks:        2803:4d20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:21:ba:71:05:3b:22:9e:ce:68:26:da:25:49:bb:1e:81:9f:0f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Oct 20 15:45:00 2024 GMT
            Not After : Oct 19 15:50:00 2025 GMT
        Subject: CN=9760B4A0798722AF45009855CF9C24276589C675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:6d:81:3a:90:05:8a:54:f3:bf:d1:20:ed:
                    a3:59:cd:e0:93:e7:a7:fd:4e:c6:1d:65:32:67:83:
                    e5:65:62:4d:05:7d:b5:41:87:ef:b8:d1:f7:4d:25:
                    0a:82:03:7a:f4:5a:00:15:3d:ec:27:64:3f:4a:85:
                    4c:56:3e:ee:da:f1:01:e2:e0:00:f2:9b:ce:40:b2:
                    79:e3:ae:c2:7d:9e:e7:c2:a3:78:bc:95:bc:d6:f0:
                    63:2f:fc:13:aa:04:2a:9f:69:a9:77:30:b1:05:28:
                    28:a9:21:ea:41:29:b0:66:79:26:29:60:18:76:0f:
                    54:df:49:09:16:ee:37:fd:c3:93:39:c4:ad:e5:b6:
                    c1:a8:29:35:60:0e:ae:42:96:b0:bc:e2:20:5a:8d:
                    4d:32:8c:9f:50:3b:5b:7c:1a:b4:39:d2:44:fb:92:
                    c7:86:5d:40:dd:04:80:74:78:f2:76:91:c2:12:e9:
                    26:d9:6d:35:c8:93:e4:2b:6f:4f:0e:c6:4f:f7:da:
                    b5:5e:e0:c8:9e:ca:d2:e6:7b:81:6c:f1:44:2a:d9:
                    6c:94:f1:12:90:02:a6:5f:e0:5c:b8:bd:2b:95:c0:
                    96:56:f6:78:bb:d7:14:ad:72:45:ca:ff:c7:d4:16:
                    8c:9a:b5:e1:dc:d9:06:5f:38:2a:9b:43:4d:e0:d3:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:B4:A0:79:87:22:AF:45:00:98:55:CF:9C:24:27:65:89:C6:75
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a3a2f33322d3332203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:57:fa:36:01:6a:4a:69:13:76:cc:76:e9:66:5f:57:92:21:
         33:61:c2:0e:e9:b9:2f:11:f6:58:8c:7e:ad:84:74:4f:01:63:
         52:5f:87:7f:b6:ee:57:d9:b1:cd:cb:3b:ec:d4:4f:a1:17:4f:
         05:87:eb:7a:68:1e:19:8c:5f:60:40:0c:38:cd:8f:ca:79:1b:
         46:15:07:83:4e:64:65:2e:bf:08:62:13:28:28:90:c1:39:e3:
         bb:ba:ca:7b:14:2d:d0:33:fc:05:e4:d1:f0:23:58:82:ae:ab:
         44:8a:09:8c:ca:1d:2b:4c:4b:bd:a0:ca:92:c6:fd:98:f9:a8:
         57:1d:98:2f:70:61:e1:ad:17:5a:8c:d5:1b:a4:5e:66:ab:ad:
         38:97:8b:8f:d6:ec:75:ec:a2:86:82:9e:ae:f5:30:c3:f8:7b:
         09:42:f4:d3:3a:65:6e:87:b6:7d:ed:e2:dd:14:8c:cb:10:c5:
         95:94:7f:4a:10:66:ad:b7:36:95:56:5a:fe:69:fe:ae:96:b0:
         b2:12:64:df:59:d2:40:fa:ef:11:30:7b:10:94:e2:ce:a7:ec:
         48:e7:e3:d2:15:b1:b7:c0:9a:90:e5:69:c0:bf:20:cc:cc:b0:
         89:54:27:c5:18:e7:b7:70:25:50:96:39:84:0a:00:c5:74:9a:
         bc:7a:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:45 2024 by rpki-client on console-fra.rpki-client.org