Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa
File:                     323830333a353236303a3a2f33322d3332203d3e20323637383730.roa (raw, json)
Hash identifier:          23PpN+UPPpg4y6WiGQhIWf38JMX8tihHMfyZXZtaMzI=
Subject key identifier:   CF:A5:96:00:34:8E:96:BE:58:93:68:04:4C:47:A1:68:09:C0:A0:71
Certificate issuer:       /CN=9B4178566D9550E5296B929731ECBD639DF1705A
Certificate serial:       02B01605E78C131721CAF2C831820C2F07E19A8D
Authority key identifier: 9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     267870
IP address blocks:        2803:5260::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/9B4178566D9550E5296B929731ECBD639DF1705A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/9B4178566D9550E5296B929731ECBD639DF1705A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b0:16:05:e7:8c:13:17:21:ca:f2:c8:31:82:0c:2f:07:e1:9a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4178566D9550E5296B929731ECBD639DF1705A
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=CFA59600348E96BE589368044C47A16809C0A071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:1e:d1:87:6a:e5:b3:1d:24:e1:52:4c:cf:
                    06:f0:a2:c7:45:c1:71:01:d0:8b:8a:e4:89:9e:9d:
                    1e:84:04:53:a5:e1:81:cd:e3:24:2f:ee:9b:ca:60:
                    89:9b:8f:86:6e:c0:c0:7e:7f:9b:ef:aa:ac:6f:12:
                    58:5e:81:5a:52:e2:d0:f6:0b:33:41:79:60:ca:80:
                    94:05:97:4c:6b:ec:da:c8:bc:3f:cc:9b:38:11:95:
                    14:a6:6f:06:c4:da:de:d9:e6:f8:c8:48:65:3f:cb:
                    99:5c:e8:36:0b:61:16:ad:38:b5:98:68:d0:85:04:
                    d1:7b:43:0f:4d:f6:52:47:f2:4b:84:9c:94:df:f1:
                    57:0d:ce:ec:31:5a:1f:be:34:d4:cd:a3:0c:6f:9a:
                    13:29:d0:7d:2a:9d:52:f8:39:db:5c:ef:8d:8b:45:
                    71:bb:00:94:ad:b7:48:bb:31:75:0e:98:0a:b7:b8:
                    03:47:30:79:5b:95:5d:dd:2a:42:c4:2a:78:7c:8c:
                    75:87:99:d3:ba:b3:90:2f:6e:70:70:99:f2:f1:43:
                    fe:c9:8c:10:2d:59:69:41:7f:a6:60:45:9b:28:8e:
                    30:72:29:aa:62:bc:32:4e:86:3e:65:67:ba:14:12:
                    5c:f1:ae:6d:d3:ab:46:30:04:50:ca:23:01:1d:18:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:96:00:34:8E:96:BE:58:93:68:04:4C:47:A1:68:09:C0:A0:71
            X509v3 Authority Key Identifier:
                keyid:9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/9B4178566D9550E5296B929731ECBD639DF1705A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5260::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:5e:c9:90:f5:94:38:60:f3:ca:18:1b:06:b5:24:74:60:cc:
         af:a5:b5:d8:d3:eb:7a:48:a0:cc:90:6a:ad:53:ae:80:b2:5a:
         27:f0:90:2c:b5:5d:77:55:32:2a:17:c6:6f:b6:b9:b1:32:2c:
         f8:cb:da:6a:8e:37:66:9d:15:2d:5e:6a:47:2d:cd:12:b8:f9:
         66:51:bb:83:15:2d:51:2c:00:74:ef:04:b4:d1:13:66:4b:08:
         c9:98:e2:f1:c4:46:6b:c1:06:90:8b:fc:3e:9e:05:cd:94:c1:
         0e:02:9d:99:7e:83:b3:20:b5:41:4d:cd:32:5d:dc:c6:6d:5c:
         f5:c6:c2:9f:a6:23:02:fb:50:57:97:5e:13:f8:65:96:ad:11:
         26:c5:7f:7f:51:01:e9:e5:8f:fa:d2:c2:9f:49:45:3f:46:18:
         15:40:17:a1:f5:5b:c5:55:5c:36:30:1f:0b:e1:23:2b:22:bf:
         64:fc:68:2c:a8:66:a2:c8:12:32:a6:39:af:2d:f2:1f:f8:14:
         60:cf:bd:38:ff:fd:60:e0:80:0f:c5:88:24:ea:e9:fa:aa:b4:
         db:3c:70:46:ea:20:4a:7a:a0:7f:67:37:f7:3b:87:8a:51:52:
         71:b1:6d:8e:10:49:2e:cf:ab:ad:38:85:98:24:7e:b5:8f:b7:
         a5:d5:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org