Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa
File:                     323830333a386235303a3a2f33322d3438203d3e20323733393034.roa (raw, json)
Hash identifier:          UnOx4f3kp7MhC6dy398ndkwfkpEzlesLutrB/feu2JQ=
Subject key identifier:   06:88:6E:B8:E7:FC:40:64:A8:CB:56:5E:D1:09:03:1E:14:82:11:9F
Certificate issuer:       /CN=5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B
Certificate serial:       1445D6FC77D4449EBA3ED8860FD18A3A095288EE
Authority key identifier: 5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa
Signing time:             Thu 12 Sep 2024 15:15:00 +0000
ROA not before:           Thu 12 Sep 2024 15:10:00 +0000
ROA not after:            Thu 11 Sep 2025 15:15:00 +0000
asID:                     273904
IP address blocks:        2803:8b50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:45:d6:fc:77:d4:44:9e:ba:3e:d8:86:0f:d1:8a:3a:09:52:88:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B
        Validity
            Not Before: Sep 12 15:10:00 2024 GMT
            Not After : Sep 11 15:15:00 2025 GMT
        Subject: CN=06886EB8E7FC4064A8CB565ED109031E1482119F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:f8:51:ad:a0:ae:0e:7d:28:4b:aa:dd:ed:
                    73:e2:d2:cd:5b:a3:32:f3:16:7b:77:cb:45:bd:e7:
                    37:57:87:55:8b:37:7c:9b:62:70:33:db:df:7b:dd:
                    ef:5d:29:65:f2:79:72:ae:a3:a1:09:5c:04:32:a3:
                    a3:67:86:56:e0:f5:ee:88:a8:6d:fb:52:44:5d:b0:
                    87:e4:54:28:8d:59:9c:32:bf:a9:4d:05:0c:b4:e4:
                    cb:e9:31:21:f3:eb:37:5e:bf:bc:56:1f:91:83:02:
                    c9:2c:15:0f:3c:4d:ea:3c:35:32:84:0e:51:88:e9:
                    b9:a4:83:58:93:9f:84:19:d8:2d:09:9b:2d:b4:cf:
                    de:45:51:9e:e6:d0:16:69:2f:b5:76:0a:a4:2c:78:
                    66:de:36:1b:04:66:04:20:25:ae:0c:de:46:61:04:
                    86:2e:35:1a:24:44:36:f0:a0:8f:8c:ab:49:99:36:
                    b2:b1:5d:4d:04:47:a4:f3:4c:58:75:eb:02:e4:02:
                    2e:eb:bc:e1:16:4e:fd:1d:2e:d2:06:95:14:6e:94:
                    7a:96:68:fd:ec:88:f3:f5:29:aa:20:49:71:39:e4:
                    48:a2:f9:ca:89:5d:5b:d4:08:46:38:72:40:c2:56:
                    fb:6c:ca:3f:d8:6a:8b:12:ae:f8:15:39:c3:f0:92:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:6E:B8:E7:FC:40:64:A8:CB:56:5E:D1:09:03:1E:14:82:11:9F
            X509v3 Authority Key Identifier:
                keyid:5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/323830333a386235303a3a2f33322d3438203d3e20323733393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:ab:84:28:4a:ee:cf:af:bb:a1:11:e1:fe:2b:9d:2e:b8:
         65:20:bf:69:85:63:b8:27:b8:43:18:87:52:b5:86:ce:ae:03:
         21:7f:8d:6c:90:3c:db:06:5f:d1:e1:2c:18:c7:63:50:a1:e0:
         09:3e:de:12:94:92:ad:3a:3b:08:91:02:62:bc:48:0f:2d:b9:
         db:06:62:5e:a3:49:33:1a:8f:6e:8e:e6:41:ca:ad:32:91:a4:
         d6:a2:e9:10:51:6c:e4:27:f3:78:a3:41:fe:89:b5:38:a5:9f:
         d6:5d:b5:64:b6:5f:de:ed:6a:2a:d3:3e:f5:e9:f1:ec:5d:06:
         05:10:ef:74:f0:af:32:52:b2:73:3b:77:21:02:eb:e2:ce:18:
         08:7d:dc:20:6c:21:2f:7e:12:94:0d:07:fa:6b:c3:37:33:1e:
         f8:c3:9b:b6:53:e7:2d:e7:d4:be:80:cd:5c:7c:d5:38:6d:60:
         77:ac:b1:1b:73:0f:69:57:b1:dd:f5:cd:0d:5e:5d:d4:f8:02:
         b1:a6:3a:3b:75:b0:f7:fd:10:be:bd:4c:a1:d1:70:08:12:af:
         4b:8e:97:d7:fc:ad:b9:39:d7:45:5f:00:b2:a1:7b:69:9a:1b:
         7b:1b:1f:58:7b:84:7c:4a:61:e5:99:09:26:f7:90:92:6c:f8:
         b6:b2:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org