Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/323830333a623965303a3a2f33322d3332203d3e20323730303234.roa
File:                     323830333a623965303a3a2f33322d3332203d3e20323730303234.roa (raw, json)
Hash identifier:          33y24RpcMPFKQ4fM5DnLQbrVV7vgWkkEVts0TvjlPR0=
Subject key identifier:   F3:C5:95:83:73:50:8A:C7:1B:5F:B4:AF:9D:EF:3A:EE:D9:80:B6:78
Certificate issuer:       /CN=1677287AF25B491C4AA930829379E3D700B7A8BF
Certificate serial:       1AC56002753AC8FB124D2928B5C4AC149017EF26
Authority key identifier: 16:77:28:7A:F2:5B:49:1C:4A:A9:30:82:93:79:E3:D7:00:B7:A8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1677287AF25B491C4AA930829379E3D700B7A8BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/323830333a623965303a3a2f33322d3332203d3e20323730303234.roa
Signing time:             Tue 05 Mar 2024 18:00:13 +0000
ROA not before:           Tue 05 Mar 2024 17:55:13 +0000
ROA not after:            Tue 04 Mar 2025 18:00:13 +0000
asID:                     270024
IP address blocks:        2803:b9e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/1677287AF25B491C4AA930829379E3D700B7A8BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/1677287AF25B491C4AA930829379E3D700B7A8BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1677287AF25B491C4AA930829379E3D700B7A8BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c5:60:02:75:3a:c8:fb:12:4d:29:28:b5:c4:ac:14:90:17:ef:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1677287AF25B491C4AA930829379E3D700B7A8BF
        Validity
            Not Before: Mar  5 17:55:13 2024 GMT
            Not After : Mar  4 18:00:13 2025 GMT
        Subject: CN=F3C5958373508AC71B5FB4AF9DEF3AEED980B678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:be:bb:51:ec:30:f7:4d:c4:2d:0a:25:ed:
                    68:e1:8c:45:19:9a:d5:a6:88:b0:46:ee:09:0e:0d:
                    13:18:e4:01:0a:43:c3:4a:a6:af:b5:22:9c:3a:d3:
                    35:46:06:48:14:bc:d2:38:40:86:31:af:8f:c3:11:
                    9a:2d:3e:7f:52:69:6a:7d:11:24:21:4e:e7:42:1f:
                    16:e0:15:82:69:c4:49:eb:76:ad:c8:78:85:f1:c2:
                    09:c8:69:fb:9a:8b:49:9e:ec:13:01:d7:02:f7:0d:
                    6e:cd:9a:6b:c6:9e:c9:88:33:c2:45:1f:23:31:4e:
                    c8:6f:f4:37:d9:22:4a:34:71:dc:26:20:4a:af:aa:
                    72:8f:19:2c:44:aa:4e:a1:e9:c8:5c:0d:1e:f2:f7:
                    88:70:c9:c9:ca:8b:0b:82:7d:cf:e6:cb:fc:3a:6e:
                    6f:9b:36:62:2f:2a:4e:8a:f5:22:a3:df:9a:a5:d4:
                    ca:c6:52:fe:35:97:1e:7b:85:fd:bf:1e:60:5c:94:
                    12:cb:71:79:f2:9e:ca:bb:95:75:d6:b5:3e:5d:1a:
                    17:cc:8c:f7:bb:2e:29:e1:34:7d:05:9c:ea:81:7a:
                    cf:b4:63:7a:a3:68:f1:a4:3e:b2:bf:3b:36:22:a4:
                    d1:df:87:3d:dc:56:0c:51:0c:cf:71:92:0a:00:bf:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C5:95:83:73:50:8A:C7:1B:5F:B4:AF:9D:EF:3A:EE:D9:80:B6:78
            X509v3 Authority Key Identifier:
                keyid:16:77:28:7A:F2:5B:49:1C:4A:A9:30:82:93:79:E3:D7:00:B7:A8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/1677287AF25B491C4AA930829379E3D700B7A8BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1677287AF25B491C4AA930829379E3D700B7A8BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1E5D9D95853F845403A9492380D9E057A858D9BB180E3908B21A7E9BA70DD2E/0/323830333a623965303a3a2f33322d3332203d3e20323730303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:72:ea:bd:58:56:51:8a:a1:87:dc:a9:79:10:38:90:61:52:
         f4:10:89:4c:f8:9e:1e:f4:dc:ab:ff:43:7f:b5:ae:ab:81:9a:
         14:cb:2f:67:a4:c1:7e:9b:dc:19:2a:87:44:47:b7:3a:f8:dc:
         d1:98:c4:11:f2:93:22:42:e4:11:0d:19:40:a1:f9:61:4c:1a:
         26:a9:ef:0b:42:be:a8:50:92:12:3a:13:a1:69:e3:06:3e:d3:
         1e:09:ad:05:dc:1a:97:2a:7a:0d:06:92:38:be:2b:07:e8:54:
         94:e6:12:4d:d8:59:5f:80:3e:a4:1a:09:90:cd:20:7f:7b:a9:
         1b:54:68:94:92:67:6a:38:ee:3b:03:58:43:06:fb:00:88:b1:
         bd:9e:34:30:e5:b9:5f:14:8f:f1:88:ad:68:c1:2e:18:cb:22:
         83:35:2a:ab:be:09:a4:fd:ea:4d:a9:ac:48:9e:2b:ef:71:68:
         ce:2b:e1:47:a2:6f:b1:bd:fb:bd:ed:35:ed:40:cb:c6:02:f9:
         a3:8f:52:4e:9b:2b:e4:5f:7f:4b:da:34:76:66:90:ea:84:fd:
         3b:2f:9c:7a:dd:01:59:0c:67:33:de:42:34:01:d6:77:fb:94:
         35:0b:51:a7:97:36:2f:93:a6:3b:99:9a:f1:f5:35:8a:84:de:
         30:6c:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:06 2024 by rpki-client on console-fra.rpki-client.org