Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa
File:                     323830333a323536303a3a2f33322d3438203d3e20323732393931.roa (raw, json)
Hash identifier:          vXnxzLvgDoGWX3ZYtVltaPjbpr64TRoz9OaavlqNM/8=
Subject key identifier:   A9:EE:E9:D2:2A:63:2B:D5:76:F1:64:98:09:60:BB:53:FE:94:45:BA
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       2455F2BD3C00BB12FBFABA836A59CC957FE18544
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa
Signing time:             Tue 27 Aug 2024 18:25:00 +0000
ROA not before:           Tue 27 Aug 2024 18:20:00 +0000
ROA not after:            Tue 26 Aug 2025 18:25:00 +0000
asID:                     272991
IP address blocks:        2803:2560::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:f2:bd:3c:00:bb:12:fb:fa:ba:83:6a:59:cc:95:7f:e1:85:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Aug 27 18:20:00 2024 GMT
            Not After : Aug 26 18:25:00 2025 GMT
        Subject: CN=A9EEE9D22A632BD576F164980960BB53FE9445BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:62:d4:41:1d:8a:4d:39:d1:3b:ac:78:e3:
                    7c:12:20:0c:10:88:53:a9:0e:0b:37:6f:4f:e6:b3:
                    3a:c6:70:1b:e3:a9:08:a0:3a:7e:44:9a:75:93:6c:
                    c3:2a:44:c1:43:1b:dd:17:e7:0f:01:c5:16:0e:b0:
                    ec:d5:f0:84:54:0a:e9:28:25:99:1d:96:a4:98:fe:
                    73:a8:40:de:43:ab:af:82:78:da:82:16:80:25:2c:
                    c4:24:a2:ca:83:77:ba:78:08:5b:b2:d9:9d:be:38:
                    1a:e5:1d:79:3e:22:5a:2f:45:2b:6a:20:87:cb:ca:
                    f8:e9:c6:1a:9e:31:df:6f:50:c8:8b:c5:eb:ec:0c:
                    fd:8b:59:b2:70:91:65:24:ac:55:90:a5:6d:61:c7:
                    b5:70:f1:30:2f:31:c6:8a:20:d5:a6:b9:ba:74:96:
                    e4:3b:62:aa:be:57:31:a1:47:47:b8:fa:eb:18:1b:
                    c4:f2:65:b0:43:5f:ee:9f:f4:e4:44:94:a4:e5:58:
                    3d:c0:e2:4d:af:2e:a5:29:a5:92:34:7e:51:49:8c:
                    96:42:5f:99:65:7e:56:da:ee:27:17:77:81:74:03:
                    4e:2a:11:db:74:17:64:4e:5e:51:f5:28:0c:66:98:
                    68:c7:a8:d1:7b:2f:8b:56:f7:a6:17:75:54:15:31:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:E9:D2:2A:63:2B:D5:76:F1:64:98:09:60:BB:53:FE:94:45:BA
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3438203d3e20323732393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2560::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:24:91:bd:70:b5:f2:dd:cd:ed:e1:3d:ee:e0:c0:0f:97:
         27:4a:bd:81:06:8e:18:01:52:1b:7f:b8:e0:d8:a5:54:c3:a5:
         ad:36:66:c7:b4:d5:00:b6:be:df:da:52:42:c1:6a:9d:20:1a:
         cf:e4:08:4f:57:b5:59:f5:f3:6b:f0:90:75:04:50:56:dc:d5:
         5d:af:72:08:5b:f5:cf:be:df:e8:b5:31:d7:a2:2d:85:6d:67:
         38:c7:e9:99:97:72:98:0d:66:d9:57:ef:ea:62:3f:fb:63:c4:
         ed:5d:fc:00:69:9b:18:e0:28:ec:5a:b2:55:36:db:0d:8f:35:
         c4:15:3d:71:6c:4d:c5:92:50:02:2d:8c:24:dd:8d:37:fb:85:
         19:86:16:27:71:1c:54:7e:c3:b5:43:3b:d4:23:25:f0:ef:3f:
         03:ba:0e:80:41:07:41:8a:b9:b4:cb:a1:f4:33:f6:c8:86:b0:
         69:14:b4:a6:30:a1:01:a5:a8:d3:48:7f:b5:6b:78:75:dc:20:
         9a:90:68:5d:5c:93:56:84:9e:7f:23:a1:83:71:f8:01:77:0d:
         da:18:d1:e2:23:7a:f4:2e:f2:31:e8:a8:21:87:02:e5:4d:61:
         11:82:ab:93:81:37:2b:4f:ef:a6:9b:88:b8:7d:e7:35:95:1e:
         61:a0:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:23 2024 by rpki-client on console-fra.rpki-client.org