Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa
File:                     323830333a636365303a3a2f33322d3332203d3e20323639393036.roa (raw, json)
Hash identifier:          7I64IfZbmfisfJqEsDuImH+6u5i7Sgwx6JRsLL/oDnw=
Subject key identifier:   59:24:9D:E5:D6:61:B1:65:AD:59:66:2B:91:72:67:33:74:2C:6E:3C
Certificate issuer:       /CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A
Certificate serial:       0FADAC1B8BDF653A91BD86EA3E78D04C930759AB
Authority key identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa
Signing time:             Tue 05 Mar 2024 18:22:19 +0000
ROA not before:           Tue 05 Mar 2024 18:17:19 +0000
ROA not after:            Tue 04 Mar 2025 18:22:19 +0000
asID:                     269906
IP address blocks:        2803:cce0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ad:ac:1b:8b:df:65:3a:91:bd:86:ea:3e:78:d0:4c:93:07:59:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A
        Validity
            Not Before: Mar  5 18:17:19 2024 GMT
            Not After : Mar  4 18:22:19 2025 GMT
        Subject: CN=59249DE5D661B165AD59662B91726733742C6E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:13:7a:0b:9b:86:00:8d:17:04:03:9a:7d:
                    bc:7d:b1:ce:ae:50:5a:a1:8f:96:93:59:a7:0d:4c:
                    59:06:9b:0c:ce:6c:24:5b:8a:93:b3:3f:e5:40:d8:
                    4c:b5:23:25:bb:af:5a:f6:30:90:57:5c:79:35:b5:
                    83:51:07:1b:3f:11:eb:09:25:8d:23:52:90:a0:ab:
                    5e:ee:54:5f:38:3c:78:3c:0a:a7:c3:82:d6:9b:d0:
                    10:9e:a9:43:f4:e0:c0:63:4a:a8:67:74:fe:33:e7:
                    24:46:af:4f:c5:8b:74:d4:e7:fa:b2:70:04:06:9a:
                    cb:5d:e7:55:48:27:1f:72:5b:e2:ae:9e:a0:26:21:
                    c1:08:32:b2:f9:89:d4:5d:d1:aa:10:fd:57:95:1a:
                    0f:e5:eb:74:b8:a6:54:e7:e6:5c:28:ac:2b:17:43:
                    72:93:43:e9:dc:03:b8:e8:aa:5c:c6:99:8f:3c:a8:
                    ef:37:f6:cc:ad:63:f2:f7:61:9c:73:f2:e3:aa:eb:
                    94:a6:0d:48:f5:da:05:3c:dc:9e:6c:bc:82:b3:ee:
                    b8:3b:f8:63:08:93:a5:23:06:d2:c7:72:79:db:13:
                    35:5d:58:47:93:ac:0a:59:10:76:68:70:c1:11:b0:
                    35:99:43:e4:d3:24:1e:a1:f4:c6:0f:c3:e8:60:1a:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:9D:E5:D6:61:B1:65:AD:59:66:2B:91:72:67:33:74:2C:6E:3C
            X509v3 Authority Key Identifier:
                keyid:C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:6c:54:45:79:bd:85:d9:00:c9:58:27:7f:7c:3b:e4:db:f6:
         43:a1:76:d2:1f:0e:74:33:0f:cc:f5:df:ea:1a:18:6b:c3:d8:
         bf:a6:be:b0:cb:8d:de:d2:07:59:54:3b:8d:c2:5f:fc:1c:9f:
         6c:73:b9:ce:17:4e:a9:e3:89:f0:7e:5d:16:28:33:8d:bf:fa:
         18:04:57:8d:6f:77:0a:8f:9b:9a:fb:45:ba:b5:7e:5a:fc:1c:
         4c:2e:53:a5:8a:55:63:81:6f:98:3f:03:ef:1b:4c:00:67:03:
         52:c7:4c:bc:b4:73:e8:5b:e4:61:10:2c:26:f8:9c:de:5c:5c:
         a9:2e:d3:af:45:b2:73:39:c9:0e:11:82:9a:d3:73:c8:c3:c2:
         a4:0b:3c:a6:45:ac:88:c8:78:96:be:85:3e:9c:b9:10:78:0d:
         d8:1f:cc:a8:6d:05:24:63:5b:fa:52:12:ee:6b:b6:20:7f:f7:
         9b:17:0d:26:94:28:fd:19:2a:7f:93:82:b1:2b:b3:59:97:7e:
         03:0f:a4:7f:0e:7b:01:04:84:02:23:32:8e:61:f8:51:d1:95:
         ec:5c:16:99:4a:bd:b9:9a:ee:8f:93:46:a5:5e:13:45:6b:7f:
         c0:e9:a2:56:b9:14:62:a4:6f:be:93:60:1f:f0:c2:90:d7:c0:
         b8:d5:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org