Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa
File:                     323830333a383130303a3a2f33322d3438203d3e203231383236.roa (raw, json)
Hash identifier:          1S2r3d0dka+2p8KsDx1+y3m6Spj5VCELcgLb13ozmUY=
Subject key identifier:   99:76:AB:98:57:DA:DC:DB:EC:4C:D7:F9:D6:22:56:00:00:FF:D4:D2
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       13E9797A4D8279B30084D96953D6404C292417AB
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa
Signing time:             Tue 05 Mar 2024 17:49:45 +0000
ROA not before:           Tue 05 Mar 2024 17:44:45 +0000
ROA not after:            Tue 04 Mar 2025 17:49:45 +0000
asID:                     21826
IP address blocks:        2803:8100::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e9:79:7a:4d:82:79:b3:00:84:d9:69:53:d6:40:4c:29:24:17:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Mar  5 17:44:45 2024 GMT
            Not After : Mar  4 17:49:45 2025 GMT
        Subject: CN=9976AB9857DADCDBEC4CD7F9D622560000FFD4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:17:85:fa:61:1e:38:67:d8:9f:21:62:c2:
                    b2:5a:52:5d:2c:c9:f2:51:58:0d:b6:af:80:85:17:
                    1d:7c:57:a0:e6:d7:4e:36:87:2b:85:f9:75:be:94:
                    54:cd:5d:d2:04:04:1a:13:49:a9:b7:6b:59:87:20:
                    33:d9:a9:2f:5e:17:74:ff:2c:82:b7:d1:f8:d5:18:
                    d5:80:7f:fc:e1:96:7d:6b:0b:31:29:39:c3:e6:d4:
                    1e:fe:11:e3:7c:19:10:cd:a2:27:e5:3b:31:c3:0c:
                    63:f9:f3:3d:97:d4:66:dc:b0:b0:1a:d1:9a:54:75:
                    ab:28:82:91:28:86:a5:ca:82:12:49:54:fa:fc:26:
                    19:40:84:a1:a0:2a:15:9c:9b:3e:24:6d:42:45:cf:
                    7a:ef:ae:34:b1:ff:91:69:4b:29:fc:02:cd:fd:a0:
                    1a:a8:14:94:7b:21:5c:24:b5:e6:df:4f:19:34:90:
                    12:7b:24:c7:37:ca:f2:7b:9e:94:bf:e6:91:7c:d8:
                    64:e4:c0:75:fd:77:36:27:45:3e:c5:25:ae:3d:7e:
                    d6:89:55:1b:04:5d:f9:46:b4:d0:35:09:0b:3d:34:
                    62:2b:ad:77:31:07:3b:d1:74:db:6e:41:a2:52:e2:
                    9b:57:bc:40:69:8e:44:fd:1d:6f:37:eb:0f:79:b8:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:AB:98:57:DA:DC:DB:EC:4C:D7:F9:D6:22:56:00:00:FF:D4:D2
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/323830333a383130303a3a2f33322d3438203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:91:d7:65:1a:cc:19:30:d4:d4:1c:29:ad:d2:9d:ab:6f:2d:
         ba:be:fa:5a:76:b9:89:57:66:8f:b0:14:84:56:64:cb:fa:13:
         63:a7:17:a6:a7:a7:e4:52:61:f1:eb:1f:a3:9d:c2:18:10:15:
         68:20:a1:71:71:c9:d4:16:ab:af:f5:ad:4d:b7:57:da:af:dd:
         6e:ff:d1:f5:2b:77:58:2e:78:dd:1c:61:c1:09:d3:9d:b8:08:
         c6:20:b0:c1:c1:78:e4:23:32:03:c4:9e:68:80:2e:55:43:98:
         f0:76:47:c5:57:c2:01:db:7a:77:25:9e:bd:c2:1c:b9:13:96:
         6e:e7:c2:26:a1:75:77:c5:57:d8:5f:34:87:38:a0:94:3c:bb:
         40:eb:26:32:29:57:9b:de:b8:e4:83:d1:26:50:35:65:d9:d0:
         e2:62:ce:84:e9:cf:ce:11:44:d5:d0:ca:00:d1:47:7b:59:82:
         fd:44:4a:32:7f:55:0a:4c:82:80:0b:b9:71:80:50:e5:71:23:
         f1:0c:bd:5f:66:d9:a2:c9:e7:23:2e:a9:1c:99:39:e7:00:5c:
         d2:df:b6:87:52:36:c2:77:19:a0:f9:fa:4d:3b:99:98:45:38:
         23:67:6e:15:e2:9d:d6:7e:f1:94:d8:13:c6:0c:32:de:f4:f7:
         a9:21:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org