Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa
File:                     323830333a373939303a3a2f33322d3634203d3e20323732393631.roa (raw, json)
Hash identifier:          BvmxEhqbJSPe0P29YUcMJXBLBaLhx0f+XXlDg6TXY2Q=
Subject key identifier:   02:5B:6F:4C:F4:FA:99:F9:91:94:89:9A:B2:83:76:BF:00:68:21:BD
Certificate issuer:       /CN=9AE1EF6069D214BD367F253365FDF707B362C8A5
Certificate serial:       2F1ABB12219A5E8970C251BEE32269E8244D92
Authority key identifier: 9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa
Signing time:             Tue 05 Mar 2024 17:46:03 +0000
ROA not before:           Tue 05 Mar 2024 17:41:03 +0000
ROA not after:            Tue 04 Mar 2025 17:46:03 +0000
asID:                     272961
IP address blocks:        2803:7990::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1a:bb:12:21:9a:5e:89:70:c2:51:be:e3:22:69:e8:24:4d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AE1EF6069D214BD367F253365FDF707B362C8A5
        Validity
            Not Before: Mar  5 17:41:03 2024 GMT
            Not After : Mar  4 17:46:03 2025 GMT
        Subject: CN=025B6F4CF4FA99F99194899AB28376BF006821BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:22:4d:4b:df:33:d3:43:2f:c4:51:a3:7f:
                    60:df:9f:04:72:8d:28:07:96:5f:37:5a:fb:7f:b1:
                    ff:e3:0c:1f:d2:95:7f:04:79:f8:2b:3f:3c:7c:60:
                    60:1a:d9:72:dc:c2:03:8c:b9:bd:24:ec:21:c8:39:
                    09:fb:ea:02:73:ca:33:2f:58:22:24:0a:05:1e:fb:
                    ad:99:17:a2:5a:6a:ae:54:90:ba:99:cc:56:64:bf:
                    44:29:bb:31:9f:c5:a4:b1:34:a4:2f:a0:e7:d7:1e:
                    56:18:0e:29:49:25:11:1f:a8:19:e5:1a:4b:7c:aa:
                    f2:3c:ed:c1:3e:8b:19:df:2a:e1:3d:0f:a2:fc:aa:
                    d9:53:d1:6a:a4:94:11:e5:4c:0f:5e:6d:5c:1a:64:
                    d7:b2:86:c4:5b:fe:6c:0f:0c:3b:39:9d:13:ea:9f:
                    db:9e:8d:49:d6:c0:6a:ff:60:a1:b8:e5:9f:55:e1:
                    7f:0f:f2:de:07:c1:b2:ac:6d:69:13:24:ba:9a:21:
                    b7:7a:4b:5c:e8:34:d2:93:c3:fe:32:9f:8f:35:46:
                    24:02:9c:b1:c9:fd:13:94:43:5d:d4:8a:f0:2e:12:
                    90:fa:b7:c2:9a:c3:b5:fa:1c:6a:18:15:5c:fe:82:
                    64:d1:5c:9b:ec:82:24:4a:6f:d7:bd:25:87:07:4c:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:6F:4C:F4:FA:99:F9:91:94:89:9A:B2:83:76:BF:00:68:21:BD
            X509v3 Authority Key Identifier:
                keyid:9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/323830333a373939303a3a2f33322d3634203d3e20323732393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7990::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:61:c7:ad:00:6e:15:c8:f5:82:6c:eb:23:f3:b6:a7:4c:
         6b:eb:8c:9b:be:0b:f3:3b:f0:ed:cd:cd:7c:8d:b8:fb:3b:ac:
         1c:c6:04:f6:17:eb:1a:1e:a4:25:a8:ae:59:d5:98:30:93:1d:
         8f:1e:b0:11:f0:01:38:91:99:a8:c9:d1:9d:fb:3d:1f:1d:ee:
         49:c5:6b:92:96:42:69:4f:57:92:cd:d9:e7:77:2f:e8:5f:e8:
         0e:63:55:e1:39:06:c5:25:ad:34:33:3b:33:fe:3f:9c:05:f6:
         48:c1:66:19:1a:b6:45:75:5f:d5:cd:7a:69:5f:8a:b4:41:59:
         2d:f3:cb:a9:de:7c:47:5a:b2:83:03:2b:a4:2b:75:1d:80:95:
         b6:1b:8d:84:c2:1b:d8:38:9e:a9:2a:69:e2:3e:15:8e:34:90:
         b1:85:71:fb:ca:82:5c:cb:7b:de:ef:6c:26:3d:46:46:8b:92:
         e3:1f:f0:9b:f7:ef:9b:ca:56:14:0f:8a:c5:ec:86:04:b9:a7:
         d1:ea:c2:33:76:60:96:b7:de:e7:88:9a:e4:6e:4a:7b:03:de:
         cf:e1:fd:1f:9e:8f:41:d4:f6:62:82:c7:de:c3:05:38:da:83:
         8e:86:c5:79:7b:74:81:cc:82:27:7f:25:65:e9:b0:bc:42:b6:
         4c:c3:f0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:05 2024 by rpki-client on console-fra.rpki-client.org