Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa
File:                     323830333a633739303a3a2f34322d3432203d3e20323639383332.roa (raw, json)
Hash identifier:          YzoyizYVe7AVCTj/LW1a3vrJHbJTK69a0UND3mnRpLo=
Subject key identifier:   97:43:38:8F:15:A2:02:27:D9:38:6D:8D:FF:B5:8F:E4:C1:75:C4:8D
Certificate issuer:       /CN=391C80297A8923C97C067A3FD078178E6934E57D
Certificate serial:       527AE560BD90D910CC0896AE2E62A94BBB84D8CC
Authority key identifier: 39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:59:19 +0000
ROA not before:           Tue 05 Mar 2024 17:54:19 +0000
ROA not after:            Tue 04 Mar 2025 17:59:19 +0000
asID:                     269832
IP address blocks:        2803:c790::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7a:e5:60:bd:90:d9:10:cc:08:96:ae:2e:62:a9:4b:bb:84:d8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391C80297A8923C97C067A3FD078178E6934E57D
        Validity
            Not Before: Mar  5 17:54:19 2024 GMT
            Not After : Mar  4 17:59:19 2025 GMT
        Subject: CN=9743388F15A20227D9386D8DFFB58FE4C175C48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:eb:a8:34:f8:e9:98:6c:0a:98:59:96:a7:
                    f7:b5:06:f9:54:bb:c2:6e:ec:70:89:ca:c8:d4:fb:
                    a1:60:77:3b:8c:01:3a:06:ca:86:01:60:2d:b3:de:
                    73:e3:f4:53:b3:71:ff:e8:ba:c1:14:a1:b3:59:91:
                    1c:39:74:a7:be:31:1c:4b:b0:0b:4b:0a:9b:f3:47:
                    66:c5:5a:71:47:79:ef:4d:9a:7e:fb:91:d7:eb:ad:
                    f2:fa:9b:76:45:c7:46:ae:7e:53:bb:d7:50:49:1c:
                    5c:0e:b7:4d:6d:fc:06:de:dc:71:22:43:2a:0d:f2:
                    42:8e:b1:b8:f3:0c:52:4a:07:11:9b:47:b1:c5:b4:
                    8e:68:db:e5:00:d1:1a:07:66:c0:57:13:1e:7f:a1:
                    14:6d:70:da:82:0a:fe:88:7c:84:df:88:77:a7:3f:
                    dd:fd:13:9d:e5:d6:32:09:f2:8c:fc:cb:b7:e2:fc:
                    ae:86:ce:05:76:fd:e7:c6:cb:5b:9b:72:93:07:78:
                    92:4c:04:ba:22:61:8b:39:bc:68:32:33:82:e6:fc:
                    bc:ff:66:fb:92:71:c8:d9:98:69:8b:cf:bc:40:7e:
                    85:b3:85:7b:b4:54:54:d6:91:47:8b:52:3e:5d:4b:
                    b4:7e:5e:be:0e:88:c8:8b:ae:4f:54:9f:2b:e9:ab:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:38:8F:15:A2:02:27:D9:38:6D:8D:FF:B5:8F:E4:C1:75:C4:8D
            X509v3 Authority Key Identifier:
                keyid:39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c790::/42

    Signature Algorithm: sha256WithRSAEncryption
         98:39:09:62:ac:24:a0:03:11:49:9b:3e:db:5c:67:a7:c5:fb:
         e9:b7:a5:76:da:af:d8:ec:04:a8:43:24:0c:ff:6e:82:8a:59:
         0d:b4:fb:a5:59:a5:cf:fa:2b:be:91:79:e0:65:d5:d2:0f:93:
         69:7d:fa:55:b9:e0:67:01:64:2a:a8:65:c1:f4:b5:48:16:20:
         ed:90:52:51:4a:d0:cc:e7:bd:28:dc:d8:60:b0:20:18:81:1e:
         60:8f:69:43:99:86:bc:75:a1:6d:ab:fc:c2:a6:12:6b:ce:7c:
         af:89:1b:22:43:95:66:d4:d1:ec:2d:e0:f9:cc:c1:74:3a:ff:
         26:07:41:4e:fe:af:14:33:a7:9c:4d:e4:dd:ed:72:08:9b:e5:
         b4:57:c1:fb:cb:fd:45:8e:da:a7:53:a4:cc:eb:ee:81:b0:45:
         89:98:da:ee:98:b1:ec:45:96:b1:e1:c4:ce:06:89:cc:4c:b9:
         55:36:8e:fb:45:29:c7:01:72:68:ec:0c:9e:15:19:a0:28:90:
         cf:d5:ba:0b:28:73:f9:7b:34:42:a6:8e:00:27:15:bd:ec:a8:
         10:b2:18:aa:55:a3:8c:38:d3:75:3e:bc:43:af:7b:f3:e7:bc:
         38:1d:01:5a:de:6d:02:f5:5e:29:5d:9d:54:0f:a6:70:71:b8:
         9a:65:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:04:17 2024 by rpki-client on console-ams.rpki-client.org