Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa
File:                     323830333a393265303a3a2f33322d3332203d3e20323639393332.roa (raw, json)
Hash identifier:          ilSHziyZKx/q/FD5YahLN4298ZILqPSZJTrebhh7ktU=
Subject key identifier:   54:C8:ED:89:1D:A5:E9:4C:09:35:69:CF:FA:FB:A5:DA:61:64:9C:AA
Certificate issuer:       /CN=56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0
Certificate serial:       4C991690608D0FB6591DE0D950DC0FDA1763EEFD
Authority key identifier: 56:C9:5E:C2:74:0D:BF:89:FB:9E:A3:CF:DB:5D:A5:E8:4E:5A:9D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa
Signing time:             Tue 05 Mar 2024 18:18:07 +0000
ROA not before:           Tue 05 Mar 2024 18:13:07 +0000
ROA not after:            Tue 04 Mar 2025 18:18:07 +0000
asID:                     269932
IP address blocks:        2803:92e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:99:16:90:60:8d:0f:b6:59:1d:e0:d9:50:dc:0f:da:17:63:ee:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0
        Validity
            Not Before: Mar  5 18:13:07 2024 GMT
            Not After : Mar  4 18:18:07 2025 GMT
        Subject: CN=54C8ED891DA5E94C093569CFFAFBA5DA61649CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:ec:5b:cf:b3:f3:e8:c3:86:ba:0f:69:74:
                    a8:f2:c3:8f:4e:82:fe:52:2c:31:82:36:12:50:39:
                    b9:78:5c:1b:3a:81:7f:88:e5:4a:9d:2c:1f:af:3f:
                    f4:0e:da:a6:f5:17:4a:10:d5:51:56:45:af:41:7f:
                    8e:3c:cb:78:1d:b4:ba:2b:2d:9f:bd:03:31:d3:f4:
                    01:36:29:1b:b5:45:55:f0:7e:62:85:06:75:64:99:
                    86:7a:ca:9b:db:34:a8:fb:a7:8e:29:af:fd:bd:0f:
                    01:37:b2:c3:f2:05:2f:46:06:d2:52:07:d6:5d:37:
                    2b:c3:c5:e9:1d:13:fd:ec:cb:b0:2e:a0:92:57:bf:
                    c2:25:52:ad:b8:34:4a:b1:56:0a:4a:38:81:cd:c1:
                    5b:1f:e3:59:7e:3d:d9:49:97:56:fc:49:da:eb:34:
                    4e:04:03:40:63:f0:0b:0d:22:69:75:b0:2f:03:ad:
                    d5:0f:fe:07:be:d4:a9:bc:6c:db:fa:e0:5f:66:55:
                    4b:07:b4:00:f8:ac:1e:14:07:ad:50:40:01:2e:75:
                    10:ac:63:c3:42:ba:90:3c:58:6a:e3:c7:30:50:8c:
                    e2:18:88:6a:41:84:ee:bd:ae:fe:dc:32:81:09:72:
                    18:84:db:6b:49:22:e8:d3:cc:7d:bb:0d:42:9c:5d:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:ED:89:1D:A5:E9:4C:09:35:69:CF:FA:FB:A5:DA:61:64:9C:AA
            X509v3 Authority Key Identifier:
                keyid:56:C9:5E:C2:74:0D:BF:89:FB:9E:A3:CF:DB:5D:A5:E8:4E:5A:9D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56C95EC2740DBF89FB9EA3CFDB5DA5E84E5A9DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA98B35A2B1C3074E94F62B0B189D6C623428016FCA1CE861E699C27EA880446/0/323830333a393265303a3a2f33322d3332203d3e20323639393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:92e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:65:10:f2:9b:d3:62:34:92:1d:e8:64:d7:69:17:31:42:
         71:29:69:a8:5f:a4:32:d3:77:ec:00:54:80:52:e8:dc:3c:49:
         1a:74:fa:1f:81:26:e9:62:b6:2c:cb:cc:a5:40:60:c1:b6:16:
         9c:9c:e0:fd:b7:0e:52:4f:b1:fd:60:27:ea:27:46:64:db:40:
         4e:c3:42:d2:a3:54:3f:11:94:06:06:10:1e:5d:ca:a5:56:0d:
         8c:6c:aa:ae:3f:ae:46:b6:c9:ab:ea:cf:4f:33:fd:a3:d0:59:
         2b:66:b6:59:97:09:0a:51:47:3c:85:d8:63:23:ea:55:8e:53:
         ca:84:8f:46:e0:eb:e2:e1:78:ac:fb:4b:36:9f:79:d0:2e:97:
         ca:66:91:3c:56:c2:4a:d5:e0:88:72:02:ac:1c:86:05:d0:df:
         61:a2:76:32:84:13:b9:7d:69:33:c1:3d:34:ce:31:6c:28:89:
         ff:56:70:e9:c1:61:c6:76:9a:88:ba:d4:19:b4:26:bc:b9:67:
         fc:6f:9b:dd:fd:90:58:0d:ac:ae:4b:4a:f9:92:80:12:f8:80:
         f2:1e:a4:3b:82:0c:95:90:de:85:7f:6a:b7:2d:08:c1:aa:3a:
         8a:0b:27:93:43:f0:d9:d8:59:4a:6f:55:95:ca:73:4d:e9:67:
         65:78:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org