Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/323830333a396165303a3a2f33322d3438203d3e20323639393430.roa
File:                     323830333a396165303a3a2f33322d3438203d3e20323639393430.roa (raw, json)
Hash identifier:          z/gV1rwjoVqA8wB9x9g01EJ+DRLGb02nbVt83MNmHUU=
Subject key identifier:   28:9F:42:95:31:18:1E:98:EB:4C:E4:F1:C0:AD:2D:2A:53:04:07:95
Certificate issuer:       /CN=68C78301E8DE93E126F02541825380CE3FA602AB
Certificate serial:       7C73D77A6653A41742110C31B11D12EBC2BDE83E
Authority key identifier: 68:C7:83:01:E8:DE:93:E1:26:F0:25:41:82:53:80:CE:3F:A6:02:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/323830333a396165303a3a2f33322d3438203d3e20323639393430.roa
Signing time:             Tue 05 Mar 2024 18:10:09 +0000
ROA not before:           Tue 05 Mar 2024 18:05:09 +0000
ROA not after:            Tue 04 Mar 2025 18:10:09 +0000
asID:                     269940
IP address blocks:        2803:9ae0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:d7:7a:66:53:a4:17:42:11:0c:31:b1:1d:12:eb:c2:bd:e8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C78301E8DE93E126F02541825380CE3FA602AB
        Validity
            Not Before: Mar  5 18:05:09 2024 GMT
            Not After : Mar  4 18:10:09 2025 GMT
        Subject: CN=289F429531181E98EB4CE4F1C0AD2D2A53040795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:7c:1c:7a:57:63:c7:a5:ab:48:c8:d0:b2:
                    31:89:c9:eb:31:1b:c8:cc:c4:42:df:7a:fb:a7:98:
                    be:aa:d9:7f:2c:93:67:1b:dc:99:cc:e6:76:d8:45:
                    98:bc:d6:da:ce:99:7d:d8:bf:60:26:11:b1:60:02:
                    7d:14:48:fd:50:e8:e9:82:d7:7f:ff:89:d8:fd:36:
                    4a:6c:25:8a:9a:89:4f:b9:0e:bf:26:87:12:7c:4b:
                    0c:04:a7:b4:e6:89:b3:b0:87:09:bd:b5:19:e4:db:
                    7e:0f:bd:02:c2:bc:28:ae:cc:31:09:36:b7:76:ec:
                    e1:94:ea:f4:eb:b3:18:b7:8f:ab:d4:bb:b0:0b:40:
                    a4:65:e8:f2:e6:ac:93:1e:90:ad:2b:fb:70:ae:c1:
                    6d:6e:12:b1:c4:d6:62:f7:47:69:8c:29:20:5e:23:
                    73:d3:81:ec:85:71:d0:95:d3:e0:e0:4f:48:2c:c5:
                    69:fd:76:75:9e:ea:7c:e6:cb:8e:d1:bf:ee:d0:8b:
                    08:48:58:07:0f:7f:1c:8d:78:85:3b:55:0a:27:15:
                    e0:5a:8b:c4:26:8a:df:06:84:9a:61:61:f6:61:9e:
                    84:68:01:cf:ba:21:30:cd:c6:80:53:40:6c:7e:e4:
                    a1:12:e1:8b:00:65:f4:88:88:7e:0f:1c:b1:bd:2a:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:42:95:31:18:1E:98:EB:4C:E4:F1:C0:AD:2D:2A:53:04:07:95
            X509v3 Authority Key Identifier:
                keyid:68:C7:83:01:E8:DE:93:E1:26:F0:25:41:82:53:80:CE:3F:A6:02:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/323830333a396165303a3a2f33322d3438203d3e20323639393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:34:62:5c:1a:5f:3b:39:b1:bd:96:e1:fb:93:be:f2:17:d3:
         1f:81:f4:ec:cd:ec:04:d7:e7:48:49:ca:95:87:e8:d8:f6:ac:
         2c:4d:ce:61:b5:d0:37:3b:74:84:87:89:f5:59:c6:d8:cb:51:
         29:75:a9:53:7f:03:65:06:cf:ae:dd:83:ce:99:6d:37:63:ef:
         8b:c8:58:57:d6:ac:14:c0:4b:78:19:1a:fe:2e:08:24:a6:bd:
         6c:c0:d4:9b:a6:12:c0:4b:f2:86:34:f5:39:85:b1:6a:ed:ac:
         cb:8a:ab:6c:86:0a:e5:01:b9:22:5a:24:94:72:28:7c:d6:42:
         1a:93:8a:3e:5b:45:19:46:3a:f2:ac:f3:f2:ed:46:fe:f2:3b:
         22:60:0a:a4:2b:e1:88:7e:8f:a1:2d:a2:21:c5:2a:6c:4b:bb:
         76:98:96:39:85:ef:c0:50:59:3d:05:0e:df:f0:c8:92:61:9a:
         b2:40:97:71:ce:e2:b8:78:e7:ff:1e:6b:54:48:94:c4:7b:46:
         4b:f5:19:c0:1b:83:1e:20:28:ca:1e:e4:77:35:f5:87:50:80:
         e0:47:33:69:04:2a:bb:c1:c5:3e:c8:3b:38:98:f4:ed:87:c8:
         1a:58:39:ff:f7:66:5e:94:52:ed:f3:e6:94:1e:61:30:03:99:
         65:b0:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:08:46 2024 by rpki-client on console-ams.rpki-client.org