Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa
File:                     323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (raw, json)
Hash identifier:          qslbZUkURry6Mvw7ps01CfTShjdCv5NxBjwMjH16Wrs=
Subject key identifier:   DA:C8:BC:FC:F8:64:C7:63:26:78:3F:E9:AB:DA:F5:5E:57:28:E8:DC
Certificate issuer:       /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
Certificate serial:       52ED1A9DFA650A3BBF79E0B75E73E4E7DDC7BBF8
Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa
Signing time:             Tue 05 Mar 2024 18:03:49 +0000
ROA not before:           Tue 05 Mar 2024 17:58:49 +0000
ROA not after:            Tue 04 Mar 2025 18:03:49 +0000
asID:                     267920
IP address blocks:        2803:2e60::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ed:1a:9d:fa:65:0a:3b:bf:79:e0:b7:5e:73:e4:e7:dd:c7:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
        Validity
            Not Before: Mar  5 17:58:49 2024 GMT
            Not After : Mar  4 18:03:49 2025 GMT
        Subject: CN=DAC8BCFCF864C76326783FE9ABDAF55E5728E8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:2a:3a:59:b8:6c:24:58:8a:16:b4:6b:1a:
                    ec:cd:ca:59:6b:2c:8a:65:6a:c8:05:54:aa:d3:44:
                    f9:69:04:23:3f:d9:b4:0b:27:eb:72:68:7a:9e:a0:
                    bf:27:4f:ba:93:c3:2b:9f:d1:c3:c4:63:08:e6:11:
                    5f:00:4c:22:27:02:24:d8:de:f9:d3:80:f0:5d:3f:
                    79:3e:e0:ef:e3:98:18:73:00:bb:64:7e:60:6c:95:
                    38:fd:6f:5f:d5:a3:4e:4f:4b:d5:67:91:8a:8f:19:
                    1b:00:fb:26:50:ca:5b:1d:31:6c:73:60:dd:95:06:
                    16:4a:58:1f:fe:c1:5a:4f:b9:ed:28:5a:68:c8:c5:
                    f4:d7:39:09:cf:4b:b8:ff:34:60:99:f4:47:f0:ca:
                    fb:b6:e9:5a:4d:e4:ae:d5:a7:5d:a1:33:14:85:94:
                    3e:88:a7:c9:b9:72:1c:77:32:4b:3b:ff:3d:cc:9f:
                    02:71:0f:84:b7:0d:47:2a:f3:09:29:20:a7:8a:ac:
                    2d:99:d9:c3:81:4f:fc:50:cb:e7:84:fe:29:a8:8f:
                    9d:18:bd:d4:33:3b:60:85:d6:90:29:49:41:11:30:
                    fb:9f:87:ab:24:f3:be:6a:f0:80:6b:b7:60:98:a1:
                    69:ce:5a:95:c9:34:d2:8c:a4:06:e7:9f:df:a1:14:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:BC:FC:F8:64:C7:63:26:78:3F:E9:AB:DA:F5:5E:57:28:E8:DC
            X509v3 Authority Key Identifier:
                keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/323830333a326536303a3a2f33322d3430203d3e20323637393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:e6:98:89:ca:ff:e3:09:23:99:a1:9d:0b:21:99:e8:f3:c3:
         dd:e7:85:8f:dd:23:87:4d:cd:c2:02:e4:81:70:3d:43:63:2a:
         e7:ae:54:a6:77:08:da:b9:36:49:3a:e9:fb:0b:f4:46:b1:28:
         0e:ba:0a:69:b5:50:00:66:e9:7c:55:f6:02:16:f4:1c:cc:c4:
         71:e7:7f:49:e9:6f:18:10:15:c3:be:4c:ee:e2:2e:cb:91:90:
         76:be:5c:53:08:0c:e7:8e:71:b0:a1:ed:d7:63:72:0c:33:33:
         0e:eb:55:48:bb:4f:19:a8:65:89:ab:d1:72:80:f4:3e:c4:69:
         35:28:ff:95:a1:f1:12:1f:e6:3f:bd:08:08:32:2f:07:11:65:
         9e:a4:80:61:eb:0f:4b:00:b8:bf:51:b7:5e:52:9d:d0:04:37:
         e7:67:f0:dc:77:43:a1:b9:79:67:13:b2:59:d1:93:d0:84:db:
         11:ab:58:93:cd:a7:40:5b:1a:fb:40:4f:ea:70:e1:10:74:21:
         c1:8e:b7:41:ee:dc:59:e3:b4:f0:bc:35:d5:f9:e9:48:3d:e8:
         bb:13:47:b0:bb:c4:ef:f3:a6:48:76:a8:5d:32:6b:90:83:b5:
         3b:6c:16:0e:f4:17:9b:06:b3:ca:9b:5d:7e:32:c8:7e:93:d2:
         4c:9e:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org