Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313230303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a313230303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          9TxVCBm92ynMFN9syCxMlcttk375/mYd1IAE7AgsqhE=
Subject key identifier:   76:E3:F2:DA:5E:E8:EB:6A:33:73:E5:87:D1:A3:4C:F4:2F:E7:DE:A4
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       3C66F3B38E5DA3F63834801D9D41A8ACBC488548
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313230303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:03 +0000
ROA not before:           Tue 05 Mar 2024 17:39:03 +0000
ROA not after:            Tue 04 Mar 2025 17:44:03 +0000
asID:                     272966
IP address blocks:        2803:8590:1200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:66:f3:b3:8e:5d:a3:f6:38:34:80:1d:9d:41:a8:ac:bc:48:85:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:03 2024 GMT
            Not After : Mar  4 17:44:03 2025 GMT
        Subject: CN=76E3F2DA5EE8EB6A3373E587D1A34CF42FE7DEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:fa:7e:28:26:5f:b7:8d:39:38:59:d0:08:
                    dd:07:3c:98:13:50:06:c3:ff:4e:81:be:db:a8:65:
                    a1:1c:d4:f7:46:80:91:2d:0e:70:65:a3:b8:2e:61:
                    1a:03:83:f5:58:9a:48:c7:64:b2:72:c9:8c:3a:89:
                    55:01:d8:0f:b6:08:c5:e9:f2:f8:0a:cd:3a:76:2f:
                    a0:08:71:90:cb:13:2d:fb:f8:41:e0:97:1a:fc:52:
                    f6:0b:88:25:6e:4c:63:fd:44:09:a6:4d:37:9d:98:
                    a8:7b:ac:de:2a:18:2d:42:84:48:e5:6f:ee:50:62:
                    95:77:30:6d:78:2b:27:91:5b:da:15:e7:00:61:6c:
                    bb:cd:e5:d6:d5:36:d7:9f:d6:fd:a6:0f:ab:1d:64:
                    8d:83:f2:ea:c8:f7:7a:e5:b9:15:ce:f1:42:b2:88:
                    9e:0c:d4:a3:e9:c3:96:85:0d:21:23:d2:9a:b9:dc:
                    e5:d9:61:50:a4:0f:45:63:be:96:91:fe:7d:e0:e9:
                    10:44:26:c9:4a:ef:e6:a5:0a:db:f3:75:02:ac:8b:
                    27:b7:23:56:ec:81:63:aa:bc:2c:b7:51:a1:00:53:
                    fe:40:68:42:fc:25:8a:ca:e3:37:c9:c6:f7:71:7b:
                    ae:74:08:b8:53:ea:5b:a5:f1:df:23:97:88:19:9f:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:F2:DA:5E:E8:EB:6A:33:73:E5:87:D1:A3:4C:F4:2F:E7:DE:A4
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313230303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:94:05:39:38:9b:21:c0:a6:fb:52:80:36:ce:36:30:0b:
         c8:16:98:09:15:15:3f:73:1f:5e:92:94:c6:41:43:22:46:47:
         17:91:bf:15:3b:a6:8c:4a:25:67:af:cd:8d:bb:f2:44:d8:e7:
         2c:c1:c4:6a:4b:f2:e9:51:63:8a:ee:2d:ac:58:b0:63:08:67:
         ac:ae:79:a6:a5:93:16:80:0e:c4:0d:24:cb:92:cf:57:4c:9a:
         0a:18:c7:62:94:42:51:03:52:38:b4:80:64:64:c9:2b:04:27:
         97:7f:66:00:31:0f:da:d9:29:a7:02:0c:ab:4c:c8:2d:25:19:
         f5:60:10:f9:25:00:28:00:33:84:03:68:04:4a:53:3a:fd:c8:
         6e:b7:be:78:dc:0e:c3:8d:af:fe:8e:59:4a:5c:9d:89:03:99:
         c3:e0:3d:ec:45:30:f4:8b:bd:0b:82:0e:a8:b4:1e:37:f4:ff:
         e5:b7:ee:4f:8c:cc:8a:39:16:b0:24:3b:40:32:76:c1:0a:da:
         b3:e4:48:3c:be:26:d0:8a:2f:4b:7e:c1:31:12:bf:26:57:59:
         23:ca:27:f5:3a:f2:6a:d5:50:35:d2:e8:83:fd:ee:81:a9:08:
         d4:05:e3:0f:fe:9a:0d:f3:60:33:f6:b3:8d:8e:c5:6a:bd:d8:
         c3:f6:12:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 25 10:00:13 2024 by rpki-client on console-fra.rpki-client.org