Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3430303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a3430303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          KLG2CAg81w77Hqu2q6U1oDT5v6A1gFHqHbAhJMHvEus=
Subject key identifier:   DD:59:74:8D:B2:DA:84:9E:C7:AC:AD:93:D7:A6:3D:2C:5A:94:A8:8B
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       07197B449A3293286F18C409E24F3EAE7A2178F3
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3430303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:06 +0000
ROA not before:           Tue 05 Mar 2024 17:39:06 +0000
ROA not after:            Tue 04 Mar 2025 17:44:06 +0000
asID:                     272966
IP address blocks:        2803:8590:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:19:7b:44:9a:32:93:28:6f:18:c4:09:e2:4f:3e:ae:7a:21:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:06 2024 GMT
            Not After : Mar  4 17:44:06 2025 GMT
        Subject: CN=DD59748DB2DA849EC7ACAD93D7A63D2C5A94A88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:8f:92:9a:a2:09:6f:0e:38:52:b0:fc:c8:
                    bc:60:a9:3b:eb:4a:f2:ae:c2:7e:1c:7d:7b:96:b0:
                    9d:9d:31:8f:c5:a2:86:aa:69:02:fa:26:c1:e3:20:
                    0d:9b:32:a3:57:6a:71:d5:d0:16:0a:71:ab:7e:b2:
                    3d:a2:8a:8e:a9:ca:90:f0:0a:cf:20:f9:8f:9d:03:
                    d3:72:38:f5:ec:ea:e8:81:2d:eb:6a:0f:52:36:8f:
                    68:6f:f0:b6:8b:e7:cb:6e:24:bf:69:96:db:c7:34:
                    ef:91:75:99:12:f9:13:a0:bd:60:cc:96:60:59:7e:
                    23:94:b2:f7:f6:9a:9a:52:ce:3a:2e:3d:99:8b:5a:
                    75:67:d0:fb:5c:e9:80:8c:f2:32:9e:f4:fb:28:8e:
                    82:8b:fd:75:cc:52:89:c1:22:a4:63:c6:1d:0b:95:
                    e4:49:6e:2a:f6:9b:86:bc:cf:eb:d0:f0:58:30:ae:
                    2c:99:93:cd:28:84:0d:2b:4f:3e:f1:50:7a:2d:7c:
                    d6:5c:79:ab:45:37:fa:74:3c:64:e3:b0:4b:12:8d:
                    29:1d:27:ca:44:fe:24:a2:73:ef:43:e6:9e:8e:de:
                    95:c1:1b:a3:0a:2e:ec:19:70:fe:1c:4a:4d:c4:c1:
                    32:15:42:d9:ef:bd:07:45:bd:14:bd:18:ad:18:b8:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:74:8D:B2:DA:84:9E:C7:AC:AD:93:D7:A6:3D:2C:5A:94:A8:8B
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3430303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:fa:2a:f8:bf:22:27:5f:24:36:09:5a:67:b1:22:64:39:
         56:67:a9:b2:d3:5e:ae:2b:e4:6c:9b:00:e5:47:88:b7:b8:b8:
         8b:45:0a:09:07:b6:8a:30:d5:b0:1c:35:31:47:f1:88:2a:b5:
         0d:9c:1c:71:9b:e6:5b:58:87:81:39:c9:27:8a:fb:fd:53:bb:
         aa:66:0b:f5:24:23:0a:9a:4d:bf:f1:cc:8f:82:f2:b7:e5:83:
         55:e8:37:56:0f:ed:24:49:65:4a:1e:1e:78:fd:69:fe:a7:c5:
         6f:71:76:52:bf:65:ce:c3:23:0f:0d:4a:d4:5a:18:1d:58:87:
         bd:73:13:db:c9:b9:2a:c5:e1:87:ec:90:6d:3a:36:d4:32:6b:
         82:af:e1:7e:28:fa:63:fd:d8:59:83:a3:a4:85:ca:20:1f:65:
         27:ea:61:dd:a8:c0:ae:8c:e0:83:c0:52:e6:c7:09:39:5f:87:
         75:ec:b8:08:c0:c4:bb:f6:b8:12:9b:87:de:5f:0a:3d:8a:c5:
         c8:d5:0b:5d:cb:52:78:ae:2c:17:2f:c1:53:4c:c9:a6:27:c5:
         de:e0:d8:9f:14:4a:57:ab:90:6f:2e:75:ec:94:63:ef:63:87:
         01:09:31:60:d4:6f:4d:3f:1c:9c:f5:89:71:2d:60:71:66:8c:
         21:b9:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:56 2024 by rpki-client on console-ams.rpki-client.org