Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6230303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a6230303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          zGiowxkKKEDHibqZs61IaxpuKpJn169q3eo/7EawcU4=
Subject key identifier:   9E:27:E5:4D:E6:B5:2D:69:E7:DA:0D:6C:22:92:D5:D6:2F:3D:3C:0A
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       1655EF01E50D4D58AE3785AC48A138A9965B0CE7
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6230303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:05 +0000
ROA not before:           Tue 05 Mar 2024 17:39:05 +0000
ROA not after:            Tue 04 Mar 2025 17:44:05 +0000
asID:                     272966
IP address blocks:        2803:8590:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:55:ef:01:e5:0d:4d:58:ae:37:85:ac:48:a1:38:a9:96:5b:0c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:05 2024 GMT
            Not After : Mar  4 17:44:05 2025 GMT
        Subject: CN=9E27E54DE6B52D69E7DA0D6C2292D5D62F3D3C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:a8:ae:09:c9:3b:eb:4e:13:cf:94:d4:33:
                    5a:3b:89:fe:7a:03:f5:fd:23:94:43:2d:04:dd:e6:
                    ac:41:a7:99:5e:2d:1e:6e:c4:83:7b:5c:0a:b7:4f:
                    ae:2f:94:da:27:e2:8a:a9:9c:56:f3:e9:e5:9c:6e:
                    08:9a:23:d4:d3:9f:9b:83:c7:13:5f:43:c2:c8:30:
                    28:3f:cf:91:1e:45:29:4b:5c:ef:84:09:11:5e:34:
                    fc:3e:50:17:b6:be:09:73:9e:d5:af:73:8c:c4:76:
                    fb:9c:f7:23:ec:79:9c:c6:01:32:fe:a1:93:f4:82:
                    0d:3d:50:c9:65:4e:f2:fa:05:9e:cc:b6:36:ad:f0:
                    0e:53:32:fe:67:a1:91:42:63:0b:14:d2:9f:aa:d7:
                    36:1a:f4:70:06:09:5e:65:2f:89:b7:da:a8:62:ff:
                    d1:92:71:fc:07:e4:a5:96:c9:5a:67:41:1c:5e:81:
                    00:c1:f5:ab:48:86:01:a6:0a:35:fe:dd:1e:07:be:
                    c6:58:ac:26:7d:98:10:f2:25:d9:cf:a3:73:f0:43:
                    4c:8b:3b:31:0e:5d:2a:62:7a:87:55:8a:4b:d9:08:
                    c0:8d:61:57:90:f2:dc:8e:04:34:7f:79:e4:3f:41:
                    8c:dc:c1:a7:31:f0:aa:59:34:ea:31:e9:f7:26:c0:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:27:E5:4D:E6:B5:2D:69:E7:DA:0D:6C:22:92:D5:D6:2F:3D:3C:0A
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6230303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:9a:aa:f1:5d:bf:25:dd:72:94:5f:3d:b8:6c:4f:3c:ff:
         33:2a:de:6a:d2:cb:43:b3:e5:bc:a9:a8:81:18:f0:4a:49:17:
         f0:4d:b3:6f:95:86:20:96:f0:e0:90:cf:89:89:af:c8:a9:d7:
         d2:3b:eb:aa:c7:5b:51:8c:27:b9:48:94:db:da:d4:8f:21:65:
         4f:a7:6d:73:4a:ec:6a:06:b1:23:76:a2:b6:54:65:cd:30:99:
         10:2e:71:71:58:f6:b3:90:50:50:81:ba:7f:41:0d:a4:d8:d2:
         e8:15:15:69:58:b6:e2:15:ef:13:d9:82:ab:29:41:2e:83:ff:
         0b:aa:19:2c:c7:1b:70:66:c7:9c:66:16:25:06:01:4c:57:74:
         50:c5:6d:bf:d1:ed:70:7c:95:e8:04:7d:91:f8:78:17:bd:3e:
         98:ba:1b:b7:0d:ad:c0:5a:b3:fe:cc:0e:78:78:d8:5e:76:8a:
         39:15:cf:64:ec:05:96:92:d5:08:3c:79:19:a8:6d:3b:c3:47:
         7d:07:21:13:5b:7a:e0:30:45:aa:c6:89:01:ad:2e:df:86:b8:
         b6:5b:c3:c0:a4:30:87:d1:4b:c3:2e:96:66:bd:7e:9a:18:71:
         36:9a:62:57:17:ac:99:0f:d7:73:2d:09:6b:7d:b4:8f:db:f9:
         6f:8a:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:56 2024 by rpki-client on console-ams.rpki-client.org