Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6430303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a6430303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          ifc9pujcqF5vAgnSEVtId1nov9o08d+z9YtSNXUdeI4=
Subject key identifier:   E2:12:4C:A3:39:A1:A1:1E:6A:6E:01:2B:6F:85:CE:F7:8F:AE:59:44
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       16803A021E096B3FB1098DBD26ABC5AB6A41C182
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6430303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:06 +0000
ROA not before:           Tue 05 Mar 2024 17:39:06 +0000
ROA not after:            Tue 04 Mar 2025 17:44:06 +0000
asID:                     272966
IP address blocks:        2803:8590:d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:3a:02:1e:09:6b:3f:b1:09:8d:bd:26:ab:c5:ab:6a:41:c1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:06 2024 GMT
            Not After : Mar  4 17:44:06 2025 GMT
        Subject: CN=E2124CA339A1A11E6A6E012B6F85CEF78FAE5944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:75:88:38:7b:85:5d:8e:df:b6:83:20:5f:
                    1c:ca:9b:64:04:3c:a6:ba:8a:0c:db:88:4c:e2:96:
                    16:c4:6c:45:e8:8a:2b:fd:7f:ad:ca:95:07:b9:a4:
                    ac:93:0c:4f:5d:60:a3:9d:6c:aa:ff:83:98:1f:bd:
                    a1:3f:87:d7:6e:77:01:64:67:60:b8:1f:aa:e0:ae:
                    ac:11:f6:1d:25:b9:d1:46:c2:82:e1:1f:90:0e:65:
                    b7:19:00:11:2a:74:49:63:fc:d9:de:34:54:c7:2b:
                    b2:8d:1f:75:a8:90:da:6a:af:4d:c1:32:73:f3:fd:
                    1a:e5:41:a0:e3:ce:f0:70:e7:99:6c:da:3c:a1:be:
                    8d:ce:5c:30:e2:03:e0:d7:b7:b0:90:0e:a6:f9:52:
                    f6:2a:a6:35:d3:11:eb:a3:6e:41:6f:0d:c8:72:a3:
                    b6:4e:8d:fa:20:8c:cd:6f:be:62:88:46:40:f3:d1:
                    db:da:e4:d8:1a:88:7f:d2:e9:dc:23:a7:33:d1:fb:
                    4a:42:ac:1d:32:bb:dd:bc:bf:32:7a:2c:09:3a:e5:
                    06:50:92:c8:66:db:63:77:d8:54:97:18:15:ab:a0:
                    90:c5:36:6d:3f:99:d6:f3:7d:26:e4:84:90:32:48:
                    65:f2:24:09:db:48:47:13:e8:26:45:61:6b:44:d7:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:12:4C:A3:39:A1:A1:1E:6A:6E:01:2B:6F:85:CE:F7:8F:AE:59:44
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6430303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:39:0b:74:18:d9:a0:42:56:2f:bc:cb:69:7e:c2:28:b0:9c:
         eb:ef:00:84:9a:fc:3b:5d:63:c5:49:6f:2f:1a:9e:53:2a:3d:
         f3:64:e6:db:7f:60:d9:d0:ef:93:c3:01:11:35:a9:9f:33:e5:
         f8:e0:3d:02:38:e0:7c:ed:3a:3e:ff:94:c5:db:78:26:c2:b8:
         7d:8c:80:cb:7c:33:13:b2:ef:71:32:a2:f6:78:80:ce:d8:8c:
         1c:af:4e:62:44:cd:1c:5b:57:12:99:a1:f9:aa:9d:74:a2:64:
         c3:07:7e:60:90:12:ef:37:14:c5:51:0a:9a:b9:b4:cf:d0:4d:
         bb:c8:ed:4c:37:94:e3:c8:08:3d:09:4b:cd:a5:59:b3:81:90:
         fd:af:df:7f:88:5e:83:eb:1b:5d:92:bd:2e:50:e9:b4:c5:ac:
         fb:8c:92:08:16:f2:58:b8:1f:fe:71:c1:75:26:e6:09:a7:77:
         21:ac:6a:73:08:5e:86:d6:6f:0c:2f:02:5c:64:e5:20:11:7c:
         8f:15:dd:da:d8:b4:0c:fd:1b:6d:7c:57:e5:3a:a0:da:38:83:
         61:c8:2e:fe:a8:bd:3e:33:df:30:0e:3e:5d:23:82:ed:7e:d9:
         9c:ae:08:d5:01:a3:6c:9f:53:6c:b8:be:cf:ba:10:ed:6f:0e:
         68:4a:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:56 2024 by rpki-client on console-ams.rpki-client.org