Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/323830333a323663303a3a2f33322d3333203d3e20323637373838.roa
File:                     323830333a323663303a3a2f33322d3333203d3e20323637373838.roa (raw, json)
Hash identifier:          b+P+1a1i4ozNm3ntUeqQFF2sBuhHhOp2/dUljVXEaxI=
Subject key identifier:   CE:22:2E:9E:15:E4:73:E2:95:14:B4:03:2E:CB:23:DA:DC:61:1F:52
Certificate issuer:       /CN=97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262
Certificate serial:       7B20787B97E7DB658FFD40E36A3D17595803F4ED
Authority key identifier: 97:CB:4A:AD:FF:59:A0:E1:8C:B7:FE:F4:08:0B:ED:C5:21:1D:C2:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/323830333a323663303a3a2f33322d3333203d3e20323637373838.roa
Signing time:             Tue 05 Mar 2024 18:08:30 +0000
ROA not before:           Tue 05 Mar 2024 18:03:30 +0000
ROA not after:            Tue 04 Mar 2025 18:08:30 +0000
asID:                     267788
IP address blocks:        2803:26c0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:20:78:7b:97:e7:db:65:8f:fd:40:e3:6a:3d:17:59:58:03:f4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262
        Validity
            Not Before: Mar  5 18:03:30 2024 GMT
            Not After : Mar  4 18:08:30 2025 GMT
        Subject: CN=CE222E9E15E473E29514B4032ECB23DADC611F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:46:8c:70:b8:7e:12:19:63:b0:97:bd:32:
                    f9:7b:b2:eb:f5:20:57:e9:1c:cb:24:33:8f:2a:8f:
                    48:04:5f:70:1d:c5:4e:b5:e9:c9:d9:4c:3d:80:af:
                    e1:33:86:df:85:e5:5d:db:5f:8f:3c:b9:54:f4:3e:
                    08:16:2a:dd:6a:7d:66:be:61:01:36:87:92:0a:98:
                    c9:32:07:6c:46:a3:b1:e3:db:7f:bd:af:e4:78:41:
                    ac:c1:58:07:c0:95:bd:b1:45:9d:38:2c:bb:ac:20:
                    63:e5:d5:e1:70:23:c8:d8:96:d8:cb:7e:38:fe:b9:
                    df:d6:96:ee:f1:35:bb:ca:86:89:df:f3:b2:80:7b:
                    79:31:62:c4:5d:0e:6f:6b:26:95:c1:d3:48:e0:97:
                    17:2f:82:9f:01:42:87:13:6e:47:41:33:f9:a3:13:
                    86:e9:9f:e4:ce:68:3a:68:07:9d:36:94:a6:36:a0:
                    66:85:19:fd:49:b6:2d:c1:ed:c4:b5:52:74:86:a1:
                    07:86:50:ee:cf:bd:78:0f:06:53:bf:9a:9e:c2:c6:
                    20:07:15:be:5f:30:26:b0:fd:a6:0c:e4:37:0d:34:
                    6a:87:b1:62:3d:83:c4:2b:53:11:07:5b:f5:15:a2:
                    cf:f2:39:d2:f5:50:d0:05:10:20:65:41:4c:1d:52:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:2E:9E:15:E4:73:E2:95:14:B4:03:2E:CB:23:DA:DC:61:1F:52
            X509v3 Authority Key Identifier:
                keyid:97:CB:4A:AD:FF:59:A0:E1:8C:B7:FE:F4:08:0B:ED:C5:21:1D:C2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97CB4AADFF59A0E18CB7FEF4080BEDC5211DC262.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA03FF90C51BB056A715EDCBCE6E464883170FA4D8842DD39924DC02F8466415/0/323830333a323663303a3a2f33322d3333203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:26c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:10:3f:2f:96:8f:e6:f0:5a:79:30:6e:0b:d2:89:ad:b2:
         10:11:fe:f1:9d:3a:63:32:7b:c1:8b:e8:c6:a8:94:96:6d:29:
         a6:05:73:c6:66:97:62:c0:2b:76:13:f9:3e:06:28:45:08:c4:
         5b:c7:48:9f:2d:dc:cd:60:84:41:4b:82:72:8c:b6:2f:db:fb:
         40:6a:9f:62:5c:33:23:22:84:44:e3:df:73:21:21:28:75:b3:
         4b:b1:46:21:ac:40:ad:f6:a4:4d:5a:a1:c8:4a:a3:f4:6d:73:
         62:63:51:33:99:55:d0:94:87:0f:1b:fb:7f:b3:7c:02:2d:1a:
         14:4b:aa:80:18:34:f7:60:a3:ca:ba:f0:11:5c:29:4e:14:22:
         20:34:d1:7a:e0:01:10:84:59:5b:ed:ae:0c:e4:c1:4b:f1:7d:
         24:2d:53:62:f7:3f:0d:e0:1d:9e:8a:c8:51:e3:15:8e:f8:39:
         7f:d3:06:1d:da:87:51:f3:e9:70:cd:19:e7:87:4a:89:32:42:
         cb:31:50:9d:d0:bd:eb:fc:ba:f6:7c:6e:0b:7d:a6:55:a6:d6:
         e4:85:2a:85:79:85:f4:df:00:d7:90:e5:6c:78:fd:45:8b:0f:
         c3:fe:bb:6d:05:ae:c5:7f:d1:e5:31:07:7e:22:dc:31:a7:3d:
         f4:95:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:44 2024 by rpki-client on console-fra.rpki-client.org