Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa
File:                     323830333a636131303a3a2f33322d3332203d3e20323731393137.roa (raw, json)
Hash identifier:          wLyi4Q675mSrAu00eOK69yatsuNfpvlaRDW2yUPqE2E=
Subject key identifier:   9F:79:80:FB:97:F0:58:3B:B8:D1:24:66:A4:E0:CB:FC:29:48:52:E5
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       35DF8EFC133C7A53F9D968951DB569449C083AD9
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa
Signing time:             Fri 24 May 2024 15:30:00 +0000
ROA not before:           Fri 24 May 2024 15:25:00 +0000
ROA not after:            Fri 23 May 2025 15:30:00 +0000
asID:                     271917
IP address blocks:        2803:ca10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:8e:fc:13:3c:7a:53:f9:d9:68:95:1d:b5:69:44:9c:08:3a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: May 24 15:25:00 2024 GMT
            Not After : May 23 15:30:00 2025 GMT
        Subject: CN=9F7980FB97F0583BB8D12466A4E0CBFC294852E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:a4:99:fc:9d:12:f0:33:dd:c8:38:ee:10:
                    a5:8e:fc:cf:3f:41:6c:03:27:f8:28:89:46:cb:5f:
                    97:e9:52:08:0d:83:b0:b4:d3:35:e5:c4:4f:6c:b1:
                    af:18:df:5d:88:66:fb:81:23:68:23:0c:5b:4f:06:
                    39:9f:98:1c:ed:6e:cb:57:6a:ba:0b:52:0f:7b:25:
                    9e:fb:27:13:0a:bf:44:06:bb:c8:f1:b6:0a:6d:87:
                    94:89:c0:04:5b:3b:84:1d:c2:23:6c:3c:fb:9d:1f:
                    66:95:c8:61:62:e4:c7:50:ea:d9:38:3a:69:2d:a5:
                    44:be:6e:d7:f2:d2:86:2f:c8:8b:fa:a1:47:92:30:
                    1a:03:29:9c:c5:92:d5:d0:95:a2:04:20:f9:2d:70:
                    5c:8c:98:e2:e3:33:6f:0f:43:7d:e7:24:cd:c5:41:
                    17:b2:b8:4d:c0:d4:bf:63:d5:8c:0d:53:ff:5d:4b:
                    b4:2d:a8:66:7c:da:4b:91:02:33:ca:3a:76:47:d3:
                    e0:2b:09:40:cc:ff:ee:a3:a1:94:ea:98:f0:5f:6b:
                    a6:0e:49:89:79:24:8b:27:93:39:58:aa:1e:96:52:
                    20:54:5e:81:aa:66:b7:2f:3b:a4:5c:f3:03:84:0e:
                    9e:a8:1c:ee:b8:92:06:7c:c1:49:4a:66:bf:bd:31:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:80:FB:97:F0:58:3B:B8:D1:24:66:A4:E0:CB:FC:29:48:52:E5
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/323830333a636131303a3a2f33322d3332203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca10::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:cb:5f:e5:5e:c8:90:ea:15:3d:a2:34:1a:20:65:b7:8f:
         7b:3f:d8:a5:05:ae:74:6a:41:8d:ae:bb:7f:b3:66:e8:77:a2:
         6d:bb:a4:af:a7:bd:ab:a9:7f:80:91:da:49:f2:d0:a0:1f:73:
         b2:ef:29:f2:c4:e5:6f:fc:17:77:80:31:df:2e:2b:42:0e:3d:
         ab:e2:57:4a:84:17:ed:86:5a:57:46:4e:0f:48:17:20:28:59:
         12:e7:eb:82:3c:de:89:03:6d:f6:cb:b8:b3:57:00:04:fc:f4:
         11:14:df:53:2a:25:17:c3:22:1e:23:c6:66:ed:b9:b1:48:e1:
         b6:fa:b7:d1:ee:20:ae:be:20:3a:43:c2:00:6c:8b:eb:8b:f9:
         fe:93:bf:c5:2d:67:5e:8d:76:57:db:30:96:86:92:5a:9f:cc:
         3f:5c:0c:72:49:47:00:24:5b:d3:51:af:41:09:7b:2f:e9:66:
         ed:38:29:a9:ec:db:03:20:0e:c2:a6:4f:07:2c:b0:04:30:a3:
         ca:c6:8a:20:dc:9b:56:46:10:79:35:31:0e:ab:73:1a:e6:7c:
         89:b3:f9:55:44:d7:0d:3d:e6:d8:45:06:7c:f0:0c:c5:ec:22:
         b6:52:29:2f:1d:1d:3c:a3:4c:a9:3b:36:20:9e:ca:1c:35:17:
         e8:06:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 03:27:15 2024 by rpki-client on console-ams.rpki-client.org