Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a616132303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          USKkii6zxYpFuqIdK18icTpMfYuxBrLc3cGLwqttqvY=
Subject key identifier:   22:C0:B6:DD:BD:75:99:30:90:F3:B0:71:1C:C9:74:47:09:5E:96:95
Certificate issuer:       /CN=179432928797F12F1478B33FBCA3D63294DDAFC3
Certificate serial:       56DE9DAEB3C7CD6D65EDC168A680EF7A5D1F0B33
Authority key identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:03:19 +0000
ROA not before:           Tue 05 Mar 2024 17:58:19 +0000
ROA not after:            Tue 04 Mar 2025 18:03:19 +0000
asID:                     264668
IP address blocks:        2803:aa20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:9d:ae:b3:c7:cd:6d:65:ed:c1:68:a6:80:ef:7a:5d:1f:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179432928797F12F1478B33FBCA3D63294DDAFC3
        Validity
            Not Before: Mar  5 17:58:19 2024 GMT
            Not After : Mar  4 18:03:19 2025 GMT
        Subject: CN=22C0B6DDBD75993090F3B0711CC97447095E9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:73:5a:d1:41:35:db:f4:04:df:8d:b3:d3:
                    95:79:6f:39:b2:3e:dc:3e:8d:4d:57:a6:cc:09:35:
                    86:a3:26:9b:4d:25:0d:54:30:61:63:08:52:b7:12:
                    9e:2f:a4:72:44:33:e5:8a:88:fc:ca:92:7d:f0:5f:
                    bc:00:10:03:50:5e:b9:17:16:56:73:d1:ff:0c:94:
                    f8:0c:41:26:f4:55:61:ac:c7:2d:cd:62:94:93:09:
                    74:ff:1e:fd:6f:bc:56:e9:ad:df:dc:56:80:48:a5:
                    93:1a:32:df:ac:ec:51:76:71:ff:2d:d9:31:ce:97:
                    70:e3:f5:ad:15:35:c3:89:6e:f6:c1:9f:b6:e2:46:
                    2c:dd:66:8a:61:de:cc:61:70:b4:4f:0b:55:75:3c:
                    6b:9f:73:85:01:16:69:9a:2f:ff:ab:fb:ba:29:1c:
                    73:4f:16:d2:c3:fb:63:b3:46:7a:6a:cb:ef:1a:99:
                    31:91:b2:09:fe:5d:cf:bb:c4:0d:09:1a:d3:cf:57:
                    40:dd:e2:3e:02:5b:62:07:a7:09:a1:a1:ef:1b:f9:
                    bb:73:e2:98:fd:2e:6a:8f:2c:8f:67:7a:6d:b9:3a:
                    6b:40:b2:5a:5b:35:f8:53:c9:59:aa:68:c2:5c:4d:
                    fa:3d:a3:68:c5:18:28:4a:1d:56:c8:7f:37:34:cb:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:B6:DD:BD:75:99:30:90:F3:B0:71:1C:C9:74:47:09:5E:96:95
            X509v3 Authority Key Identifier:
                keyid:17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/323830333a616132303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:19:9c:37:c1:32:ed:7c:4f:1c:d6:57:cc:a3:d5:4d:bd:59:
         46:a3:05:5c:71:46:43:a7:b5:0c:84:6c:e9:58:c8:75:8f:88:
         0c:8f:e8:82:a9:bb:f6:fe:7f:b8:0f:94:19:12:39:5f:36:a9:
         30:74:09:c5:cb:60:8c:36:0b:c3:89:c5:7d:fa:77:c2:09:c1:
         42:93:5a:02:ca:e1:58:8d:79:30:dc:5a:a3:b9:1a:0d:d2:92:
         1d:0e:ac:f1:f4:dd:44:ba:f3:e1:9d:fd:4b:e2:96:91:95:e3:
         7c:df:5b:cf:f7:01:d8:8e:34:1e:84:fa:15:85:41:84:31:1a:
         d9:e5:30:9b:6a:9d:94:38:99:e6:72:78:be:2e:2a:d6:26:c9:
         8d:73:aa:e4:c4:4b:71:fe:25:eb:ae:bb:99:d6:38:76:3d:b7:
         4b:8b:4b:5f:aa:05:a8:c6:4d:34:9a:0f:47:63:2a:c9:dd:fb:
         b9:0d:0d:2c:f6:af:e8:ea:45:ab:5a:fd:c8:37:14:1f:37:05:
         68:0a:78:af:e8:32:09:82:28:32:13:1c:b6:68:cc:ff:45:76:
         03:88:9c:0e:18:e4:04:18:54:af:74:78:7d:44:f7:13:fb:89:
         ab:ad:db:e0:7d:06:08:3c:30:60:8e:bc:4e:8f:22:16:5b:f5:
         2a:7b:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org