Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
File:                     323830333a393963303a3a2f33322d3332203d3e20323635373032.roa (raw, json)
Hash identifier:          uz7J4yfk0Z+v++Nkwf9S0PFqAcvGj6Fx59Rk9xKAVAY=
Subject key identifier:   B1:66:1F:89:E1:E6:4D:52:39:49:1E:01:9D:5A:FD:2D:EB:7C:13:C6
Certificate issuer:       /CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Certificate serial:       08C9959FEB7957307818E9B3E484640B4F2CF6AF
Authority key identifier: 5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa
Signing time:             Tue 05 Mar 2024 18:18:25 +0000
ROA not before:           Tue 05 Mar 2024 18:13:25 +0000
ROA not after:            Tue 04 Mar 2025 18:18:25 +0000
asID:                     265702
IP address blocks:        2803:99c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c9:95:9f:eb:79:57:30:78:18:e9:b3:e4:84:64:0b:4f:2c:f6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
        Validity
            Not Before: Mar  5 18:13:25 2024 GMT
            Not After : Mar  4 18:18:25 2025 GMT
        Subject: CN=B1661F89E1E64D5239491E019D5AFD2DEB7C13C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:8e:92:63:a7:6b:bf:a2:4f:e0:1f:bf:18:
                    3b:ed:56:ea:70:f7:f9:9c:17:c1:36:b8:93:aa:c7:
                    40:77:00:2c:2a:2a:0e:0e:e0:3b:0b:9e:c2:8c:7a:
                    1e:cf:fe:c7:98:37:99:6b:68:88:cb:96:c7:4c:32:
                    44:0f:c3:5f:1f:c4:2b:87:f4:bc:fb:92:84:02:37:
                    c5:98:8f:dd:6b:9a:ef:dc:3d:9e:02:a4:9c:0b:7b:
                    a3:1d:39:48:24:5e:50:98:d1:b6:36:b0:95:33:80:
                    ba:09:97:8c:2a:c2:c0:5d:e1:fd:dd:8b:02:72:84:
                    a1:84:7d:0a:5d:dc:66:fd:e6:bd:d3:d2:7e:6d:7e:
                    bd:a2:01:3f:69:b1:f7:63:cd:3d:f9:78:ef:9f:8f:
                    cc:a5:ee:ad:04:1f:da:4a:0c:9d:7b:12:06:3b:94:
                    09:f3:7c:86:53:2a:86:7d:1a:41:1c:80:34:f5:64:
                    ac:6f:71:5e:71:13:b3:32:45:64:a1:13:fa:ae:7f:
                    44:7d:7a:82:bd:ee:4f:2d:bd:46:55:43:81:c0:af:
                    7f:50:c4:82:df:c2:bf:97:79:1b:65:3f:81:52:c4:
                    35:ef:48:d8:17:10:7c:83:e8:0c:d1:73:f4:8f:7d:
                    59:3d:23:96:bb:ec:78:4d:61:38:f8:be:61:09:6b:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:66:1F:89:E1:E6:4D:52:39:49:1E:01:9D:5A:FD:2D:EB:7C:13:C6
            X509v3 Authority Key Identifier:
                keyid:5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/323830333a393963303a3a2f33322d3332203d3e20323635373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:73:27:ef:bb:45:03:d4:3d:a4:10:04:26:68:6e:c2:01:
         1b:c6:cf:ef:38:aa:8b:a2:42:fc:82:c4:88:5a:e7:8e:37:e1:
         ec:33:7d:db:2c:e9:22:8f:64:bd:02:9c:b6:57:17:42:c6:36:
         9f:43:8a:b3:d5:b8:c9:45:4e:5b:1c:11:dd:34:ff:8a:ee:e4:
         89:f8:94:e6:c4:e3:8f:da:19:b9:53:85:0b:01:3f:be:13:a8:
         11:d5:ad:0f:b3:e1:de:23:d4:6f:c4:06:f5:3e:f4:b4:37:fa:
         ff:f6:7d:14:ca:6e:82:ff:e1:8b:81:dc:5c:2e:68:b1:63:a9:
         c5:58:60:ba:18:ab:b1:62:69:07:72:77:ec:ad:7a:0e:e6:2c:
         f8:32:e3:25:99:ae:4b:9a:2e:7e:a5:9f:ac:96:03:9a:22:d0:
         b6:08:25:76:3a:dd:dc:2c:af:5c:54:8a:fc:04:c4:14:ae:9a:
         df:ae:e9:6d:f9:e9:17:af:f1:4a:f1:e3:04:cb:ff:31:c1:bc:
         6f:cd:09:a8:2a:b6:8c:20:36:0a:b5:63:68:e2:50:f1:a6:38:
         e6:f6:3e:df:84:d9:bf:ef:f5:2a:dc:e0:d6:f8:8e:a0:ed:97:
         08:4c:66:d4:f6:d4:4f:d2:b4:11:e1:38:ce:0e:91:33:f9:ce:
         86:d9:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org