Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/323830333a366265303a3a2f33322d3438203d3e20323730303839.roa
File:                     323830333a366265303a3a2f33322d3438203d3e20323730303839.roa (raw, json)
Hash identifier:          kI3C+rcCX2VcP36cJLXobaV7aOVCeWtH/PO5cwEApSE=
Subject key identifier:   7D:51:8F:39:C5:95:A3:6B:DA:55:28:32:47:C4:14:61:FC:4F:42:C2
Certificate issuer:       /CN=C73971A2080A975B88CBA6005895BD357D233BC8
Certificate serial:       60C58F736551A37DE5DEB3A97396E3FB7EAA3FD8
Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/323830333a366265303a3a2f33322d3438203d3e20323730303839.roa
Signing time:             Fri 19 Jul 2024 14:50:00 +0000
ROA not before:           Fri 19 Jul 2024 14:45:00 +0000
ROA not after:            Fri 18 Jul 2025 14:50:00 +0000
asID:                     270089
IP address blocks:        2803:6be0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:8f:73:65:51:a3:7d:e5:de:b3:a9:73:96:e3:fb:7e:aa:3f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8
        Validity
            Not Before: Jul 19 14:45:00 2024 GMT
            Not After : Jul 18 14:50:00 2025 GMT
        Subject: CN=7D518F39C595A36BDA55283247C41461FC4F42C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:a7:ed:3c:53:94:6b:8d:f7:2a:be:a9:cb:
                    52:57:1c:30:a0:0b:e6:31:19:c9:a8:cd:1d:bd:72:
                    f8:03:d8:2e:86:f2:4b:d5:0a:56:1d:56:5c:75:61:
                    98:ce:be:a8:80:85:5c:3f:bb:aa:43:ec:82:1f:ba:
                    00:97:f6:7f:5c:f9:83:9f:d3:cb:bb:73:4b:a1:b4:
                    0f:b0:09:c2:32:e1:f9:fd:92:e1:41:5d:7f:52:af:
                    63:86:d4:e7:14:0f:09:59:cf:87:fa:9a:cd:71:e9:
                    e4:c3:9e:e6:f1:c5:3a:a3:1d:c4:df:bc:8f:60:16:
                    c7:2a:a7:e8:98:09:9b:ef:10:74:3c:fe:8a:52:3a:
                    23:2a:e3:bf:76:39:3a:f0:a9:a7:17:9e:d0:7c:89:
                    b0:50:57:9f:58:a0:46:16:9f:7f:03:57:3c:2f:27:
                    2c:22:91:ed:f2:a0:19:8a:b6:5b:22:01:a4:87:a8:
                    e9:5e:33:7d:f9:f3:74:1b:b5:a3:1c:db:c0:00:ca:
                    a9:85:82:0a:5a:8e:f9:3a:99:d8:27:04:b0:c5:1b:
                    41:4b:cb:92:f6:85:1a:0c:84:6d:66:3f:c7:fb:be:
                    2f:14:d0:50:0a:11:f2:9f:11:05:06:42:ab:82:45:
                    bf:fc:c8:bb:89:62:49:c6:9a:f5:96:b1:2c:a8:4a:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:8F:39:C5:95:A3:6B:DA:55:28:32:47:C4:14:61:FC:4F:42:C2
            X509v3 Authority Key Identifier:
                keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/323830333a366265303a3a2f33322d3438203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:3b:3d:69:c3:15:6b:8b:09:4e:b2:af:58:7d:25:68:2a:43:
         cd:60:66:14:34:4e:da:f3:dc:eb:72:2f:06:d1:ae:69:8d:d5:
         76:86:30:a4:6c:21:04:b8:a5:5c:45:63:5e:35:d1:e8:23:e3:
         e1:23:af:b1:8b:cb:32:0d:cf:d8:92:19:e3:ce:df:0d:00:18:
         55:f8:8e:b0:1f:f3:a1:a6:92:d1:fa:94:6a:bb:c1:c0:38:f9:
         1e:03:fe:57:e5:ff:18:8e:7f:17:a4:ef:db:37:ab:28:49:fe:
         bf:01:f7:79:ed:7b:fa:bc:e5:e6:f3:42:96:54:81:ae:d1:49:
         20:0c:8b:49:a7:a0:fa:dd:ca:bf:a9:90:70:52:df:61:d0:90:
         7e:bd:2c:81:dc:3d:b9:f6:6d:8e:34:d8:ea:02:dc:25:da:96:
         cb:aa:2b:4c:59:81:ec:c2:33:c8:68:9a:74:98:b3:bb:d4:b2:
         2e:3c:62:99:52:77:2f:6c:9c:b7:04:5a:8b:5b:b3:a8:82:ca:
         7a:a1:b4:9f:84:6c:1a:fd:63:7b:6a:88:83:1e:88:a4:69:c3:
         8e:a9:ad:aa:ac:5b:d2:5c:17:30:14:79:43:21:66:40:8b:1d:
         b2:74:72:c0:e0:00:02:fc:c7:0c:35:d8:79:be:6b:79:c9:00:
         95:d1:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 04:59:04 2024 by rpki-client on console-fra.rpki-client.org