Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa
File:                     323830333a386536303a3a2f33322d3332203d3e20323637393134.roa (raw, json)
Hash identifier:          AouICTILa4XzDGj+jHX801qg9klzwCEUts9iSrcce80=
Subject key identifier:   47:80:83:FE:20:43:80:E5:0A:42:88:DE:3D:5D:FD:03:C9:D5:0A:8A
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       46A45F1BD283DDE245A2B6000B6292289C84FF1D
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     267914
IP address blocks:        2803:8e60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:5f:1b:d2:83:dd:e2:45:a2:b6:00:0b:62:92:28:9c:84:ff:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=478083FE204380E50A4288DE3D5DFD03C9D50A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:6e:eb:23:c8:2d:5e:12:4f:0a:6c:93:b0:
                    b2:ee:69:97:17:59:f6:84:9f:6f:b7:69:b7:49:18:
                    bb:e8:ee:5e:d9:31:c9:60:cc:ed:6c:b4:91:5d:92:
                    ae:d4:f5:8a:63:ea:1f:03:49:4b:ac:d5:47:ea:70:
                    d0:a5:c0:37:f1:73:b8:20:1e:83:cc:54:31:91:dc:
                    3b:92:57:ef:f6:29:3a:06:02:5f:72:9e:40:06:d9:
                    a4:d7:e2:2d:9a:a2:e1:26:71:5e:1e:f0:fc:96:c7:
                    8e:55:a3:23:be:b0:e2:6e:b6:ad:82:42:25:d9:79:
                    64:35:e7:9c:a6:29:e6:1b:f5:46:82:4e:da:a0:a2:
                    71:d3:c0:21:30:9f:a3:3b:be:37:4a:7d:38:c9:79:
                    5e:88:2e:41:3d:ae:6c:dd:41:4a:5d:fd:b4:87:90:
                    3a:60:5d:09:ea:d9:50:0f:c1:7e:81:05:36:60:54:
                    d6:66:5c:1d:90:bb:aa:bf:e2:6e:94:8d:b3:d6:ee:
                    8e:1a:72:c2:49:17:50:08:26:fa:9c:9b:ee:0f:4a:
                    3c:38:52:da:e0:67:34:bf:f9:12:de:c9:6b:e1:e3:
                    3d:fb:4b:2a:8a:b6:ec:79:88:0b:c0:7b:c9:bc:0b:
                    64:9e:a3:b1:30:5a:03:24:fe:fa:bf:af:fc:a6:84:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:83:FE:20:43:80:E5:0A:42:88:DE:3D:5D:FD:03:C9:D5:0A:8A
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33322d3332203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:07:ce:4b:12:72:e6:4e:7c:85:03:5a:9b:57:2f:fe:6c:be:
         e6:66:ed:bf:90:a6:47:9a:27:19:e0:27:79:02:b3:8f:66:6b:
         68:e7:35:a6:07:28:dd:8f:b4:35:b6:56:06:c1:6a:95:0f:af:
         4e:15:2c:65:26:6c:52:35:ce:11:56:ce:13:fc:fe:98:fa:24:
         ae:de:46:8a:04:c7:fe:d8:52:84:b2:98:a7:97:dd:33:47:15:
         34:29:b6:b6:3b:cb:20:44:57:13:31:88:6f:78:33:93:ff:15:
         5c:12:d3:34:ee:62:0c:c5:77:c2:40:1a:10:61:de:f9:9a:d0:
         c6:d0:b9:b6:14:af:91:b6:c4:b2:cd:eb:26:59:2f:da:d3:20:
         45:49:64:7c:79:70:bc:b4:f0:0b:01:ac:0c:0f:02:5a:e3:9f:
         52:b1:80:19:71:2c:33:65:d7:a9:9d:a1:0c:3d:df:73:04:38:
         e9:50:8c:f5:fc:f5:e1:70:51:9c:5d:93:e4:02:f6:6d:e1:b6:
         44:03:26:c6:54:6b:cb:81:c2:42:df:79:3b:6c:ac:ef:ff:87:
         c6:bd:c8:0e:e1:84:ec:b7:68:f6:1c:76:de:e6:ba:3c:bf:d5:
         3f:0e:36:d6:0f:42:d5:a7:b0:ae:95:e4:f6:df:91:55:43:9d:
         f2:79:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:23 2024 by rpki-client on console-ams.rpki-client.org