Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa
File:                     323830333a633731303a3a2f33322d3438203d3e20323732303937.roa (raw, json)
Hash identifier:          koKOumychYElC4GsPIZQoDJiuLW3UGKxcj2PvLwwtqY=
Subject key identifier:   48:F2:CE:D5:F9:C2:DE:1D:D1:AB:4D:9B:3F:C5:25:01:9E:27:56:D1
Certificate issuer:       /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial:       16C219B2BA8EF5D5FC3F122B5DF37ED8A99BD6B7
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa
Signing time:             Mon 27 May 2024 21:35:00 +0000
ROA not before:           Mon 27 May 2024 21:30:00 +0000
ROA not after:            Mon 26 May 2025 21:35:00 +0000
asID:                     272097
IP address blocks:        2803:c710::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c2:19:b2:ba:8e:f5:d5:fc:3f:12:2b:5d:f3:7e:d8:a9:9b:d6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
        Validity
            Not Before: May 27 21:30:00 2024 GMT
            Not After : May 26 21:35:00 2025 GMT
        Subject: CN=48F2CED5F9C2DE1DD1AB4D9B3FC525019E2756D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:b8:80:31:16:cd:6a:c1:e4:07:08:fd:21:
                    bf:d7:cf:f8:d2:11:5a:f6:4a:e4:90:15:33:90:90:
                    e0:c2:8a:9e:88:11:99:83:6c:11:b6:89:38:92:81:
                    c4:a5:c1:66:39:58:35:c0:8c:ee:87:11:b4:83:87:
                    a1:c3:34:0e:52:98:65:b2:78:20:93:8d:1e:2c:f8:
                    d4:0a:9b:22:00:9c:61:52:39:93:16:c3:4b:5e:b7:
                    fd:40:af:43:74:f0:30:d3:72:1c:a7:18:e7:2a:b7:
                    a3:e5:69:29:86:26:4c:33:dc:a7:85:d7:4d:b6:80:
                    95:9c:ef:e8:9c:91:b8:d8:1b:e1:18:f2:b9:5f:5c:
                    b5:d5:bf:5a:52:04:f4:1d:8d:57:14:f4:8f:ba:a3:
                    7f:8b:25:e8:1c:29:84:4a:b5:3f:d0:5a:5c:13:ee:
                    52:6a:e9:d4:09:20:af:91:b8:b5:d4:2d:2f:ed:5e:
                    df:4e:f8:42:1d:af:6c:37:a6:33:45:09:bc:85:02:
                    c8:92:7d:10:9e:82:2c:01:a7:26:a1:df:7b:58:ba:
                    27:22:47:7e:d1:f5:e8:23:85:b1:c7:6c:b3:4d:88:
                    a0:45:0c:5b:30:78:6b:b6:f0:71:ce:5b:5e:8e:58:
                    7f:b7:b7:ef:2a:a4:af:c3:4a:dc:f5:1a:a8:3e:45:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F2:CE:D5:F9:C2:DE:1D:D1:AB:4D:9B:3F:C5:25:01:9E:27:56:D1
            X509v3 Authority Key Identifier:
                keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3438203d3e20323732303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c710::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:47:13:df:8a:09:d7:f9:90:78:44:e3:53:4f:c7:9e:ce:
         7f:ce:d0:44:bf:ee:86:89:b0:e8:20:00:fe:fe:41:87:39:0a:
         60:67:f6:8e:84:03:5d:97:32:c4:f9:ae:92:45:91:ad:94:33:
         f7:21:9f:cd:aa:59:28:17:87:e4:e2:68:8d:f3:89:57:e0:3f:
         2e:d9:c2:5d:de:31:73:84:fd:2e:3c:2e:45:53:1b:23:25:35:
         7d:41:d6:66:e4:c2:e0:4e:ba:db:b7:6b:1b:04:a3:72:39:5c:
         2d:9e:b2:35:9a:b6:d0:08:41:a4:bb:d6:5b:e8:a3:26:95:8e:
         54:98:5e:25:5c:a2:4d:a7:50:5b:43:de:74:23:81:00:59:db:
         7d:c1:87:05:19:57:6c:e3:51:c9:4a:44:1a:c0:d0:67:0d:80:
         70:51:e6:81:c8:e0:73:9b:74:35:6c:35:c0:a7:ef:70:61:d4:
         46:92:21:f2:ca:eb:d0:5f:46:0a:e8:6a:8d:58:00:ea:4b:c3:
         f3:24:51:43:cc:40:2c:28:7c:56:5d:59:91:5f:6a:17:4d:1d:
         f8:1e:43:8f:14:b9:43:f0:e7:7e:cf:2e:a0:bc:80:f7:25:c4:
         62:85:5b:26:c6:09:50:a1:37:92:75:59:44:09:d1:35:e1:da:
         65:1f:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:34 2024 by rpki-client on console-fra.rpki-client.org