Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365363a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3365363a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          U93GDKtfdmzFIn3SEOCjec7zjldrMDUd0KgyWX1Jc/I=
Subject key identifier:   B2:C4:AC:11:59:AD:D3:C6:8F:E7:2D:CD:62:24:64:D1:37:F5:F9:4B
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       3195CC87CAE64C09F4CEB86091447893BC0F359D
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365363a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     267848
IP address blocks:        2800:be0:3e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:95:cc:87:ca:e6:4c:09:f4:ce:b8:60:91:44:78:93:bc:0f:35:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=B2C4AC1159ADD3C68FE72DCD622464D137F5F94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:93:5c:60:32:df:80:e6:5c:45:f5:52:e1:
                    d8:48:42:34:cd:c4:6e:46:09:5a:20:92:f7:b2:26:
                    97:78:72:b2:cb:7d:33:65:a2:b9:8c:07:5a:58:bf:
                    11:c8:1b:a7:d6:0d:08:b2:fc:e6:04:a4:71:0d:60:
                    16:fd:2c:92:da:8c:45:42:ef:f7:7d:86:09:d0:4f:
                    c1:11:2b:57:ec:ed:e9:2e:6b:e4:b8:f6:49:7f:12:
                    8c:d3:e9:fa:b1:24:0a:29:88:c7:05:4f:af:e1:b9:
                    fe:4a:43:14:95:7c:9c:39:43:81:5b:48:40:93:6b:
                    11:f9:07:4a:2d:29:4c:91:69:1f:60:0b:55:06:71:
                    41:c4:c2:d2:6b:d6:70:15:ed:ad:6f:ed:be:66:a6:
                    81:92:e8:0b:ed:e5:fa:0f:c5:c9:40:d4:58:7c:cf:
                    3c:6e:17:ff:71:16:88:ba:71:22:79:44:1d:3b:35:
                    2d:ee:f1:a2:40:f1:39:bd:1e:53:f3:0d:3b:98:66:
                    bf:a5:41:db:a7:8a:05:9a:a3:33:23:e8:4e:87:df:
                    94:8d:90:21:45:e6:b2:49:ae:f1:c1:8b:3d:c3:10:
                    8d:03:83:52:d2:04:ef:da:35:0e:97:ac:0b:a3:99:
                    74:36:89:15:72:01:e6:06:b6:77:3e:21:fa:d4:5a:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C4:AC:11:59:AD:D3:C6:8F:E7:2D:CD:62:24:64:D1:37:F5:F9:4B
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3365363a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:fa:e9:93:79:46:4b:bd:af:a5:42:bc:ef:e9:4a:e7:41:5d:
         ca:a0:56:3b:f6:c1:4f:f9:06:61:0d:0b:55:df:55:fb:58:80:
         68:33:00:3e:c9:0c:e1:67:ad:50:dc:51:dd:ca:ee:aa:5a:7a:
         e1:9a:24:e4:0a:cc:33:97:26:55:f8:0f:36:44:2c:4e:6f:c1:
         31:74:dd:ac:2f:35:00:97:38:bb:a1:f4:75:55:9e:9c:fb:26:
         b0:d6:ae:55:39:0f:8d:8e:e5:4b:97:d3:7f:99:64:ee:cd:8c:
         0f:c0:84:12:99:3e:55:1a:33:4b:51:d0:af:2b:6a:d4:5d:19:
         ed:ec:4f:eb:d1:56:ef:ca:a6:b8:2f:74:e7:35:8a:84:d3:7c:
         5a:8f:04:f1:58:7c:82:a1:e0:3f:43:f9:9c:71:c2:fc:7b:8f:
         7e:96:e6:f1:09:1d:7b:a0:29:59:df:2a:c6:e4:f2:e6:a8:ff:
         c7:1b:ca:fa:56:ef:d4:7d:b3:fc:18:b2:9f:ab:e7:82:89:bc:
         28:cd:06:e6:24:cd:f0:0f:5d:af:73:7b:0f:a2:92:1c:90:46:
         2a:3f:d5:08:2e:e5:a1:0c:47:8c:e5:27:5f:12:3d:71:45:bd:
         cd:38:90:46:80:64:87:b0:3b:56:d0:2a:a2:1d:34:d3:c2:7a:
         d1:c6:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org