Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          RWhHGZSi8BgEoGrfzJyNtFYX+CCzhdVU5+5ssZSTfj0=
Subject key identifier:   99:B4:01:1F:03:69:0C:F0:FF:F6:45:F9:D4:EC:9F:11:34:40:FF:DE
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1B713100EEEAEBB95449A1882382CFC8AE205032
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:21 +0000
ROA not before:           Tue 05 Mar 2024 17:59:21 +0000
ROA not after:            Tue 04 Mar 2025 18:04:21 +0000
asID:                     267848
IP address blocks:        2800:be0:4e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:71:31:00:ee:ea:eb:b9:54:49:a1:88:23:82:cf:c8:ae:20:50:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:21 2024 GMT
            Not After : Mar  4 18:04:21 2025 GMT
        Subject: CN=99B4011F03690CF0FFF645F9D4EC9F113440FFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:07:0b:14:9c:07:a4:53:57:6f:6f:28:ff:
                    01:9d:86:7b:ad:c0:c0:3c:42:63:ac:03:0a:f9:06:
                    4b:d9:f2:9a:e2:79:cd:ea:52:aa:87:bc:78:71:09:
                    0e:f7:91:b1:48:41:83:98:a3:ad:9b:f2:48:ed:64:
                    69:32:9d:b3:80:e6:99:61:25:c5:68:9c:7f:98:a5:
                    3c:a6:71:0a:61:90:99:a2:a6:fe:53:48:aa:8f:91:
                    68:80:61:0d:1e:29:9b:4a:6b:33:b8:41:f8:fc:35:
                    5b:04:4f:e7:10:20:3c:65:e5:5a:d4:c8:37:3f:1d:
                    48:69:47:3d:87:ba:88:cf:87:4c:81:1d:29:7f:a7:
                    ab:d5:50:56:af:0f:86:33:bc:62:a7:ae:91:e7:b6:
                    0f:27:bf:53:e7:33:c7:4c:8c:7c:09:f9:83:8c:93:
                    45:08:0b:d4:f3:22:7b:4b:f1:ea:8b:16:e5:2c:f3:
                    0a:25:5c:19:6d:23:25:9d:14:d6:98:4c:af:0a:a3:
                    ce:10:f3:52:fc:94:11:54:71:25:d0:0e:e9:23:8c:
                    a7:b7:4c:1a:99:b7:72:2b:3d:c6:41:83:e2:4c:4d:
                    4b:43:3c:90:74:98:f0:39:fd:c5:c6:51:18:e1:a5:
                    ad:32:d4:86:26:81:4a:ac:e8:e4:1c:3b:1c:86:3d:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:01:1F:03:69:0C:F0:FF:F6:45:F9:D4:EC:9F:11:34:40:FF:DE
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465303a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:55:48:86:60:4b:15:66:6a:71:47:cb:9e:31:fd:c2:ee:65:
         36:5c:c9:89:cd:7b:9d:85:47:84:b3:ed:e8:b4:5c:af:3f:f2:
         fe:67:d2:c3:8b:fd:c6:95:12:fa:dd:19:a1:8d:c2:d0:23:f0:
         db:9f:52:4a:97:5d:50:f2:12:c0:42:c7:dd:aa:94:37:60:ef:
         e3:a3:1a:b8:e2:1e:7e:dc:eb:cb:4e:0d:6f:db:e0:ad:05:b9:
         aa:1b:71:46:15:9b:7b:b6:e5:7d:4a:0d:eb:e8:1e:31:a6:9c:
         2b:5e:e1:cb:5e:fc:31:69:ae:c3:e1:f3:56:4f:d3:c5:df:bf:
         96:91:82:5c:77:cd:b7:de:12:33:52:df:3b:f5:61:42:2e:c8:
         b4:e4:50:63:c4:c3:91:67:ad:14:ae:e2:b3:40:3c:c4:fe:d5:
         d2:bb:d8:64:e2:b1:6d:79:df:56:18:a0:32:02:b7:5d:ec:88:
         0e:38:52:53:a4:0b:d6:4a:49:85:fa:dc:53:5c:ce:ac:33:eb:
         34:34:83:de:19:44:6e:03:19:2f:66:5b:f8:88:21:8d:92:c5:
         12:e9:02:03:c8:2f:fc:b2:86:27:45:47:5b:b1:99:8f:63:7b:
         47:da:c2:5d:b9:ad:44:96:e5:5b:27:9f:b2:db:8d:35:6f:5d:
         62:56:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org