Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          SDutE6mlXUHyz5159ccWf8HQyI1crxSsOFcih3s9JXI=
Subject key identifier:   B1:6A:EC:F1:06:73:A0:70:75:9D:D6:65:E2:2B:B4:34:3C:0C:30:26
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       4317A6037274A17FD7895CBDEA12A802A5719A07
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:20 +0000
ROA not before:           Tue 05 Mar 2024 17:59:20 +0000
ROA not after:            Tue 04 Mar 2025 18:04:20 +0000
asID:                     267848
IP address blocks:        2800:be0:4e21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:a6:03:72:74:a1:7f:d7:89:5c:bd:ea:12:a8:02:a5:71:9a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:20 2024 GMT
            Not After : Mar  4 18:04:20 2025 GMT
        Subject: CN=B16AECF10673A070759DD665E22BB4343C0C3026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:dd:7e:83:3f:58:7b:46:11:48:1f:4a:fc:
                    cf:4a:0b:99:8e:e1:d7:e8:53:7e:fd:72:f9:f3:6f:
                    ca:0d:72:30:2f:99:34:90:6e:d5:29:e1:53:de:ec:
                    b0:97:90:77:95:4c:91:de:67:78:7b:02:c1:69:89:
                    39:d0:e5:67:ee:85:77:45:b0:ef:13:72:f4:fc:f8:
                    83:75:e9:2c:2e:b9:a9:6d:be:db:3e:40:29:39:1f:
                    d0:c3:da:fb:b3:5f:c1:01:94:e1:d2:c5:8f:31:37:
                    0e:7c:43:0a:2c:10:82:e9:c2:27:5b:ee:59:d5:fb:
                    c3:53:61:37:01:fd:e2:37:86:e6:79:43:5f:55:1e:
                    66:77:07:13:48:74:d6:a7:48:cc:3f:e6:2b:92:79:
                    2d:63:02:db:be:89:87:05:35:6c:ec:3a:18:82:3c:
                    9f:c5:de:5c:b5:e4:5a:02:f1:6e:c2:a8:6e:54:6a:
                    15:89:b3:3b:0d:5e:f2:71:82:8f:bf:e3:b9:77:13:
                    65:1b:c6:23:e1:6b:e8:55:af:35:c0:69:fa:5a:03:
                    56:3b:4f:e4:7e:9f:df:43:c7:ba:21:e9:6a:4e:60:
                    5e:b0:91:59:18:0a:79:36:09:bc:35:a8:ad:cc:e6:
                    f3:e3:3c:55:61:fb:b6:5f:1b:ee:c6:5e:c0:94:74:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:EC:F1:06:73:A0:70:75:9D:D6:65:E2:2B:B4:34:3C:0C:30:26
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e21::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:09:25:88:ed:c5:3f:f7:d3:54:bd:4f:87:2d:61:3b:3b:d7:
         17:32:e4:d8:3f:41:9b:4d:66:ff:e9:3c:1d:cc:39:bf:49:c5:
         46:7e:b5:8b:c2:d7:c9:dc:d1:eb:9e:5f:40:92:97:2f:c5:12:
         e8:14:48:35:de:ee:ac:ab:74:5e:c4:4f:42:c8:82:e6:b9:3c:
         e5:4f:0c:2c:4a:36:58:68:74:33:e3:1f:75:53:9a:89:25:d5:
         ba:07:37:89:49:c4:e1:63:4d:cd:b2:4f:94:1b:48:2d:52:9a:
         09:c0:69:a7:34:55:5d:f3:fd:4f:8f:9d:5c:c8:fc:52:0c:04:
         db:08:9b:a5:40:9d:06:32:e4:ab:d6:ef:16:29:03:f8:f0:70:
         cf:48:a5:a4:1d:89:ab:04:2a:45:db:ce:fc:fe:86:2b:46:b5:
         8e:de:9d:e4:95:99:b2:91:11:08:4c:e5:6b:6f:a8:d0:32:ce:
         b5:99:4e:a1:f0:5c:9e:a9:a5:df:2d:c6:5b:41:1f:2e:6e:cc:
         22:d0:32:1f:3d:66:b7:c2:b0:fd:3f:1e:95:f8:85:83:6b:1e:
         01:f9:89:7d:6d:ac:17:27:72:cd:3e:7d:44:77:55:7d:c3:66:
         f8:08:7b:68:ba:0e:16:0d:51:9d:db:8b:81:a9:5e:5a:7d:fe:
         d9:27:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org