Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          Q+42DSOtnCzaIHgEzxp6WnW1eZMf+CXGFbqQ1h6O5iM=
Subject key identifier:   C5:D0:4D:38:F6:F6:98:12:B6:06:19:E0:F4:15:91:BF:A8:FE:F4:32
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       6D205B3A23097737C2E19B8DD3F99A561511B8A0
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:24 +0000
ROA not before:           Tue 05 Mar 2024 17:59:24 +0000
ROA not after:            Tue 04 Mar 2025 18:04:24 +0000
asID:                     267848
IP address blocks:        2800:be0:4e2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:20:5b:3a:23:09:77:37:c2:e1:9b:8d:d3:f9:9a:56:15:11:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:24 2024 GMT
            Not After : Mar  4 18:04:24 2025 GMT
        Subject: CN=C5D04D38F6F69812B60619E0F41591BFA8FEF432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:d0:b6:be:76:e0:cc:fa:5b:f0:e5:ff:c3:
                    e6:fe:e4:fc:14:e4:ab:73:99:14:d9:46:48:91:a2:
                    78:24:5a:7e:f6:02:dc:1e:62:86:aa:85:9c:b2:ce:
                    f9:ee:67:c3:56:51:c7:38:2d:f3:c1:a6:7f:5b:e4:
                    23:7b:2a:0f:53:de:7c:9e:52:30:fb:02:2d:42:36:
                    49:b0:7a:34:97:2f:80:a1:47:cb:0a:be:9e:e1:5e:
                    c6:0f:f0:24:ef:f8:86:96:8a:2a:91:d7:03:4a:23:
                    95:74:77:a8:f6:a3:88:f6:a5:54:c5:e1:94:2c:52:
                    aa:26:01:75:08:97:57:97:9c:56:44:8a:34:9c:4a:
                    88:f7:5b:b0:8d:32:08:48:a4:08:03:38:3c:f2:0a:
                    a5:fd:0d:61:15:3c:49:9c:4a:71:ec:ef:27:97:d2:
                    bc:36:31:9d:1f:9a:bd:15:f5:d0:9a:df:86:0b:dd:
                    37:3c:a8:55:90:72:2b:34:76:60:b7:89:5a:d3:ad:
                    cb:e2:27:68:79:51:a9:4c:10:eb:6c:59:a0:53:32:
                    f7:90:3a:ff:74:3c:00:fc:41:63:c5:b9:05:e0:ec:
                    f9:22:0b:91:45:7e:b1:a9:f8:34:2d:c2:96:dc:69:
                    87:f1:8d:9a:72:f7:df:a7:cb:70:94:6c:63:bd:7b:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D0:4D:38:F6:F6:98:12:B6:06:19:E0:F4:15:91:BF:A8:FE:F4:32
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:b1:68:86:96:d5:ae:5b:52:17:9f:42:07:73:41:6a:dc:
         ae:84:d7:6a:72:1c:e8:85:cf:b6:b8:06:4b:1b:27:c1:dc:41:
         b1:c3:1b:56:0c:74:65:55:1a:27:e9:6f:6d:51:39:ab:58:6a:
         f1:f0:47:c9:da:55:ae:b8:50:e5:92:c3:50:41:2e:b5:45:f5:
         eb:c0:9d:50:62:94:a7:a5:aa:c9:3f:e0:d0:2c:b0:65:9e:ac:
         25:38:ee:81:4d:12:09:9e:c5:04:2d:11:14:9f:a4:93:fe:37:
         46:4c:e0:14:3f:ae:1c:e7:a3:62:0a:12:9f:eb:69:c1:dd:b0:
         d3:d6:88:8a:53:ad:4e:fc:59:d6:88:3e:0e:67:57:f2:4d:7a:
         e4:0e:60:40:32:79:a7:7a:fd:a6:5f:86:e2:45:42:a1:e1:8f:
         dd:86:37:93:f8:a4:55:cc:66:0c:9e:82:20:16:93:ad:1d:e9:
         47:09:ba:71:5f:77:4b:c7:10:cc:d4:ed:75:58:c7:65:3e:ac:
         d4:07:a6:33:57:88:28:19:c7:3f:9b:21:44:94:c6:99:77:84:
         e1:af:c3:50:5a:b2:e5:d0:83:70:a3:22:5b:fa:b6:47:6a:fb:
         27:a5:4a:3a:98:cf:11:66:00:70:d3:71:6f:54:53:d6:3c:c7:
         ee:8a:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org