Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          TcGpIc1ZpD7NF+VaxbYXr08GJAAcveuq1iNWRMkSzOk=
Subject key identifier:   BC:22:94:DA:C9:A4:A8:8E:1A:33:3A:E1:26:5B:0A:5D:4B:DC:5F:AD
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       031F9D0107BC2D93162D4A7DDFF44936406B6CCC
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:30 +0000
ROA not before:           Tue 05 Mar 2024 17:59:30 +0000
ROA not after:            Tue 04 Mar 2025 18:04:30 +0000
asID:                     267848
IP address blocks:        2800:be0:4e4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1f:9d:01:07:bc:2d:93:16:2d:4a:7d:df:f4:49:36:40:6b:6c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:30 2024 GMT
            Not After : Mar  4 18:04:30 2025 GMT
        Subject: CN=BC2294DAC9A4A88E1A333AE1265B0A5D4BDC5FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:32:22:e0:e5:0b:77:02:42:ad:66:be:54:
                    37:c9:5a:67:00:0e:f2:22:05:da:f3:45:00:d7:b7:
                    07:97:8f:52:2f:df:26:39:4f:c9:76:47:05:8e:45:
                    c4:39:96:5e:4d:2e:9c:97:81:25:de:07:f3:c4:bc:
                    9b:b7:cc:23:3e:85:05:49:af:92:0a:9b:7d:f7:72:
                    00:45:9d:9f:ae:a6:46:70:30:8c:cd:76:35:86:a9:
                    a3:f1:74:ed:32:c4:d7:c4:d4:94:be:e6:d6:a0:9c:
                    3c:ad:80:7d:30:2c:3e:93:54:e5:ca:45:cd:81:7c:
                    66:0e:24:3d:42:6c:09:47:e2:92:fb:1c:4e:73:a8:
                    ed:f1:89:ca:95:27:83:49:c0:32:08:d3:91:5b:49:
                    9e:25:2c:6b:35:fa:93:55:3b:2f:7b:cc:69:56:06:
                    36:f2:c6:c9:6c:89:40:82:91:b2:b5:7a:d5:d6:9f:
                    51:86:a8:f3:4c:1d:6f:f2:ee:ee:1d:67:05:0f:b6:
                    ea:af:09:6c:58:48:d6:e1:b3:b6:48:37:28:76:f4:
                    52:8a:75:db:7a:0c:0b:a1:48:75:33:d9:4e:e6:95:
                    a4:26:1f:cf:e3:ea:79:1b:e7:5d:89:fa:8b:c6:91:
                    bc:cc:c3:2e:f0:d9:68:38:0e:0b:6c:13:be:d3:27:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:22:94:DA:C9:A4:A8:8E:1A:33:3A:E1:26:5B:0A:5D:4B:DC:5F:AD
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:2d:a9:c8:59:09:df:a3:e3:9d:6a:38:ac:34:11:40:f2:
         9f:32:f8:4e:d8:05:09:0b:24:aa:75:ab:59:43:0d:ac:c0:1e:
         32:67:83:6a:0d:ed:d9:b7:fa:91:d4:90:01:cc:d8:61:42:81:
         11:bb:7d:b4:4a:5f:5f:4c:aa:e4:be:3a:16:bf:06:c3:3c:26:
         68:ee:d8:26:4a:ca:0c:16:b1:e0:7a:ec:2b:c5:2b:fe:d2:40:
         39:0c:6c:09:2a:8b:bc:35:f6:81:cf:6a:c6:a3:32:3a:26:32:
         86:2c:74:69:30:f1:27:8d:2c:0d:9c:f8:0d:14:0b:f9:ca:bd:
         d3:82:ae:ac:8b:4a:a1:d3:09:4b:f1:5a:dc:81:58:42:74:4c:
         11:4a:d0:a1:1e:e1:9b:8e:ee:40:ad:ea:40:3b:e0:1a:08:9c:
         82:ba:ab:f1:58:a0:c3:8f:23:a5:2f:6c:86:29:60:bc:12:74:
         e6:32:ba:89:5b:0b:1c:18:94:4e:65:34:9f:4b:10:0e:06:dd:
         36:84:3e:aa:b8:85:14:12:ba:d0:01:f7:56:f0:87:da:63:62:
         bf:26:87:ec:01:ce:f1:89:d3:cd:a0:70:ca:31:be:f5:f1:9b:
         5a:cc:02:18:60:ae:b3:82:50:cd:89:08:54:fd:a5:2a:60:31:
         88:74:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org