Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          ZxQW9wum/N1Rg8GqFI4abOjBBE+GnSpN05pcHC39qC4=
Subject key identifier:   A3:7E:6A:2D:18:89:9D:A0:E6:F6:00:CD:C7:49:56:22:E1:C9:96:D8
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1C303505E030A6F74FC405F69D2ECFCA1E0F77F3
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:30 +0000
ROA not before:           Tue 05 Mar 2024 17:59:30 +0000
ROA not after:            Tue 04 Mar 2025 18:04:30 +0000
asID:                     267848
IP address blocks:        2800:be0:4e8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:35:05:e0:30:a6:f7:4f:c4:05:f6:9d:2e:cf:ca:1e:0f:77:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:30 2024 GMT
            Not After : Mar  4 18:04:30 2025 GMT
        Subject: CN=A37E6A2D18899DA0E6F600CDC7495622E1C996D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:fe:57:0c:af:9d:39:90:21:f8:cf:69:d0:
                    33:5e:7c:c6:2f:96:21:7a:93:96:88:9c:15:8e:33:
                    90:6e:6b:86:24:5a:13:69:b0:58:a7:88:c0:7d:13:
                    d2:e5:5b:a7:97:a8:55:da:3e:3d:ad:05:c0:44:54:
                    a2:04:69:0f:16:8a:82:1a:0e:b3:ba:f2:96:24:8c:
                    b9:b8:19:a6:d5:df:03:a1:79:ff:65:9d:d2:6e:1b:
                    2a:05:cb:2e:29:56:ab:78:95:2c:ab:ce:ab:f7:22:
                    15:8e:40:3f:b6:71:2a:b6:ce:30:5e:e3:e6:74:97:
                    4a:95:c2:54:0c:d8:0d:69:0e:c2:35:f3:11:54:12:
                    4f:e0:45:06:e4:50:ae:47:f6:f3:41:63:88:db:e8:
                    a8:a1:48:39:24:3b:74:07:13:ba:fd:c3:83:c3:2b:
                    ec:68:cd:55:b9:96:3d:d5:06:64:23:42:35:c9:9f:
                    be:53:b7:60:87:fb:c3:f7:b0:54:67:a2:a8:5b:73:
                    ca:43:dd:58:39:08:a2:9c:94:64:1e:fc:77:2e:a2:
                    cb:c9:57:ce:46:b8:da:9f:da:7f:88:1f:b3:ec:a1:
                    ab:f0:4f:0c:3b:67:56:3d:ab:50:46:e5:5b:b6:31:
                    3f:48:0e:7a:d9:4b:b2:9d:92:b5:b3:e8:89:a5:71:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:6A:2D:18:89:9D:A0:E6:F6:00:CD:C7:49:56:22:E1:C9:96:D8
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465383a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:e6:73:5e:a4:b2:7a:36:8a:2e:95:36:2b:0b:62:39:b9:
         92:ec:de:1f:d1:14:35:8f:68:4a:54:d9:34:4d:b3:81:a8:6d:
         6d:45:00:9f:e6:d0:a2:c7:ff:4a:42:69:9a:a9:dc:d1:7c:f5:
         1c:ee:86:16:29:1a:08:47:c8:7e:33:00:3f:bf:b4:44:bb:12:
         24:ea:49:d8:48:55:2a:b8:d9:0a:f2:46:49:2a:c7:e8:84:2d:
         7d:fe:44:b5:bb:d2:ae:b4:31:ee:b0:e1:8d:0b:03:67:65:37:
         84:cb:44:01:2e:ba:47:4a:45:a6:07:28:f3:f1:2d:d1:5d:6a:
         b5:b7:41:c5:89:c3:9e:31:17:c6:ae:e0:90:b6:8b:90:1a:54:
         21:ec:ef:8d:43:b1:e1:ac:22:d6:b7:91:ac:f0:b6:c8:ae:55:
         cd:5a:8e:fe:6d:4d:1a:f4:ec:0d:9f:90:f2:84:e7:c4:ef:43:
         a5:84:0a:0e:4d:57:92:c1:84:30:c5:fd:27:a2:2f:ae:a9:29:
         64:e9:b7:69:6b:96:c3:43:c9:35:33:c4:57:1e:9b:00:3c:f5:
         2b:9e:cc:0b:15:74:1f:e1:c5:05:5f:48:e0:b6:44:02:b5:9e:
         0b:4e:08:93:b4:67:48:c0:04:ad:7e:0c:3f:b9:e8:dd:51:74:
         ef:7f:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org