Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030313a3a2f34382d3438203d3e20323733383433.roa
File:                     323830333a623935303a313030313a3a2f34382d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          Yx8PoyrDsJ8CoK1OAM92aJgSIcFbZFLPCmVTjmlgYHU=
Subject key identifier:   86:F4:F4:82:40:C2:CD:DC:8A:48:B2:45:52:55:22:C2:D2:F5:81:C3
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       48EA4AD9923EAC6D8C470723FA2CBFECA058BE4F
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030313a3a2f34382d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:50:03 +0000
ROA not before:           Fri 21 Jun 2024 18:45:03 +0000
ROA not after:            Fri 20 Jun 2025 18:50:03 +0000
asID:                     273843
IP address blocks:        2803:b950:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ea:4a:d9:92:3e:ac:6d:8c:47:07:23:fa:2c:bf:ec:a0:58:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:45:03 2024 GMT
            Not After : Jun 20 18:50:03 2025 GMT
        Subject: CN=86F4F48240C2CDDC8A48B245525522C2D2F581C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:25:86:b7:19:15:9b:52:03:ee:f3:71:ce:
                    05:4d:fc:a2:ec:2c:26:8e:3e:58:fa:8a:85:3c:8a:
                    63:3a:2c:0f:4e:5c:ff:b5:44:34:54:d5:2a:fb:0c:
                    f9:1d:fd:3b:68:98:d6:5b:f3:3f:66:21:00:58:6d:
                    32:e5:59:3e:22:3d:28:01:7a:2e:48:84:50:ec:4d:
                    34:04:6f:cb:6a:aa:1d:15:d5:96:ef:d3:b7:e5:d2:
                    8d:8d:f2:37:32:0f:06:e7:ee:e5:c5:7d:59:fe:0c:
                    00:71:63:62:10:d3:87:52:85:4e:5e:14:69:ab:70:
                    0e:78:a1:b6:f5:a7:74:11:77:4c:24:a6:42:1a:8c:
                    4b:50:c7:85:68:60:ff:35:31:26:b4:ca:22:90:50:
                    e2:f4:7a:71:22:79:1d:56:50:da:4c:29:df:6c:69:
                    34:93:2e:ca:6b:41:65:af:a3:8b:f9:47:77:31:0b:
                    28:ae:64:c1:0c:d9:b7:4e:ca:5a:ad:d2:96:db:63:
                    ac:10:d5:88:a3:5b:c6:cd:7e:d8:07:61:95:39:9c:
                    3b:e2:6e:58:a8:04:24:4e:c5:c3:29:75:d7:95:ab:
                    0e:fe:90:54:f5:59:b3:ca:2f:87:cb:1e:5f:86:cd:
                    fe:7f:08:41:30:e6:61:9b:3e:1a:21:9a:50:e4:0a:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:F4:82:40:C2:CD:DC:8A:48:B2:45:52:55:22:C2:D2:F5:81:C3
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030313a3a2f34382d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:46:b8:3f:9d:5c:04:b7:e5:48:d1:14:ec:20:3e:60:69:9a:
         d1:8b:1b:cd:0f:2a:7f:dd:37:17:a0:ad:29:1d:a6:08:f2:4c:
         5a:41:c2:ea:42:50:07:7e:65:34:a3:b1:3c:00:08:e4:01:b4:
         70:18:61:83:ee:25:c9:1c:46:a3:6f:4d:3f:3b:72:ea:e5:2b:
         80:3a:37:ba:2c:8b:ee:c0:31:e2:8d:07:4a:95:91:6e:12:56:
         99:e5:14:10:a0:51:b7:45:4f:68:8a:7c:b6:8b:14:02:c6:b3:
         10:74:f5:bb:89:5d:2c:ff:04:93:68:97:9c:84:e1:53:e2:94:
         3e:d4:1b:00:52:ab:36:df:0c:7f:06:b4:c2:5e:db:9e:7f:0d:
         28:df:ab:50:16:f2:af:35:69:1c:27:4e:9f:61:66:44:25:54:
         58:27:25:a8:3c:7b:6a:6b:cd:92:c4:6c:b5:1b:53:df:11:5d:
         a4:f5:c5:8f:5d:31:d9:10:d9:1e:66:81:4f:ac:f3:db:af:46:
         0e:c3:33:72:19:56:06:be:b7:39:a6:8b:f5:37:1e:bc:39:0e:
         92:55:4f:ce:8d:76:16:eb:c8:7f:48:2f:2b:5c:87:35:ac:49:
         58:61:5e:68:9b:46:82:47:0b:71:07:62:23:a4:29:ad:ca:5f:
         ef:fa:e2:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org