Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030363a3a2f34382d3438203d3e20323733383433.roa
File:                     323830333a623935303a313030363a3a2f34382d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          X6Uyory0tPloQpBA/ecDf9enYYDCUurkHqKeTxgnips=
Subject key identifier:   71:E7:28:B8:7C:81:11:A6:99:1F:ED:8B:8E:4D:2A:22:D3:E8:48:AC
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       3840723F7083F8CCABC4833EC2AC8E704383594C
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030363a3a2f34382d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:50:01 +0000
ROA not before:           Fri 21 Jun 2024 18:45:01 +0000
ROA not after:            Fri 20 Jun 2025 18:50:01 +0000
asID:                     273843
IP address blocks:        2803:b950:1006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:40:72:3f:70:83:f8:cc:ab:c4:83:3e:c2:ac:8e:70:43:83:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:45:01 2024 GMT
            Not After : Jun 20 18:50:01 2025 GMT
        Subject: CN=71E728B87C8111A6991FED8B8E4D2A22D3E848AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:dd:e0:9e:1d:cb:03:50:8a:5f:9b:f6:7e:
                    9a:79:6f:8b:17:7b:33:51:d2:62:bb:76:ec:41:e4:
                    03:cd:24:ee:74:f6:bd:0b:bd:4f:c9:af:36:2f:ad:
                    83:92:ec:cb:4a:1e:56:5b:af:ee:59:c6:b6:79:ac:
                    7b:99:56:db:b1:f1:eb:7b:d4:97:06:6c:1c:3e:28:
                    fa:fc:05:00:87:f1:4f:2c:43:fa:9b:cf:cd:0a:f2:
                    17:91:86:85:7b:49:34:0f:dd:9f:71:1f:f2:4e:77:
                    4e:7b:a5:68:28:b5:0a:04:ab:4c:a0:f8:34:58:ee:
                    12:91:11:ce:e3:8b:52:ea:7a:8d:75:33:16:e1:ba:
                    f5:23:51:d9:2d:3a:0b:b6:69:ee:b1:d6:1e:fc:3c:
                    66:f2:54:54:d9:7a:0a:b7:7d:35:a1:17:ea:28:e6:
                    da:a9:2e:52:d3:22:9d:ff:2c:8b:d9:30:49:ed:4b:
                    60:bd:90:0a:4d:59:ec:70:b5:8e:5f:be:6f:8f:67:
                    84:5d:13:e2:bd:23:c3:e4:b0:a6:fc:96:6e:46:4a:
                    fa:09:7c:46:1f:fe:4e:31:a2:4b:10:a2:b7:92:2c:
                    4c:8e:2a:72:8b:8c:cd:44:ad:66:e8:f9:a8:cc:44:
                    30:4f:0f:7a:f0:5a:48:d7:cf:3c:b9:01:4c:78:34:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:28:B8:7C:81:11:A6:99:1F:ED:8B:8E:4D:2A:22:D3:E8:48:AC
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030363a3a2f34382d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:d8:8b:81:be:7f:48:fd:8c:a2:88:d5:bb:e5:22:23:07:
         96:78:f3:f3:55:93:94:cc:76:e2:36:27:79:78:d2:db:3d:1a:
         2c:96:a6:4b:c8:67:26:77:8b:52:7c:2d:e7:50:b2:5b:88:da:
         f9:67:19:15:4d:d2:5a:d2:90:f9:6a:57:f0:44:7d:de:b0:11:
         40:bc:60:d5:ff:21:a8:17:78:a8:c3:0a:30:99:38:8f:54:c3:
         16:69:2f:b6:96:01:e6:d7:55:1d:1a:03:13:af:04:8e:b9:a0:
         1f:3f:33:85:11:f6:12:e6:55:f1:e5:15:34:f5:25:52:02:d8:
         41:fa:6c:4b:b4:a9:63:4b:70:10:2f:3a:69:f5:80:e5:63:47:
         df:77:0c:47:d3:d5:ad:6f:4b:67:37:6c:3b:8a:10:9f:40:53:
         b2:72:d2:99:3f:8d:0c:4d:47:87:13:3a:99:5d:2a:e8:3d:f6:
         b9:fe:06:60:84:ce:dc:b0:8f:b4:5e:ce:d9:fd:2e:30:e0:bc:
         1b:f5:00:79:62:32:27:1a:9b:07:bb:41:96:b2:70:6a:cc:5c:
         94:57:aa:4c:cb:e5:c8:8f:92:3c:08:13:5e:dc:f0:b0:7b:ca:
         b2:26:c2:71:d7:91:8b:f3:1f:89:9e:9d:68:34:ae:a5:4b:01:
         17:bf:0e:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org