Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030393a3a2f34382d3438203d3e20323733383433.roa
File:                     323830333a623935303a313030393a3a2f34382d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          3j5DTyHDa4oU3qBP9jqw3TZ8x4HQpv1/Zr9iJO5ycKI=
Subject key identifier:   2D:2C:85:31:C5:6C:69:6E:A0:8E:0B:A9:F8:C5:98:76:05:84:97:DF
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       21EEA56CBDA15AA2D25A2E16F3A39834FBF06C57
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030393a3a2f34382d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:50:02 +0000
ROA not before:           Fri 21 Jun 2024 18:45:02 +0000
ROA not after:            Fri 20 Jun 2025 18:50:02 +0000
asID:                     273843
IP address blocks:        2803:b950:1009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ee:a5:6c:bd:a1:5a:a2:d2:5a:2e:16:f3:a3:98:34:fb:f0:6c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:45:02 2024 GMT
            Not After : Jun 20 18:50:02 2025 GMT
        Subject: CN=2D2C8531C56C696EA08E0BA9F8C59876058497DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:d0:60:f0:91:34:90:8a:65:a2:a7:d6:89:
                    6e:c0:48:ba:3c:cd:9d:0b:0b:5b:74:e6:0e:a4:55:
                    15:f1:77:d4:39:c1:29:fe:59:5e:2a:70:01:4b:2e:
                    a2:26:c8:87:99:90:82:c3:dd:8b:a2:fd:9e:17:31:
                    c3:03:bc:d2:71:97:b9:e7:be:b8:3d:f0:07:dc:ce:
                    6f:67:0d:7f:dd:7f:d0:8c:91:28:aa:fb:4b:63:3a:
                    7d:74:5b:02:12:84:be:c7:4a:3d:85:3c:d6:1b:ec:
                    db:11:72:8e:e8:d4:42:61:40:6e:4c:e9:5f:24:3a:
                    c5:0c:72:d2:84:47:54:6a:ab:7d:4d:3c:3d:05:2b:
                    20:b6:73:b7:04:e6:68:7e:eb:15:7c:97:d4:7c:62:
                    b2:e1:dc:f0:ce:ed:22:0b:55:25:9c:0e:6c:8a:34:
                    1f:74:e3:02:fe:ce:a0:6f:e0:59:cd:2f:32:fb:15:
                    3e:57:76:f9:53:97:05:28:21:6a:45:15:80:a9:3c:
                    fc:22:cb:03:07:4a:2e:fe:b4:b7:ef:3f:65:f7:c1:
                    bf:a0:6d:ae:63:2c:4a:32:d6:61:9e:9f:fe:8e:64:
                    5e:a7:79:c6:26:45:96:2f:f8:68:24:a0:4c:cb:a7:
                    19:1f:ae:0c:5f:6f:07:4a:a8:0f:83:28:37:cb:7c:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:85:31:C5:6C:69:6E:A0:8E:0B:A9:F8:C5:98:76:05:84:97:DF
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030393a3a2f34382d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:9a:db:59:ad:11:3e:c1:13:b8:a1:1d:a6:79:ee:30:46:65:
         93:bc:6e:d6:11:5c:8c:b0:7b:71:76:d1:91:c8:8b:3f:ce:5d:
         1b:2f:2c:bc:27:98:06:19:8f:f0:3c:b4:c4:ac:a9:28:c8:7b:
         4a:18:a9:b7:69:37:bd:d7:91:25:82:4f:0b:b3:09:93:6e:32:
         ed:a7:e7:40:19:b4:f4:41:82:98:06:b4:f7:f3:10:7e:fe:d7:
         42:ea:d5:f2:5b:71:cb:b8:b9:7b:63:b2:f3:d3:5f:35:c3:77:
         d3:cd:e5:1b:cd:70:41:07:11:49:bf:c9:3c:2b:db:48:b6:2b:
         96:dd:4e:ce:c4:3c:38:26:56:c1:8a:f9:5a:04:20:6f:60:28:
         4a:4a:47:05:c0:03:e8:a8:94:65:cd:89:02:74:25:94:92:60:
         93:2f:fe:de:92:95:c8:dd:6d:bf:cc:a2:0d:df:e3:a9:c6:cb:
         63:f8:f7:1b:c1:0c:e0:e1:1c:dc:9a:bf:c6:67:06:bd:51:eb:
         85:c5:8d:dd:41:76:86:4f:7e:d3:d7:f5:21:7f:5d:c0:57:de:
         36:e9:d3:18:4d:76:fb:ca:7e:34:38:f3:75:2c:84:57:5a:a6:
         58:aa:6f:62:5a:9e:51:b5:ae:0f:67:f7:d2:2f:3c:93:9c:7a:
         96:2d:57:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org