Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030613a3a2f34382d3438203d3e20323733383433.roa
File:                     323830333a623935303a313030613a3a2f34382d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          An/v8kOkOjcfZJEXnE4ZOHuB/s5vNVNvK5ke4qEaH/0=
Subject key identifier:   E9:52:41:9C:F8:87:C6:CF:C4:1D:4B:AB:A3:67:B6:54:98:56:D5:7E
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       07E5115232D3D3C5B60E67AEB0FAD96E1A25F343
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030613a3a2f34382d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:50:00 +0000
ROA not before:           Fri 21 Jun 2024 18:45:00 +0000
ROA not after:            Fri 20 Jun 2025 18:50:00 +0000
asID:                     273843
IP address blocks:        2803:b950:100a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e5:11:52:32:d3:d3:c5:b6:0e:67:ae:b0:fa:d9:6e:1a:25:f3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:45:00 2024 GMT
            Not After : Jun 20 18:50:00 2025 GMT
        Subject: CN=E952419CF887C6CFC41D4BABA367B6549856D57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:31:7f:d4:47:42:14:15:87:1b:f7:ce:cc:
                    cb:e2:cb:fc:bf:4b:79:5a:ec:97:af:6c:e2:e8:9b:
                    71:82:61:0a:a0:08:8d:43:1c:b1:6a:1d:53:4e:24:
                    3c:e8:17:a6:4c:c2:7f:a2:c6:18:93:93:3f:76:4c:
                    1f:3e:4e:e8:b0:b3:ad:ad:cc:b8:0b:79:4a:c9:16:
                    83:90:e3:87:c8:7a:db:36:15:3e:18:7a:c6:08:d8:
                    34:cc:16:b4:46:f8:ef:ae:07:f0:a4:d0:69:82:ec:
                    0a:c4:66:08:4f:9b:ac:2f:73:15:1b:b4:2d:68:6f:
                    2f:db:53:ca:81:1d:c7:02:dd:bc:96:6a:99:07:39:
                    f4:6f:e9:f3:49:d2:b0:ca:72:ee:92:13:14:bc:71:
                    80:18:c5:ec:27:07:eb:d6:50:00:9f:01:a5:4f:29:
                    19:2b:9d:4b:6d:2f:2a:ce:27:dd:50:3e:58:20:1a:
                    a8:6e:f6:a7:0e:73:d2:1c:83:9b:0a:00:1b:6f:fa:
                    98:f9:8c:e6:3a:30:de:b5:fe:4d:00:0d:9d:e7:48:
                    3b:b5:93:1f:1f:e3:00:f6:a8:89:07:20:29:e4:d5:
                    27:7c:24:e7:bb:1f:88:4c:e8:3b:03:77:de:19:ab:
                    3b:1d:73:7b:bc:4f:c8:31:8b:95:b8:d9:e2:cf:cd:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:52:41:9C:F8:87:C6:CF:C4:1D:4B:AB:A3:67:B6:54:98:56:D5:7E
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a313030613a3a2f34382d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:100a::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:32:25:c7:3b:26:4f:27:e6:00:d9:37:b5:93:98:c4:cf:e7:
         69:a8:a1:96:70:0f:9b:b7:01:28:c1:cf:22:37:06:cd:fe:93:
         45:2e:43:50:ff:a0:53:dc:31:95:0f:7e:1b:46:91:cf:42:ba:
         14:fa:5c:42:20:81:f2:db:a0:a9:c0:30:fa:59:2f:09:68:3a:
         0a:99:bf:8f:44:da:25:03:c0:8f:ce:5f:09:5c:6b:b9:a7:a6:
         bd:c5:d6:47:77:21:71:ca:d7:9c:3d:0d:59:3e:81:2a:ed:44:
         c4:7b:e5:a8:c2:61:b1:33:9f:de:2c:ef:de:55:71:e3:26:77:
         a7:f5:3f:f0:33:4d:1a:d8:d7:0d:ce:ff:65:78:bd:78:9b:12:
         68:fe:a2:d1:ca:e6:6c:d2:bd:c0:a8:bc:28:a6:49:17:b0:55:
         91:cf:56:fc:46:2c:90:7f:dc:cb:f1:b0:a2:9d:72:1a:60:c7:
         07:6a:43:89:9f:45:e4:7b:b6:b5:bb:11:94:76:77:99:9d:f0:
         aa:9f:ea:d1:4d:11:88:ad:dd:b3:c0:05:b6:44:89:f0:29:e4:
         40:5e:82:94:56:f6:81:e2:4e:7d:5a:d0:c8:f5:5d:5a:13:13:
         d9:97:b8:61:a0:09:a3:e1:7c:ff:35:a5:08:04:91:65:e7:d4:
         c3:fd:93:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 17 09:11:26 2024 by rpki-client on console-fra.rpki-client.org