Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a31303a3a2f34352d3438203d3e20323733383433.roa
File:                     323830333a623935303a31303a3a2f34352d3438203d3e20323733383433.roa (raw, json)
Hash identifier:          F54GF20Zy3y2Co8h9ut6igM9Ja4oGtFQbNmK8jmAGic=
Subject key identifier:   3F:2C:88:1C:22:B8:1D:41:03:3C:4F:4E:3C:02:0B:DF:1B:00:13:6D
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       26F373CDC27EFA8B3D561D3D6605B731F7714517
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a31303a3a2f34352d3438203d3e20323733383433.roa
Signing time:             Fri 21 Jun 2024 18:05:00 +0000
ROA not before:           Fri 21 Jun 2024 18:00:00 +0000
ROA not after:            Fri 20 Jun 2025 18:05:00 +0000
asID:                     273843
IP address blocks:        2803:b950:10::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:73:cd:c2:7e:fa:8b:3d:56:1d:3d:66:05:b7:31:f7:71:45:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: Jun 21 18:00:00 2024 GMT
            Not After : Jun 20 18:05:00 2025 GMT
        Subject: CN=3F2C881C22B81D41033C4F4E3C020BDF1B00136D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:d3:47:a7:f7:79:46:d7:e5:05:11:76:ea:
                    e5:57:2e:a9:8f:18:ca:38:72:3d:a8:f2:7d:1a:50:
                    1a:e4:0e:f8:b4:4f:06:45:a9:90:b2:aa:15:97:1a:
                    9b:63:56:db:35:77:a1:74:23:24:35:56:14:39:e6:
                    eb:61:59:f8:a1:45:f6:de:6e:e2:df:7f:87:2c:1c:
                    7b:07:ed:db:c6:97:de:e1:6b:54:3b:5b:0e:9c:9c:
                    7b:e4:38:06:68:54:11:27:ad:68:c7:79:6b:b6:bc:
                    12:c0:48:d3:92:8a:c3:25:1f:80:2e:b3:73:08:7d:
                    38:0b:21:88:f8:d7:7e:be:5d:42:89:d6:9f:27:0e:
                    32:9b:67:1b:81:be:e6:76:64:5d:d0:16:65:c4:9f:
                    d6:9a:04:7a:38:67:bb:b0:6f:d7:0a:f8:b1:b5:30:
                    37:17:c8:11:cf:82:74:40:be:71:c6:42:d0:b7:00:
                    6e:ac:7b:d0:b4:23:f0:53:f4:a2:58:80:1e:70:66:
                    76:45:19:7b:a7:2a:18:dc:ca:ff:6d:60:ec:04:a3:
                    34:c9:43:5d:3c:bb:67:40:0f:2b:20:de:df:fa:eb:
                    be:7d:2a:aa:19:9e:8e:30:87:4b:5c:33:10:5c:bb:
                    f5:e8:1f:c3:64:c7:b7:6a:a8:fa:28:2c:d0:4e:47:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:88:1C:22:B8:1D:41:03:3C:4F:4E:3C:02:0B:DF:1B:00:13:6D
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a31303a3a2f34352d3438203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950:10::/45

    Signature Algorithm: sha256WithRSAEncryption
         98:de:f9:63:fb:11:fc:88:41:35:5c:e1:f6:47:5c:e8:ae:93:
         63:08:37:7a:e1:1f:4b:08:2e:99:60:83:05:bd:ad:0f:af:70:
         66:d1:d0:8c:16:a2:3d:7d:05:39:be:e9:2e:67:a2:82:23:e2:
         32:28:cb:2e:37:c1:f0:8d:4d:9f:6d:e9:63:21:52:e2:81:da:
         76:9e:09:7c:f4:3d:51:f8:53:97:6e:cc:43:77:2f:98:b3:45:
         34:8f:9f:73:a5:1b:09:a0:f1:f2:5c:5e:48:a0:af:08:95:06:
         58:2f:39:9f:65:3d:a5:74:9c:eb:69:bb:52:fb:c1:bf:08:f0:
         4d:bd:f3:d2:61:43:a9:43:eb:8a:e1:6b:85:86:38:56:06:19:
         4d:bc:a4:d8:da:46:39:6d:21:a2:d5:28:80:b6:7e:44:64:9d:
         af:ec:1c:5d:9f:a2:0b:67:9f:a0:61:96:90:cd:f1:3d:89:49:
         59:c5:b0:b5:13:87:3b:90:f6:80:06:16:20:97:96:f1:e8:21:
         52:75:5a:95:f8:c4:b9:5a:89:84:e2:03:cf:00:a2:72:32:0e:
         cd:17:56:9e:c1:5f:88:ab:bd:d7:af:c4:a8:32:10:9c:37:6c:
         dc:2a:bc:25:5c:ba:d3:24:d6:c7:37:6e:a9:4c:0e:70:73:3a:
         98:6e:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org