Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa
File:                     323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          f75wEgGDF3BFKO6GWaIWJlOGXuSy1ZM36tJ+Y70S6u8=
Subject key identifier:   3C:76:99:0C:58:59:D6:C8:AC:17:50:B7:73:92:07:9A:A8:4E:FE:E1
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       74336CAE0E31C1E9D9D034A30B70CCD9FCD1CEB9
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa
Signing time:             Fri 07 Jun 2024 16:45:00 +0000
ROA not before:           Fri 07 Jun 2024 16:40:00 +0000
ROA not after:            Fri 06 Jun 2025 16:45:00 +0000
asID:                     270095
IP address blocks:        2803:87e0:c002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:6c:ae:0e:31:c1:e9:d9:d0:34:a3:0b:70:cc:d9:fc:d1:ce:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Jun  7 16:40:00 2024 GMT
            Not After : Jun  6 16:45:00 2025 GMT
        Subject: CN=3C76990C5859D6C8AC1750B77392079AA84EFEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:43:3b:1a:cf:be:bc:63:ee:58:12:f6:44:
                    16:82:3f:0b:1d:58:c2:5a:9d:cd:71:c5:6a:de:60:
                    90:f1:dd:33:06:de:af:90:d5:5e:cc:2b:c5:61:98:
                    48:5c:e5:37:97:54:20:1d:73:71:3c:f4:66:fe:de:
                    62:7a:b6:99:da:6c:ce:61:cf:ca:8b:b4:94:7a:7c:
                    5f:a6:df:4e:02:e2:44:97:6d:85:18:6f:a5:0f:17:
                    18:ea:d0:b7:b2:ab:38:fe:3b:29:ad:79:b9:3c:3c:
                    ff:99:a2:6e:0b:13:e3:54:6c:f9:d5:e0:82:b0:62:
                    2a:c1:81:21:e5:85:d0:a5:1b:76:19:e6:bf:a1:67:
                    fa:39:ca:1a:50:1a:ed:38:9e:ff:d5:ce:7c:0e:0b:
                    b3:5e:09:ba:72:2f:4b:63:dd:fb:27:59:86:85:01:
                    59:2e:5b:e6:61:17:c9:e0:d4:60:91:17:b0:7d:2c:
                    58:07:a8:1b:4f:66:6b:24:6b:86:d5:cd:ae:5d:2c:
                    fa:ad:3b:5c:f9:72:98:3f:fe:c4:17:84:8e:f5:56:
                    6f:f7:10:6d:1e:3c:c0:88:02:57:74:8f:4d:ff:f8:
                    62:c3:cf:a2:18:ce:80:38:1f:85:c0:1e:49:a6:3f:
                    06:df:ad:a2:f8:8a:ca:30:e7:e1:94:8c:0f:62:7f:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:76:99:0C:58:59:D6:C8:AC:17:50:B7:73:92:07:9A:A8:4E:FE:E1
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030323a3a2f34382d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:44:23:db:e7:64:17:ab:87:3d:90:56:6c:f6:4b:cb:f8:
         75:0d:24:c7:97:6f:b8:dc:ed:51:1f:b7:c5:92:d6:08:b2:60:
         03:7b:d6:93:36:26:49:85:b7:74:a3:e3:98:fc:b0:84:ad:eb:
         7c:ef:cf:64:55:90:e1:b2:db:4d:01:df:e5:40:16:b3:c5:cd:
         38:92:f3:97:64:50:2e:fc:9d:58:02:a8:94:cc:06:dc:3a:40:
         89:d4:81:31:43:04:7e:8a:dc:28:fa:9b:65:98:ca:5c:28:66:
         25:c3:a1:96:18:35:0a:d0:55:0a:9b:90:81:b1:22:77:a3:78:
         56:88:e7:c2:5c:9d:67:b9:96:36:96:95:95:51:ec:b4:2f:8b:
         8a:e7:9a:bf:87:54:39:56:00:6d:0e:6d:6a:a3:89:c4:39:6a:
         a2:83:54:85:0a:4d:c4:f6:ed:29:ec:da:26:0d:64:99:fd:9f:
         0b:de:0b:5c:06:2d:3f:46:35:74:b9:44:0e:99:17:67:bf:d4:
         c8:e2:af:28:85:f4:95:69:c1:40:f0:70:d1:fa:9d:35:1a:f4:
         e2:56:4b:e2:8b:f6:2f:85:0b:55:23:ed:d0:1a:ae:f1:43:61:
         45:3c:aa:bf:c5:89:f2:2c:38:27:8e:72:7b:c1:5c:9a:29:10:
         3d:5f:ff:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org