Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa
File:                     323830333a616338303a3a2f33322d3438203d3e20323633313935.roa (raw, json)
Hash identifier:          tljad12oW3zfD//rvUWdqVX7D6McUze1R5sIod20AJc=
Subject key identifier:   06:F3:7A:56:8B:89:23:13:23:F0:46:6B:31:2B:45:79:86:B3:85:C3
Certificate issuer:       /CN=67C6935F7C38762C3BEE650617B03328B96FF014
Certificate serial:       50837198EAE2F02D863FEE3318710D447E5575D8
Authority key identifier: 67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa
Signing time:             Tue 05 Mar 2024 18:02:06 +0000
ROA not before:           Tue 05 Mar 2024 17:57:06 +0000
ROA not after:            Tue 04 Mar 2025 18:02:06 +0000
asID:                     263195
IP address blocks:        2803:ac80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:83:71:98:ea:e2:f0:2d:86:3f:ee:33:18:71:0d:44:7e:55:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C6935F7C38762C3BEE650617B03328B96FF014
        Validity
            Not Before: Mar  5 17:57:06 2024 GMT
            Not After : Mar  4 18:02:06 2025 GMT
        Subject: CN=06F37A568B89231323F0466B312B457986B385C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:84:fd:28:cd:1c:60:25:76:74:9c:fb:47:
                    4a:7b:4c:d2:a3:6b:49:eb:ef:0e:64:e5:84:0e:12:
                    d5:59:ee:71:18:d7:ba:1a:63:fb:59:01:04:13:16:
                    fb:19:be:79:a4:a4:4e:66:39:ea:5a:f6:e9:e9:b0:
                    c3:13:60:60:2a:eb:2f:9d:fc:df:4c:a2:99:a2:fb:
                    ed:12:bc:e4:97:92:52:05:d9:60:98:fa:0b:36:10:
                    a4:06:c3:0e:bc:77:d3:5f:3f:f2:1a:1e:07:79:d0:
                    63:64:b2:c7:8b:73:4e:b7:1a:e0:ff:ae:20:de:8d:
                    13:f4:1c:a0:8a:2e:89:a6:ba:b1:68:3c:e2:88:c0:
                    9e:49:95:99:6a:1a:e2:02:0a:94:b2:98:5e:cc:1b:
                    7d:3b:94:9f:3e:ac:74:9d:3e:3c:23:19:c7:b3:0b:
                    10:65:e9:77:52:ee:ec:bc:72:fd:8e:89:8f:f1:bb:
                    62:b9:13:11:0b:3b:4a:c0:65:83:81:35:28:ad:e3:
                    36:e1:59:b4:f6:3c:82:8d:0d:c5:55:52:f4:44:cd:
                    92:2a:23:f2:d9:50:eb:09:4e:f7:cc:41:d3:fb:51:
                    c0:30:8a:80:62:4f:26:ca:44:89:d4:47:c2:8b:f0:
                    07:22:02:a6:e4:f9:37:a9:97:fb:7d:6f:72:73:2f:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:7A:56:8B:89:23:13:23:F0:46:6B:31:2B:45:79:86:B3:85:C3
            X509v3 Authority Key Identifier:
                keyid:67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/323830333a616338303a3a2f33322d3438203d3e20323633313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:ac:cc:e9:22:6c:47:ac:9e:32:27:d5:a4:f0:07:2d:b3:
         38:13:d7:26:bc:25:7f:84:83:b0:97:55:c2:7f:4e:6a:db:08:
         ad:b7:b8:03:d0:e5:7f:5d:5e:2f:ed:d8:86:ab:76:e3:79:62:
         d2:ae:cf:df:1c:27:6f:b5:e4:f1:2f:b3:8d:f5:a7:ad:b7:84:
         f6:ff:22:00:a0:8f:a9:d6:5e:32:2c:80:3a:27:cd:fe:31:16:
         43:92:1b:ca:70:1f:d4:24:42:ab:56:fa:c1:9c:a8:45:2c:20:
         85:e7:ad:cc:de:12:ec:44:62:f0:66:3f:b9:ae:0f:18:81:f0:
         c1:46:db:85:59:d4:cb:0b:07:12:b9:e1:24:38:dc:35:d2:03:
         97:2f:b9:6a:4e:f6:28:3f:32:dd:b7:07:69:39:11:2f:f5:bc:
         2e:7f:4b:d6:b1:98:67:ca:ef:07:85:55:52:28:f7:37:66:e1:
         08:f9:d4:cc:a0:96:a5:68:fd:1d:48:91:36:66:dd:7b:36:55:
         a0:b0:f4:73:48:e3:90:35:91:a0:0e:07:b2:be:83:b6:af:4f:
         eb:6c:9c:10:da:0a:4e:66:06:18:85:9c:c4:06:e8:6b:32:93:
         cf:cf:6e:3d:c5:dd:c8:50:63:d9:74:6a:4a:ef:ff:ed:46:be:
         d6:61:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org