Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
File:                     323830333a636239303a3a2f33322d3438203d3e20323733303334.roa (raw, json)
Hash identifier:          prKQoEizxT1rYcklWpObApNZRByWmrMss9839gYKjrY=
Subject key identifier:   C0:BD:B1:72:36:06:18:49:23:83:EB:76:3E:15:FF:B0:85:27:A0:2F
Certificate issuer:       /CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
Certificate serial:       0EE9FF26D33A7085BB567D1EDC7C8D9CBA5262F6
Authority key identifier: 6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
Signing time:             Tue 05 Mar 2024 17:51:54 +0000
ROA not before:           Tue 05 Mar 2024 17:46:54 +0000
ROA not after:            Tue 04 Mar 2025 17:51:54 +0000
asID:                     273034
IP address blocks:        2803:cb90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.crl
                          rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e9:ff:26:d3:3a:70:85:bb:56:7d:1e:dc:7c:8d:9c:ba:52:62:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
        Validity
            Not Before: Mar  5 17:46:54 2024 GMT
            Not After : Mar  4 17:51:54 2025 GMT
        Subject: CN=C0BDB172360618492383EB763E15FFB08527A02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:e6:da:4d:ae:ed:d1:83:8a:20:bb:0f:76:
                    6f:e7:01:d3:74:7b:cc:38:7c:e8:fb:c5:40:ee:23:
                    e6:ff:8f:c4:32:d0:3e:1a:4b:c3:4f:35:a2:58:82:
                    f3:3d:0e:ac:32:c6:94:e8:ab:21:cb:ef:d5:30:b8:
                    78:a2:08:6f:1b:a5:6d:a7:d0:91:bf:5a:8c:62:42:
                    95:8b:d5:12:af:f2:62:10:fb:e0:43:e6:55:c3:2e:
                    91:df:69:2c:4c:5e:a0:0c:b7:e6:24:2a:40:4a:e5:
                    da:25:47:95:24:5c:cf:65:f0:3c:62:06:9b:25:6d:
                    c1:1f:e5:ed:39:4a:04:7f:a9:12:9a:85:6e:b7:73:
                    47:41:72:ee:f6:91:b7:6f:35:95:db:10:1b:e1:86:
                    db:dc:d4:57:4d:8e:d3:d2:46:22:07:06:58:4f:b8:
                    58:7c:ca:28:d4:27:8e:73:e7:1e:8e:88:31:af:61:
                    5b:90:27:56:4b:be:c6:27:dd:01:8c:5e:0e:a9:d4:
                    84:94:f8:9f:5f:6d:3c:76:db:dc:06:59:62:2b:aa:
                    fb:2d:79:82:ad:e6:46:10:1c:eb:80:2d:ac:2c:06:
                    14:ae:e3:2e:e4:73:ee:6e:70:79:24:e1:8b:f3:38:
                    c0:7e:74:ae:9f:61:5f:e3:1b:9a:67:06:9b:f8:96:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:B1:72:36:06:18:49:23:83:EB:76:3E:15:FF:B0:85:27:A0:2F
            X509v3 Authority Key Identifier:
                keyid:6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:95:f0:09:5a:5c:ed:e2:82:f9:1a:1f:cb:79:4d:40:c8:dd:
         9a:80:30:4c:e8:08:d0:34:76:bb:bd:54:5f:0a:71:55:de:d6:
         67:35:9b:07:5a:41:af:cb:b5:19:55:d4:6c:32:33:d5:e4:9d:
         97:9a:97:10:26:6e:c1:c7:db:5d:59:c8:89:0f:10:d2:c7:ea:
         8b:3f:8b:d7:7f:55:61:3d:2e:36:37:10:e8:f1:63:54:59:1b:
         8f:c9:e5:e2:07:e4:56:bc:6a:eb:92:c5:cd:82:88:d3:fb:54:
         0a:c5:15:5a:5d:4a:9c:bc:b8:6c:22:5c:80:b4:c8:9f:e4:35:
         e4:c3:4c:48:2e:f5:04:9f:d1:35:d5:23:b6:10:c0:0b:1e:df:
         05:a4:a2:8a:a6:8a:db:90:2b:64:eb:08:a6:ec:4a:0f:a2:80:
         25:bc:59:cc:24:b2:24:2a:6b:72:42:24:11:22:7c:e6:43:3c:
         de:c2:dc:11:43:56:a7:87:f4:28:63:17:9b:c2:61:bb:4f:7d:
         09:a3:c8:83:8e:f9:7f:ee:98:55:fc:dc:4e:64:83:df:cc:bd:
         48:90:6d:23:b7:74:48:75:b6:30:a3:37:0b:8c:58:ab:1d:eb:
         df:e0:33:06:2d:c5:b8:ef:63:3c:a1:11:db:a6:3b:48:31:2f:
         e7:f9:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org