Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33362d3336203d3e20323733383238.roa
File:                     323830333a623135303a3a2f33362d3336203d3e20323733383238.roa (raw, json)
Hash identifier:          XJSs4ImglwmmVm7R64OJdmiQ3yRSmGvWPdalXmKaC+c=
Subject key identifier:   77:C9:41:D9:90:A6:D7:9A:52:48:17:7C:5B:20:69:8F:77:64:76:AD
Certificate issuer:       /CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
Certificate serial:       62716AF0BDF6CA3803F55C00D2DA4877E9FAD279
Authority key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33362d3336203d3e20323733383238.roa
Signing time:             Thu 13 Jun 2024 22:10:00 +0000
ROA not before:           Thu 13 Jun 2024 22:05:00 +0000
ROA not after:            Thu 12 Jun 2025 22:10:00 +0000
asID:                     273828
IP address blocks:        2803:b150::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:6a:f0:bd:f6:ca:38:03:f5:5c:00:d2:da:48:77:e9:fa:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448
        Validity
            Not Before: Jun 13 22:05:00 2024 GMT
            Not After : Jun 12 22:10:00 2025 GMT
        Subject: CN=77C941D990A6D79A5248177C5B20698F776476AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:aa:87:f9:2b:30:ff:e3:64:a1:58:78:61:
                    e1:6d:6c:b7:14:24:d4:1e:c7:81:17:0d:83:6f:6e:
                    44:4f:e4:c1:03:ae:4b:0c:e8:11:9c:1e:75:66:98:
                    8c:1a:4b:6d:dd:e6:ed:73:ca:53:ee:ab:4f:48:29:
                    47:11:28:9a:ff:c1:c7:3d:f7:5d:ae:95:61:59:04:
                    0d:39:a6:e5:2c:db:23:dc:d7:43:9f:28:09:98:2e:
                    b3:aa:43:9a:1a:1a:86:49:5e:c9:01:e2:35:1b:1e:
                    95:2f:a1:89:da:7a:4f:ae:e0:be:0b:ff:5c:74:8d:
                    3f:df:07:36:70:09:68:9e:ae:43:29:4a:18:e9:71:
                    08:a5:68:92:a0:52:6c:34:fb:3c:8a:c6:57:32:29:
                    6d:77:84:5f:08:89:6b:90:68:22:4b:48:17:a9:0f:
                    d5:24:d5:5c:68:85:79:46:4c:9d:fd:98:0c:54:d4:
                    c0:e7:0d:81:79:cb:34:25:a8:30:2d:01:d9:45:75:
                    48:36:86:6f:c5:09:73:1d:f8:11:3b:18:8a:46:41:
                    0d:e1:a9:aa:c5:d6:6c:55:9b:ef:a2:7a:e0:76:45:
                    64:5f:54:75:63:ab:9c:fb:9f:ac:8b:a7:fe:0a:34:
                    d9:54:c5:78:f7:b7:a0:50:a0:e3:43:d7:38:7b:a3:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:41:D9:90:A6:D7:9A:52:48:17:7C:5B:20:69:8F:77:64:76:AD
            X509v3 Authority Key Identifier:
                keyid:7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/323830333a623135303a3a2f33362d3336203d3e20323733383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b150::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:bc:e8:c5:16:61:9d:cc:c0:4c:88:4b:b9:57:fb:0d:50:
         41:79:54:4b:1a:7c:d4:70:6a:c6:9e:6d:31:ec:e0:97:af:72:
         d9:2f:1e:59:d0:3b:c3:39:c2:fc:8b:9c:ab:a5:b4:1a:70:95:
         3e:91:7f:fe:c6:29:12:0f:bd:f6:0d:d0:67:0a:1a:3b:3a:1b:
         71:22:43:a7:03:b7:af:2f:4c:27:dd:05:a8:81:d6:f1:49:df:
         2d:b8:48:0f:14:07:08:f8:dd:01:54:b7:48:73:68:4f:ee:e5:
         76:b7:a2:42:38:be:79:9d:4d:a0:64:00:c2:38:ee:c6:a8:14:
         21:66:38:02:11:de:a1:b5:94:fd:e8:02:02:a3:9d:ab:c5:81:
         c3:b2:1a:51:3e:4e:a5:5f:b0:c1:2b:f0:35:b0:54:4e:20:d3:
         03:75:5d:f8:d0:e8:cd:4d:8f:05:ad:7d:5a:ea:b1:27:e5:88:
         73:b7:5c:75:bb:24:5b:17:c1:9e:78:fa:ab:7e:c4:d7:73:39:
         f6:75:f8:91:b5:32:53:5a:bc:31:e9:1a:44:33:1a:27:4c:d1:
         2b:14:3a:41:cf:de:e1:94:77:20:e7:17:1d:e7:f9:59:0f:81:
         db:8a:5b:e5:d3:a7:4b:2b:df:46:e5:f0:ab:ef:5e:06:b3:e7:
         46:ff:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 10:53:47 2024 by rpki-client on console-fra.rpki-client.org