Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3a2f33322d3438203d3e20323733383337.roa
File:                     323830333a363935303a3a2f33322d3438203d3e20323733383337.roa (raw, json)
Hash identifier:          ah3AZSmimjiHZgbItToGuRfRdGmGVurRP3Oqin9T22I=
Subject key identifier:   D0:36:0A:AE:8F:03:01:1A:79:3D:AA:24:43:69:F0:69:C6:7B:42:8B
Certificate issuer:       /CN=967E114DD21613956F45146CD4F251AC7939FBB9
Certificate serial:       6B058258D2B47729C9063B6F8F86F506DCEBA2B1
Authority key identifier: 96:7E:11:4D:D2:16:13:95:6F:45:14:6C:D4:F2:51:AC:79:39:FB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/967E114DD21613956F45146CD4F251AC7939FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3a2f33322d3438203d3e20323733383337.roa
Signing time:             Mon 03 Jun 2024 18:55:00 +0000
ROA not before:           Mon 03 Jun 2024 18:50:00 +0000
ROA not after:            Mon 02 Jun 2025 18:55:00 +0000
asID:                     273837
IP address blocks:        2803:6950::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/967E114DD21613956F45146CD4F251AC7939FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/967E114DD21613956F45146CD4F251AC7939FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/967E114DD21613956F45146CD4F251AC7939FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:05:82:58:d2:b4:77:29:c9:06:3b:6f:8f:86:f5:06:dc:eb:a2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967E114DD21613956F45146CD4F251AC7939FBB9
        Validity
            Not Before: Jun  3 18:50:00 2024 GMT
            Not After : Jun  2 18:55:00 2025 GMT
        Subject: CN=D0360AAE8F03011A793DAA244369F069C67B428B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:0c:70:21:6e:21:54:8b:77:d0:3e:ee:f9:
                    a6:9e:48:c8:9d:8c:27:71:54:db:c1:68:84:5e:fc:
                    f9:44:36:43:7d:9f:ef:86:2a:37:7e:e7:d1:e5:66:
                    c0:b9:ab:da:a5:22:d2:c1:d6:1e:9c:78:ea:17:7e:
                    61:97:12:6c:bf:fd:d9:5f:00:b7:9b:7c:79:1b:ac:
                    ba:12:ba:dd:55:d4:c6:c5:45:15:d9:bd:ef:07:e9:
                    6e:89:e2:c8:57:9a:f6:df:09:29:ad:ef:9c:16:68:
                    d5:2b:ce:eb:4c:67:17:a3:2b:ae:ba:97:4d:e4:7d:
                    ad:0d:8a:e1:c9:b1:ea:60:99:f3:86:96:6d:fa:42:
                    42:87:38:e0:f4:fe:ae:8f:9f:eb:ab:b4:c9:6c:e7:
                    18:18:a0:1b:f2:e1:84:86:5a:85:bc:29:ff:72:c0:
                    7d:e3:38:1b:c1:94:6c:87:7f:1c:76:88:67:93:3d:
                    9e:b3:f5:4a:31:b5:40:c3:8e:a6:ea:f5:fb:6e:51:
                    61:2a:10:68:c8:70:fa:59:0e:7c:f5:1e:56:3c:27:
                    38:22:cb:5b:27:10:40:ee:d0:46:a2:33:f3:ef:87:
                    7c:1e:f2:2c:36:3f:2c:dc:f7:67:76:f2:a7:ad:5b:
                    5d:f4:38:85:be:92:32:7d:aa:9a:5d:0b:0e:4a:08:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:0A:AE:8F:03:01:1A:79:3D:AA:24:43:69:F0:69:C6:7B:42:8B
            X509v3 Authority Key Identifier:
                keyid:96:7E:11:4D:D2:16:13:95:6F:45:14:6C:D4:F2:51:AC:79:39:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/967E114DD21613956F45146CD4F251AC7939FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/967E114DD21613956F45146CD4F251AC7939FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/323830333a363935303a3a2f33322d3438203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6950::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:ba:97:e7:62:6f:6c:40:48:df:3c:fe:1a:20:92:da:f6:
         54:71:68:8f:23:6d:a7:26:fc:64:76:27:40:67:c9:c6:c4:2e:
         0c:dd:59:4d:6f:06:38:e9:26:cf:c5:ad:0e:3c:9e:4f:b9:cb:
         a7:95:e8:b8:ea:91:6f:86:b6:51:89:c7:70:50:0f:e7:c3:5b:
         95:a7:9f:62:7f:d7:ac:10:d0:5d:69:43:b5:a2:5e:49:81:3f:
         d9:9b:3c:06:2e:93:7d:65:5e:49:b7:02:d4:f5:56:e5:9a:e6:
         26:58:1a:0f:8b:d1:86:4c:81:4a:91:c5:09:b0:7d:84:af:24:
         9a:b0:4d:cd:62:88:58:09:bc:b7:cd:7f:be:ff:da:60:bc:79:
         f5:05:f8:11:6f:a7:c7:6c:fd:fb:6f:21:4f:b3:b8:ba:8f:5a:
         5c:43:c9:4a:a0:2d:87:79:1c:02:92:d6:f4:4e:ce:e8:64:b1:
         25:d0:8f:6f:e4:da:e4:d0:11:ff:d4:9d:1f:d3:7a:b5:33:f7:
         f5:b5:4a:0e:4d:6d:1e:fe:ab:16:3d:a0:e6:f3:8d:93:f4:34:
         f8:0f:33:1a:ed:8c:ae:c6:de:c8:41:48:61:27:e5:51:f9:a8:
         13:d2:73:64:17:74:58:31:ff:0a:50:44:74:1c:24:04:96:92:
         b8:e8:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 01:17:10 2024 by rpki-client on console-ams.rpki-client.org