Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a33303a3a2f34382d3438203d3e20323637383439.roa
File:                     323830333a616336303a33303a3a2f34382d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          NRIDStHh9Veeg3bW8B02mMeHkDthePBAyeCwVCAKnE0=
Subject key identifier:   7A:3B:17:54:9C:60:E0:8D:67:69:51:4A:6F:7C:8D:3E:5F:46:E2:C6
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       49E3CB51D1478BD86417F1FA96BBB81AB340C507
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a33303a3a2f34382d3438203d3e20323637383439.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     267849
IP address blocks:        2803:ac60:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:cb:51:d1:47:8b:d8:64:17:f1:fa:96:bb:b8:1a:b3:40:c5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=7A3B17549C60E08D6769514A6F7C8D3E5F46E2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:f2:4b:7f:d7:24:30:ba:f1:8f:c7:6e:da:
                    56:35:57:67:57:30:a7:20:80:6b:d6:7f:b1:eb:a0:
                    8b:6f:75:2f:d4:b3:04:a6:12:27:81:97:67:c7:f9:
                    d9:88:82:f0:1f:6f:49:9b:93:02:58:4e:3f:db:68:
                    f4:6b:42:66:00:45:ff:67:c1:a4:67:71:18:7c:40:
                    e8:a8:24:70:5c:2a:c4:aa:7b:67:31:ca:76:50:75:
                    ba:a4:cc:f9:35:13:56:05:15:d0:75:dd:48:bc:c5:
                    39:6d:e9:ef:7c:4a:cf:0a:07:2a:fb:1a:52:74:35:
                    3b:22:3e:df:13:f4:46:a6:b8:10:c7:9a:a2:b9:50:
                    57:c5:c4:4b:ba:fe:5d:a5:5e:a0:f1:f7:57:fa:72:
                    4e:1f:51:f9:a7:03:ba:0d:ad:de:67:20:77:ee:80:
                    73:9c:3c:e6:e9:93:c3:8e:87:1b:58:f1:8c:12:c2:
                    af:53:98:e3:d8:2f:6a:2f:6f:8b:cb:13:09:97:17:
                    fa:11:5c:ad:39:9a:52:cf:ea:7a:ae:29:ef:b3:f9:
                    9f:cb:7e:ef:bf:03:c6:91:68:8a:ee:d9:5a:8a:a6:
                    3b:9e:ba:f8:d4:ef:ec:52:b6:a1:7f:4c:a3:01:ba:
                    ba:eb:12:93:45:7e:61:40:cd:39:34:4f:bb:55:e7:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:17:54:9C:60:E0:8D:67:69:51:4A:6F:7C:8D:3E:5F:46:E2:C6
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a33303a3a2f34382d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:68:e0:62:40:54:06:49:04:57:b7:b2:98:8c:f6:98:a3:
         07:f8:b4:6b:f7:0e:1f:60:9e:3a:1c:9b:9e:ff:f4:26:0b:5f:
         b3:c2:95:59:a3:98:c1:85:4c:fe:7f:60:60:b7:f8:b5:7b:94:
         2e:0f:fe:5a:f9:80:05:57:32:a0:14:e0:bc:59:4e:44:26:0e:
         0e:b4:e0:d5:9b:65:4b:d1:39:a8:78:a8:9e:19:88:95:ff:28:
         c9:8b:54:cb:a9:6e:30:ba:47:29:9e:79:f2:a8:87:fa:ba:d1:
         c1:85:4a:78:80:e4:ba:13:47:08:4b:d8:4a:01:0e:59:26:ff:
         53:79:74:52:f3:00:f4:41:53:b9:d5:18:ff:d6:58:8e:9b:3b:
         dd:4a:14:03:ed:4f:ab:7b:4d:1c:c3:cc:69:5d:0b:fc:54:1f:
         1a:e4:82:52:ea:0b:6d:a2:4b:d0:bb:42:5a:3f:81:29:1c:4a:
         f0:8e:e3:a5:cb:40:41:09:a0:0b:fc:0e:fe:1c:e6:c6:4f:e3:
         24:64:7c:03:ac:89:e1:bf:cf:6d:ad:36:74:74:2b:e5:33:2c:
         b1:cf:b1:34:2a:6f:38:bc:15:00:5a:a3:92:e4:50:5d:01:53:
         c1:bf:f3:17:f6:77:dd:c5:8e:92:a0:95:9d:24:d5:18:a2:67:
         b1:5a:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org