Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa
File:                     323830333a373630303a3a2f33322d3332203d3e20323635373531.roa (raw, json)
Hash identifier:          eung4xmKrV30SvTN5zgBIcOAaatl8eI4mgxTm04634M=
Subject key identifier:   6E:36:76:3A:B2:5A:CC:50:4C:53:0C:ED:57:98:12:9E:C4:F9:4D:2F
Certificate issuer:       /CN=4919DADC9655A6AC651084EE7AED896819F08F76
Certificate serial:       6301003E186DFE49753482DD697202D7999F8931
Authority key identifier: 49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa
Signing time:             Tue 05 Mar 2024 17:45:42 +0000
ROA not before:           Tue 05 Mar 2024 17:40:42 +0000
ROA not after:            Tue 04 Mar 2025 17:45:42 +0000
asID:                     265751
IP address blocks:        2803:7600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:01:00:3e:18:6d:fe:49:75:34:82:dd:69:72:02:d7:99:9f:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4919DADC9655A6AC651084EE7AED896819F08F76
        Validity
            Not Before: Mar  5 17:40:42 2024 GMT
            Not After : Mar  4 17:45:42 2025 GMT
        Subject: CN=6E36763AB25ACC504C530CED5798129EC4F94D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:af:ae:a1:9e:08:5c:6c:2c:51:49:12:c9:
                    2a:6c:b1:3c:d5:69:a7:53:0e:66:8c:f9:b9:2f:fb:
                    12:81:5d:e8:95:af:c7:54:99:2f:06:5a:da:8e:1c:
                    0c:80:a9:ab:af:9c:5a:95:a6:7b:9d:c4:53:fb:c7:
                    de:d6:a6:a0:90:89:9b:4a:29:f9:02:d6:dc:99:14:
                    1c:fe:ad:79:69:5e:d7:a6:cc:e4:71:a7:d7:99:1e:
                    27:a3:d2:52:49:b9:8e:6d:36:38:71:c5:07:f8:dc:
                    c9:4e:44:52:36:1f:6a:21:26:90:ec:d0:18:f8:f6:
                    35:25:89:e4:23:ca:aa:53:32:a1:80:68:35:ea:a9:
                    6e:51:ec:db:08:06:83:8f:cb:91:1c:ac:b5:bc:ce:
                    07:80:02:2d:8e:7f:47:bf:d5:9c:5f:46:ae:7e:d1:
                    d9:13:34:bd:bf:6a:af:91:bc:29:ff:47:81:22:08:
                    6b:c7:97:9b:86:94:24:78:53:10:52:5a:80:af:4f:
                    df:02:fa:71:10:df:ab:3f:40:f7:d0:a5:8d:6a:65:
                    66:1a:3a:26:9c:2e:96:ec:15:5a:16:e8:4e:fb:bf:
                    b4:c0:e5:4e:76:20:28:cc:1e:4f:39:8e:9a:4c:bc:
                    22:67:b1:3b:a5:ce:4e:d2:ef:3d:df:ae:40:a4:68:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:76:3A:B2:5A:CC:50:4C:53:0C:ED:57:98:12:9E:C4:F9:4D:2F
            X509v3 Authority Key Identifier:
                keyid:49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/323830333a373630303a3a2f33322d3332203d3e20323635373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:e7:ab:30:08:ec:ff:00:a2:51:89:0e:50:e8:5e:f9:c5:8c:
         cd:d7:10:33:31:61:6c:91:3b:fa:22:f7:96:70:71:fd:c4:38:
         4c:ad:c8:c2:69:85:17:31:61:01:0a:64:8b:28:b1:44:ed:79:
         b6:6b:c4:58:66:73:09:a4:de:b7:6a:2b:16:1f:b0:dd:46:97:
         94:97:11:50:c9:ec:3a:57:92:58:54:31:73:d1:05:f2:3a:62:
         d0:b5:c5:d4:f2:70:3b:a9:55:22:17:7a:6b:43:33:d4:b0:53:
         a4:71:f5:51:e8:78:c1:85:a8:4b:63:56:07:33:b0:67:11:ce:
         4a:f4:f0:76:f0:67:2a:d0:99:ed:75:d0:c5:12:a2:61:cd:5d:
         b5:7e:48:ce:e6:b4:42:e3:fc:bc:f9:5f:ad:d9:3a:9b:a6:54:
         10:c4:fc:51:f9:0b:05:e1:71:17:b6:1f:e2:c4:f5:d4:8e:30:
         68:45:3c:3e:ee:dc:0e:e9:97:2f:cf:91:36:76:84:b8:ae:df:
         72:c3:13:d4:1f:25:9c:51:3d:96:4d:dd:3b:47:0c:7c:50:c0:
         fd:c2:63:a2:65:50:34:39:a9:78:15:53:6a:83:83:c0:fa:c6:
         da:80:55:39:e9:39:a3:ff:36:55:b6:f8:05:0a:47:54:4c:61:
         dc:50:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org