Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a666630303a3a2f34302d3438203d3e20323639373939.roa
File:                     323830333a383432303a666630303a3a2f34302d3438203d3e20323639373939.roa (raw, json)
Hash identifier:          avizAJGPaRtBP5/Cg1ZHmr8GU0o1Gz9bxUSHoatvUkk=
Subject key identifier:   A0:45:19:9B:E4:85:F1:3F:DB:FC:9E:B8:26:48:FF:96:A7:D0:FF:72
Certificate issuer:       /CN=E6A7505DAA0B511A5813C04388D52EC51B947806
Certificate serial:       77C2380C68CB610F94549C1F1BAA4AACD1B3A22B
Authority key identifier: E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a666630303a3a2f34302d3438203d3e20323639373939.roa
Signing time:             Tue 05 Mar 2024 17:43:23 +0000
ROA not before:           Tue 05 Mar 2024 17:38:23 +0000
ROA not after:            Tue 04 Mar 2025 17:43:23 +0000
asID:                     269799
IP address blocks:        2803:8420:ff00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c2:38:0c:68:cb:61:0f:94:54:9c:1f:1b:aa:4a:ac:d1:b3:a2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A7505DAA0B511A5813C04388D52EC51B947806
        Validity
            Not Before: Mar  5 17:38:23 2024 GMT
            Not After : Mar  4 17:43:23 2025 GMT
        Subject: CN=A045199BE485F13FDBFC9EB82648FF96A7D0FF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:df:5b:c2:52:ae:cc:b8:27:24:33:ef:2d:
                    c6:70:cf:b3:a7:31:dd:8c:33:87:fc:d1:0e:3e:17:
                    73:31:9c:d0:c8:5c:9e:7d:62:44:dc:aa:ba:2e:95:
                    f7:6d:8f:11:b9:01:52:1e:96:41:80:9d:0c:47:41:
                    ad:d9:d1:ed:55:63:95:f5:d8:8a:05:13:d4:0e:be:
                    b0:74:17:00:7c:c2:f5:60:c2:dc:6f:10:ff:ba:e6:
                    57:30:0f:0f:52:91:c9:c8:0c:19:ed:f8:f0:2f:54:
                    b8:d2:1f:77:8f:43:8b:5c:44:ba:39:64:b5:62:84:
                    1e:fb:54:f4:e7:ed:09:6b:e7:ca:b0:7b:fe:0b:ed:
                    80:88:17:c0:48:15:07:a1:40:53:d9:fe:d3:a1:62:
                    17:82:47:43:5f:3c:75:73:12:4b:38:80:1e:c5:41:
                    69:d0:25:58:26:3e:db:60:5d:96:69:54:ec:33:69:
                    b6:e8:dd:09:33:92:12:ba:ee:f9:e3:8e:3d:bf:10:
                    31:37:7a:12:54:65:86:e9:2a:58:2e:c1:24:33:f7:
                    24:cb:de:5f:cb:a7:09:55:3e:50:2e:5a:40:1c:a6:
                    15:07:f5:d4:d1:7a:b3:05:48:b6:05:f5:81:38:1f:
                    bd:90:7e:17:fa:ea:92:5b:c6:a0:35:ab:09:2e:e2:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:19:9B:E4:85:F1:3F:DB:FC:9E:B8:26:48:FF:96:A7:D0:FF:72
            X509v3 Authority Key Identifier:
                keyid:E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a666630303a3a2f34302d3438203d3e20323639373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:12:7e:ac:ef:47:b1:ba:2e:38:87:ee:8f:9b:23:f8:13:
         c4:18:40:ba:89:94:1e:68:0a:21:25:31:f7:3b:d2:85:c5:c8:
         4b:82:3e:d6:b8:ce:10:89:88:dc:7e:b3:a5:3e:10:54:c5:51:
         19:c4:31:0e:dc:66:05:fc:e2:67:aa:72:e7:50:e7:0c:d7:a5:
         94:5f:e3:f5:8a:11:fb:cc:81:d5:03:75:b4:98:1a:7f:9e:cc:
         15:0b:5c:54:39:1a:de:52:97:08:f7:8a:e4:7d:e5:04:96:dd:
         4b:1a:e6:f6:98:b0:d5:a8:b7:6d:4c:3a:72:79:20:c3:72:c1:
         06:3a:18:77:82:f1:31:47:1d:32:6e:b8:2a:0e:c9:f3:57:95:
         3c:a0:5e:da:a9:e0:0b:c5:ff:f7:e6:3e:89:51:de:a0:8d:53:
         84:dc:11:f6:c5:4a:0a:1f:16:0e:bf:73:e7:30:ff:b5:ad:10:
         a9:35:79:8f:fe:04:9b:70:6f:af:5c:6a:fd:52:14:88:c7:b7:
         47:9e:9e:80:03:b6:5e:2a:c6:a6:ab:5e:29:83:24:89:1a:e6:
         c2:b7:a5:06:05:b9:65:97:c8:cc:3f:15:04:9f:80:96:f5:fa:
         99:1f:91:7b:03:cd:74:75:31:22:56:cf:15:54:0f:44:a4:ca:
         3a:6b:49:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org