Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/323830333a386331303a38303a3a2f34322d3432203d3e20323731383638.roa
File:                     323830333a386331303a38303a3a2f34322d3432203d3e20323731383638.roa (raw, json)
Hash identifier:          7qCLD1hdWOe5phRf+FbttLYRgPPKFMs9Y+GIJR21ANA=
Subject key identifier:   E9:51:E5:1F:69:9F:D8:87:BA:F7:6E:C2:23:97:AF:E3:7A:DF:E1:3B
Certificate issuer:       /CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
Certificate serial:       6212D438866763FA2E24D893855A993CEBB155C4
Authority key identifier: 21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/323830333a386331303a38303a3a2f34322d3432203d3e20323731383638.roa
Signing time:             Tue 05 Mar 2024 18:18:16 +0000
ROA not before:           Tue 05 Mar 2024 18:13:16 +0000
ROA not after:            Tue 04 Mar 2025 18:18:16 +0000
asID:                     271868
IP address blocks:        2803:8c10:80::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:d4:38:86:67:63:fa:2e:24:d8:93:85:5a:99:3c:eb:b1:55:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
        Validity
            Not Before: Mar  5 18:13:16 2024 GMT
            Not After : Mar  4 18:18:16 2025 GMT
        Subject: CN=E951E51F699FD887BAF76EC22397AFE37ADFE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:1c:de:f1:df:3d:05:ea:84:89:e5:e3:34:
                    37:fd:7a:1c:8d:5b:a1:ef:4f:0f:68:8b:63:e2:61:
                    73:f8:30:92:cf:d5:a0:43:fd:15:9d:1b:70:f6:d2:
                    c5:20:9b:8e:80:71:7b:03:de:8d:4c:33:7d:19:01:
                    03:f0:66:48:60:13:67:d8:59:41:bb:78:1b:2a:4f:
                    16:10:95:ee:f6:04:a5:e0:d8:70:6e:50:c1:3d:13:
                    2f:b5:7f:89:b4:dd:91:bc:2b:8c:58:53:00:a6:ab:
                    f8:6c:a1:cd:ff:db:d0:33:ae:69:fc:b1:93:af:06:
                    3a:89:ef:41:20:09:30:69:9d:0e:1b:30:ad:1c:94:
                    fd:21:c4:4a:cf:11:1c:8c:9a:3c:05:4d:50:ed:bd:
                    5a:42:9c:19:ab:6a:9b:04:a7:0c:7c:1d:3d:60:fc:
                    d6:29:96:16:0e:9c:dc:51:d9:a3:34:cb:17:04:55:
                    b4:1e:98:71:74:8a:19:9e:cc:ea:ac:67:9e:f1:cc:
                    df:c7:a1:5a:68:bd:89:15:27:c2:b8:c0:3f:a8:04:
                    f7:81:64:d8:82:97:0f:ff:1b:8d:af:9f:fc:fb:63:
                    5c:ec:ee:b4:1a:70:03:d6:ac:f7:82:be:fe:64:06:
                    11:0a:2a:46:fc:fa:59:c5:20:7d:5f:be:03:74:5c:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:E5:1F:69:9F:D8:87:BA:F7:6E:C2:23:97:AF:E3:7A:DF:E1:3B
            X509v3 Authority Key Identifier:
                keyid:21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/323830333a386331303a38303a3a2f34322d3432203d3e20323731383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c10:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:c5:8f:a2:7a:8b:00:d3:2b:0b:25:f1:19:a3:5f:b7:92:
         90:da:00:69:5e:1e:3c:84:e5:72:f8:1f:22:9e:1a:cf:ae:4d:
         06:33:34:e2:ed:ef:56:05:c3:d1:bb:4b:d2:f3:e5:6e:4f:65:
         13:33:39:ef:64:1c:bf:ad:fb:19:e0:49:c9:1d:39:88:80:23:
         b9:76:25:73:33:12:37:87:ff:46:10:7f:f7:44:39:a7:6f:d3:
         b9:cd:e2:8b:64:ac:6a:fd:d4:f2:4e:db:93:41:9d:fa:84:95:
         05:76:b7:04:ef:fc:ee:54:a9:a6:32:e7:9c:e5:50:c9:59:53:
         b6:e0:26:63:ce:79:66:39:60:27:a5:d1:05:e8:07:4b:a2:52:
         16:4c:54:a0:2f:aa:91:da:a9:e4:41:80:7f:91:49:cf:80:e1:
         85:9f:ba:31:f1:1d:c9:a0:0e:43:1c:5f:13:21:69:d4:d6:f7:
         6d:51:88:8d:b6:db:da:74:8e:ea:d7:64:be:b5:c2:10:50:99:
         8d:11:4d:90:96:0d:a9:92:22:ea:86:5f:06:91:11:ba:ad:10:
         63:c9:a3:67:df:2f:2b:8a:ef:78:4c:fd:11:e0:21:43:d4:d0:
         32:9c:6e:83:8e:ce:bd:3f:05:45:00:ba:e2:49:45:39:4f:a5:
         72:80:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org