Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e20323730303537.roa
File:                     323830333a323630303a3230323a3a2f34382d3634203d3e20323730303537.roa (raw, json)
Hash identifier:          c6eydlofiiog2xo0pgGBKrIdyC5yfx8lO5CUfHZOpj4=
Subject key identifier:   7A:52:06:AD:FC:C0:BA:79:AE:01:B4:2F:06:F4:3C:5D:D3:93:0F:AE
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       72A21791C63256895954740657DF6453C7448EF7
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     270057
IP address blocks:        2803:2600:202::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a2:17:91:c6:32:56:89:59:54:74:06:57:df:64:53:c7:44:8e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=7A5206ADFCC0BA79AE01B42F06F43C5DD3930FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:20:87:cb:ec:5f:3a:c9:de:47:0f:92:80:
                    6f:d8:d1:62:f5:60:65:1d:51:57:90:60:3b:66:a0:
                    c0:03:2b:e2:12:c0:2a:58:de:2c:19:99:52:b0:d8:
                    fb:53:f6:ba:13:d0:a9:83:06:40:c3:8a:30:d6:1d:
                    8d:18:ef:71:09:ca:11:e7:ca:80:68:25:8d:71:0c:
                    06:19:c3:20:34:fa:03:e2:c8:69:49:ab:c6:4b:57:
                    0b:b8:62:10:48:93:ab:69:2f:ad:d7:04:d4:0c:de:
                    09:b6:30:b3:79:71:01:01:53:88:5c:25:ec:50:39:
                    56:0e:fe:1c:fb:59:7f:42:2d:93:7e:0d:5a:4b:05:
                    b1:70:bf:bb:a3:36:72:80:b7:dc:7a:a5:28:82:4f:
                    18:b7:78:32:b4:76:38:26:eb:d6:f7:2b:b8:40:0e:
                    7d:57:77:65:1a:76:aa:fb:46:f4:7d:1a:ce:82:61:
                    10:a5:3f:ed:03:87:fa:b8:fe:4a:38:6c:fd:7d:69:
                    4d:e8:74:33:03:13:af:4f:3b:ab:ef:1b:9a:ab:dd:
                    e3:b6:91:8f:ff:cf:97:17:20:06:1c:d9:0c:e7:8e:
                    ba:2d:f7:f7:20:83:fe:90:96:3c:2d:9d:19:9b:a5:
                    d6:dd:b3:99:c6:2c:54:39:13:8e:97:37:a8:64:25:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:52:06:AD:FC:C0:BA:79:AE:01:B4:2F:06:F4:3C:5D:D3:93:0F:AE
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230323a3a2f34382d3634203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:58:b4:3f:00:7d:58:dd:ed:5d:2f:2a:2a:3d:0d:fb:b6:4c:
         ec:76:3b:72:e7:f0:61:6a:5f:87:11:32:0e:6a:fa:cc:7e:27:
         57:16:34:bc:56:19:ba:26:12:54:13:0c:e7:41:b1:48:ca:b7:
         4a:45:b5:f7:22:28:44:28:a3:a9:1f:b1:e1:d5:ef:26:29:71:
         c1:1a:81:e2:5e:0a:97:ca:52:4e:37:51:f2:39:29:f6:99:ce:
         2d:1f:b7:76:14:ed:c4:fd:af:38:f7:94:b1:94:09:f8:95:9c:
         ac:1d:69:77:7e:db:66:81:49:a1:35:15:67:17:97:9b:b6:a6:
         65:cd:1b:17:6d:f8:43:87:a1:eb:65:ed:68:bc:79:30:c2:e2:
         fe:28:fb:bf:9b:6b:0a:54:6a:cc:54:c9:f8:dd:f4:1f:78:9d:
         8d:be:22:b4:02:70:e7:4e:f3:cd:b0:41:10:aa:01:68:b4:49:
         bc:05:9b:6a:f3:27:ae:28:8a:42:4b:c8:20:7b:86:4f:42:5a:
         25:41:28:01:c5:f9:71:0b:c7:1b:61:bf:7c:90:6c:e5:a1:79:
         83:09:42:14:08:80:2b:e0:a8:03:1f:f7:1f:a9:a3:91:c8:a4:
         a7:0e:0e:c2:09:f4:b0:df:83:59:8b:12:54:6c:f3:fd:69:4a:
         42:fb:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:25 2024 by rpki-client on console-fra.rpki-client.org