Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa
File:                     323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa (raw, json)
Hash identifier:          I8JKOwDmu8zjj3Lgcq3u6DK1riOnzRREBW+pxBHQeLg=
Subject key identifier:   8D:55:B5:D4:36:96:3C:F1:B4:8E:4D:A0:25:5A:5B:58:6E:6E:4E:DE
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       6F023D3E53F6E7285487702E9F2E17D5BF8AE428
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:15 +0000
ROA not before:           Tue 05 Mar 2024 17:53:15 +0000
ROA not after:            Tue 04 Mar 2025 17:58:15 +0000
asID:                     28114
IP address blocks:        2803:2600:203::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:3d:3e:53:f6:e7:28:54:87:70:2e:9f:2e:17:d5:bf:8a:e4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:15 2024 GMT
            Not After : Mar  4 17:58:15 2025 GMT
        Subject: CN=8D55B5D436963CF1B48E4DA0255A5B586E6E4EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:e8:b5:1c:5f:44:4d:eb:a4:31:0c:36:2c:
                    e7:4d:13:1b:52:8e:2f:02:d6:bb:56:9f:51:1e:07:
                    e4:ea:a0:f9:4f:2a:a2:f3:59:c5:c6:90:53:1a:d4:
                    89:05:20:30:7f:0f:6f:b9:ad:90:f4:bf:b0:8a:f8:
                    83:8b:19:3f:a3:25:40:44:0f:50:60:69:1c:41:32:
                    b3:60:ce:87:ba:1f:33:a3:e4:f1:69:97:17:8e:fe:
                    27:1d:a2:16:4d:95:11:c4:30:ab:dc:96:73:4a:9c:
                    d4:86:40:c4:d4:17:02:19:20:e4:41:1f:c6:b6:d8:
                    65:8c:65:81:33:90:69:82:b5:e4:3b:76:9f:c1:c2:
                    22:40:fd:c6:f9:a2:ea:7c:91:79:33:26:33:d0:13:
                    9e:b7:06:9a:d0:4e:47:11:aa:32:bb:38:d9:96:68:
                    a2:a6:ed:a9:fd:5f:ba:cf:05:6b:04:63:51:f6:c8:
                    b6:04:cf:a4:19:68:15:54:17:78:de:c3:72:1e:17:
                    e1:3e:d4:a3:56:8f:49:b0:47:0a:10:27:bf:d8:5d:
                    1c:20:57:e4:e0:52:1b:19:14:91:31:6e:b7:36:32:
                    36:a3:89:8b:2f:0c:5f:70:db:23:00:8a:5e:4a:e3:
                    1a:22:a8:46:e7:04:83:e4:86:ac:65:2c:72:3a:00:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:B5:D4:36:96:3C:F1:B4:8E:4D:A0:25:5A:5B:58:6E:6E:4E:DE
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a3230333a3a2f34382d3634203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:b5:5f:d5:eb:f3:cf:29:70:33:d3:0d:f5:38:1d:ff:01:
         b3:4f:09:f7:16:8c:bf:40:26:7c:87:6d:93:5d:ff:08:ee:84:
         e1:fc:62:0e:d6:97:05:5c:28:e7:80:8d:b5:ca:0d:b2:68:ba:
         a0:3e:7f:cc:a8:09:3e:ca:3c:dc:df:3f:c6:d7:10:3a:2d:a0:
         35:46:db:e5:dc:df:c5:f9:52:a8:c8:f8:7b:cc:82:4e:df:98:
         c9:5d:f4:92:ef:56:2c:c0:33:7c:4e:19:40:8f:1d:a0:8c:f8:
         3a:bc:d6:08:92:d4:92:5d:54:ab:68:c4:d8:a0:1d:4a:f5:22:
         6c:75:60:b2:9e:44:81:ec:c3:04:ab:b4:ee:9c:a6:e9:71:47:
         47:18:3f:5e:0f:1a:80:3f:d8:71:91:be:40:99:76:6b:05:fa:
         24:41:4a:52:0a:d6:1d:e7:69:46:2b:76:08:8c:16:50:c3:2d:
         af:6b:df:36:4b:c9:5c:af:0f:21:e5:8c:6a:f1:80:65:b9:77:
         af:73:8f:78:ff:2d:16:af:63:6b:4c:60:aa:2f:c0:63:26:9c:
         04:0d:d0:99:1b:74:77:9b:42:03:5a:d9:18:4c:57:90:06:d6:
         91:89:2b:c1:28:a3:dc:c8:f3:9c:e7:d7:0a:ac:21:28:20:bd:
         8a:a1:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org