Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa
File:                     323830333a363936303a3a2f33322d3332203d3e20323639373432.roa (raw, json)
Hash identifier:          VdXxthTGnLArta/K1Z3Wlhjnx0MZxp9Kpg0cKEhdqRQ=
Subject key identifier:   81:32:4B:30:33:37:7D:38:AF:C0:18:27:E4:92:01:5A:E5:F6:26:F2
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       1DF6928BCDFCF8018FE2464187640A219244AC8C
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa
Signing time:             Tue 05 Mar 2024 17:44:18 +0000
ROA not before:           Tue 05 Mar 2024 17:39:18 +0000
ROA not after:            Tue 04 Mar 2025 17:44:18 +0000
asID:                     269742
IP address blocks:        2803:6960::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f6:92:8b:cd:fc:f8:01:8f:e2:46:41:87:64:0a:21:92:44:ac:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Mar  5 17:39:18 2024 GMT
            Not After : Mar  4 17:44:18 2025 GMT
        Subject: CN=81324B3033377D38AFC01827E492015AE5F626F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:f9:c8:bf:ed:0d:ae:59:93:db:0a:cd:14:
                    00:35:54:40:74:f9:60:d8:32:c6:c8:31:17:c4:42:
                    32:04:b2:4b:ce:7f:88:5b:c5:85:7f:48:00:14:30:
                    90:16:33:01:51:70:4f:d0:cd:18:47:c4:c6:af:4a:
                    c3:38:fc:9d:08:d5:0b:ea:57:a1:f3:27:a3:c2:6e:
                    1f:60:5f:e0:98:f0:06:cc:e7:b4:2e:e6:5c:23:4c:
                    aa:ba:c7:4b:9c:3c:88:05:44:bf:d9:42:65:e9:48:
                    21:9c:2c:8d:af:08:05:79:5b:ea:4d:9d:df:92:d8:
                    78:1d:bf:fe:81:a7:4c:db:d4:55:4b:ab:d2:c1:fd:
                    79:e8:f9:ee:8a:40:18:54:ad:f7:24:8e:05:69:c6:
                    cd:ae:24:a2:db:ee:f1:e3:53:0f:13:79:31:e3:47:
                    da:78:a7:4b:0c:24:d8:0f:60:cc:84:3b:23:33:cb:
                    ef:74:f4:8f:53:99:bb:da:5a:ba:e5:31:cb:1b:d1:
                    c2:a8:de:55:de:6d:7f:61:01:13:59:a7:9e:7b:0e:
                    bf:22:bc:b9:ab:5d:ac:b8:45:e8:5e:7e:9c:66:9a:
                    27:c2:41:a2:c0:4e:ff:4e:51:38:d4:46:11:ee:14:
                    d0:b4:ea:8a:51:55:e9:c2:33:91:ed:b8:e1:7c:e7:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:4B:30:33:37:7D:38:AF:C0:18:27:E4:92:01:5A:E5:F6:26:F2
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6960::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:1e:51:1c:6d:57:b6:40:81:b7:0e:75:1b:4b:aa:91:1a:43:
         c1:97:47:9f:1a:8c:ca:5f:6a:d0:44:4a:8f:9f:74:5f:55:dd:
         20:c1:53:38:c4:6f:25:a0:6a:2b:a0:e2:c9:9e:59:70:db:45:
         ac:fa:8f:18:80:66:f7:1a:4d:28:24:1d:32:8d:f5:d3:06:7c:
         5f:b3:fa:62:c1:59:7b:4d:01:69:1b:d1:97:ee:07:7f:04:8c:
         df:2f:2d:40:e6:1d:55:28:48:d5:f4:9e:c1:28:0c:07:e0:49:
         eb:95:4a:d4:86:1e:3a:c7:c2:7d:fb:18:4a:e6:bb:4b:34:c1:
         3c:f5:46:05:5b:ec:66:29:41:24:17:19:45:30:67:ab:0b:70:
         b3:58:58:92:26:0c:b7:54:b3:1a:26:9a:de:d5:61:f6:08:94:
         32:66:1f:7b:26:a5:b5:aa:23:44:bb:de:82:d4:af:5d:9e:ea:
         e2:bb:3f:55:c2:c7:2c:e6:01:72:b7:b7:c1:d9:45:e2:24:df:
         38:8e:f1:1a:fa:2d:45:9d:76:de:02:24:48:74:a0:a4:1a:f8:
         29:03:d1:9b:c1:0c:34:9e:4b:ca:05:42:bb:21:9a:f5:25:73:
         87:40:51:c9:49:29:ff:1a:ad:7c:5c:c7:49:16:28:13:d9:4a:
         00:80:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org