Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa
File:                     323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          oy2du0Y6EYt0VSUqlJM38q06s0H5P4ZFz11SP4SIo6c=
Subject key identifier:   EA:2C:ED:10:B3:DE:F3:9F:7C:DE:7C:41:88:96:A2:42:1E:07:A2:53
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       0E4950D1261383F335E351C0DFC6443B41C43CB5
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa
Signing time:             Tue 05 Mar 2024 17:58:30 +0000
ROA not before:           Tue 05 Mar 2024 17:53:30 +0000
ROA not after:            Tue 04 Mar 2025 17:58:30 +0000
asID:                     271942
IP address blocks:        2803:2610:2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 10:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:49:50:d1:26:13:83:f3:35:e3:51:c0:df:c6:44:3b:41:c4:3c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Mar  5 17:53:30 2024 GMT
            Not After : Mar  4 17:58:30 2025 GMT
        Subject: CN=EA2CED10B3DEF39F7CDE7C418896A2421E07A253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:9b:bb:09:a7:04:b5:c0:58:51:db:a8:e9:
                    1f:02:d2:aa:55:99:8e:bf:5d:ed:35:94:36:5e:7c:
                    e8:4f:c4:6e:91:6f:0c:18:f7:d3:2a:c1:3a:60:15:
                    75:15:85:59:ed:81:17:20:0c:f1:60:5c:5c:fe:5b:
                    35:d3:5d:ea:a8:a6:62:b9:d6:1a:7f:f1:05:29:59:
                    40:0a:99:55:b6:f9:02:24:b1:8f:38:03:15:55:f5:
                    d6:36:68:05:84:a3:a4:a4:21:ac:f9:4f:41:2e:45:
                    0b:a1:e1:80:0a:32:42:73:7c:02:e2:77:32:9e:68:
                    f2:7d:ab:73:39:a3:2b:7f:65:53:55:24:6f:53:f3:
                    79:93:ad:ab:a7:07:a5:ad:28:bc:5e:84:44:37:64:
                    86:8d:93:24:8c:1f:03:a4:84:47:dc:18:ae:b2:8e:
                    85:e5:a2:41:76:de:0c:21:2d:eb:99:2b:3e:66:3d:
                    dc:c2:0a:39:1f:ca:63:09:4f:7c:cf:d2:54:98:d6:
                    eb:62:3a:ac:dd:87:55:b6:f7:7f:76:11:0a:54:fb:
                    01:29:a7:8b:57:4e:04:5d:eb:4e:ee:0f:10:48:11:
                    ef:16:ea:b9:7d:d4:8f:11:0e:d3:11:d6:05:24:26:
                    3f:e1:03:d6:09:e8:27:36:5d:94:60:98:fd:6a:ab:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:ED:10:B3:DE:F3:9F:7C:DE:7C:41:88:96:A2:42:1E:07:A2:53
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a323a3a2f34372d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:bd:94:df:06:df:f8:0b:11:2b:57:b9:04:69:b6:3a:5e:
         f4:ee:21:6c:1f:29:cb:34:d6:d9:74:42:65:39:28:ef:a2:6c:
         86:6f:66:8e:2c:94:4a:fe:64:0d:c0:53:39:4d:a7:04:a6:d2:
         a7:bd:ee:31:1e:4f:68:87:49:91:15:f8:2c:38:f3:c3:e8:70:
         65:93:b3:09:57:78:25:d8:65:27:31:2c:6c:a3:90:18:c3:75:
         db:d7:d5:0e:7e:d9:ff:e3:e5:82:4b:72:24:96:06:cd:c1:ee:
         64:38:09:33:24:a6:b1:80:ad:b5:0a:18:da:67:f4:47:bf:b6:
         77:cf:7a:75:91:0e:55:06:da:c4:a3:53:7b:6e:0e:b9:8f:e2:
         62:07:38:84:49:fd:8a:3c:32:7e:5c:68:23:88:a5:ba:7b:21:
         ae:50:77:4c:e4:30:d9:a4:73:1d:89:0d:21:ed:5b:1d:05:28:
         e2:b1:56:d9:b9:57:bf:70:8f:39:7a:b2:91:84:5a:f5:cb:09:
         92:4e:ee:b1:e9:90:b2:b6:58:bd:c1:a9:0b:b1:a0:06:1c:36:
         64:12:22:44:50:12:84:2c:63:8a:32:5e:6c:ac:43:6a:55:8c:
         4e:fb:68:ed:03:fb:5c:4a:c7:3c:8d:d1:14:44:b3:de:7c:88:
         fb:61:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:35 2024 by rpki-client on console-fra.rpki-client.org