Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa
File:                     323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa (raw, json)
Hash identifier:          ydlE4e0+SiQiCCxrlDvAI4Ha6qP19yE1QbmPGJxmKVU=
Subject key identifier:   A8:76:48:20:38:4B:1A:2C:6B:42:92:41:88:73:93:24:C0:EF:21:3E
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       3501A75AFDAA86851B3AAF822B2035D75782F8B2
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa
Signing time:             Mon 12 Aug 2024 23:25:00 +0000
ROA not before:           Mon 12 Aug 2024 23:20:00 +0000
ROA not after:            Mon 11 Aug 2025 23:25:00 +0000
asID:                     266683
IP address blocks:        2803:c520:960::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:a7:5a:fd:aa:86:85:1b:3a:af:82:2b:20:35:d7:57:82:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Aug 12 23:20:00 2024 GMT
            Not After : Aug 11 23:25:00 2025 GMT
        Subject: CN=A8764820384B1A2C6B42924188739324C0EF213E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:8e:a3:40:cf:a2:1c:06:db:d4:9c:62:35:
                    c7:38:dc:8a:5c:50:f8:33:92:ab:d2:47:c8:f0:42:
                    b3:a9:c9:a2:e4:7b:dd:bc:33:49:eb:46:18:a6:64:
                    db:dd:cc:1e:77:45:24:ec:73:34:b7:fe:05:82:24:
                    d0:e7:86:d0:fd:f3:4a:42:76:30:05:db:a4:f4:f0:
                    5d:3a:30:b6:d4:05:07:dd:c0:78:12:6c:0d:89:f2:
                    75:aa:0c:bc:f1:b1:f9:1d:e8:cd:2b:d7:51:b9:c2:
                    24:e8:12:56:69:d2:f7:41:8f:ee:36:6c:b7:16:81:
                    2a:0d:28:d1:18:e0:81:58:d3:5d:3d:a0:52:91:0e:
                    4c:51:d7:cb:56:eb:9a:31:27:1c:86:6f:6c:63:20:
                    28:72:97:f4:a8:f8:c5:03:c2:a3:98:16:09:ec:e6:
                    e7:71:18:d9:61:75:27:da:2e:ae:92:a1:bc:c9:5e:
                    c1:73:b9:00:78:2a:80:b1:54:15:14:fc:d0:45:9c:
                    f2:e9:58:00:c2:ec:1b:39:89:ca:75:f3:3c:7c:1d:
                    bb:60:19:af:d2:d3:18:49:99:90:49:fb:89:cf:03:
                    da:b8:b5:c0:40:7c:45:9b:0a:f0:bd:b0:ee:67:0d:
                    30:2f:6f:9b:53:55:44:61:79:6d:17:64:91:a3:ba:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:76:48:20:38:4B:1A:2C:6B:42:92:41:88:73:93:24:C0:EF:21:3E
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520:960::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:c7:b9:63:39:53:3b:8c:77:5f:6b:21:ad:e0:f9:46:55:
         93:91:fa:53:8f:6c:60:bb:89:e8:cd:e3:7b:82:c3:ce:2f:89:
         c4:54:35:e6:b0:27:ae:8d:22:42:64:5f:b4:17:25:fd:6f:b7:
         18:eb:44:69:fc:8d:ea:c6:d8:91:89:c7:62:8e:6a:f8:d5:72:
         96:84:c0:8c:b0:87:05:08:de:ce:4e:72:af:e2:f9:cd:2e:34:
         6c:de:da:45:14:bd:eb:fd:f5:00:a1:63:92:ea:84:b3:ab:a4:
         fc:ef:06:38:b5:74:87:58:06:62:8f:a3:78:c7:6e:4c:06:b8:
         0a:fd:9e:c9:ed:eb:a9:57:b4:80:74:f6:a2:25:d7:bc:ea:f3:
         1a:b8:29:ba:ac:37:c4:20:cd:85:3f:c7:0d:fd:12:85:6a:10:
         29:b2:a4:34:bf:20:af:72:29:70:d4:b2:ee:69:87:4d:7a:4f:
         80:32:3e:49:ca:74:88:09:90:77:51:9a:bd:47:e8:6f:9b:5e:
         cf:bc:0b:78:6b:c1:b2:e8:5c:5f:ca:73:c9:3a:17:ba:fc:0b:
         30:e8:53:1d:54:5a:87:0c:4a:11:48:7c:2a:f9:82:83:56:2f:
         1d:2b:73:79:70:b7:3c:38:ee:c5:b5:16:b8:c5:e9:2b:14:9e:
         1a:ed:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org