Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa
File:                     323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa (raw, json)
Hash identifier:          cishSQqPcxmoRnijNAZUJSK5GZjvtKKTXwQh5cuccII=
Subject key identifier:   50:47:9E:98:3D:8E:4C:41:1D:27:FA:18:D6:6C:66:14:E9:34:E4:52
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       206E7C7C0ACD9A12623A405CA877DF3D6225EDB1
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa
Signing time:             Fri 14 Jun 2024 14:55:00 +0000
ROA not before:           Fri 14 Jun 2024 14:50:00 +0000
ROA not after:            Fri 13 Jun 2025 14:55:00 +0000
asID:                     266683
IP address blocks:        2803:c520:990::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:7c:7c:0a:cd:9a:12:62:3a:40:5c:a8:77:df:3d:62:25:ed:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Jun 14 14:50:00 2024 GMT
            Not After : Jun 13 14:55:00 2025 GMT
        Subject: CN=50479E983D8E4C411D27FA18D66C6614E934E452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:38:b9:70:66:44:0d:fc:bf:6a:78:37:1d:
                    b4:8b:b9:8e:a4:cf:f9:36:71:8e:60:61:15:72:68:
                    9d:7c:7e:40:19:0b:80:41:5a:15:4f:1d:5a:cd:53:
                    85:64:51:f8:23:02:34:fa:c7:0a:1a:f2:5f:39:10:
                    27:80:cf:38:ce:9b:67:6b:06:ff:ce:72:d0:d8:1e:
                    bb:03:b1:5b:26:2c:85:67:03:78:c6:5a:88:9f:f2:
                    55:2b:03:38:1e:b1:b5:d1:2e:f9:62:9c:25:a7:d9:
                    b4:ba:b6:5c:45:3e:5b:ff:8b:c7:43:c1:44:fa:5b:
                    55:1a:1d:ee:97:55:48:fb:a5:6c:e2:28:69:0d:bf:
                    4d:43:c8:e9:cc:44:3b:73:38:75:18:d7:3e:fd:64:
                    c4:47:a2:33:2b:d1:52:30:be:2b:18:41:10:86:69:
                    7d:95:d6:4a:d2:7f:f9:d7:9c:84:ca:47:eb:ec:c5:
                    bb:49:97:02:0d:4b:82:25:58:0c:a3:f7:0f:86:92:
                    ac:2b:ed:a9:ff:73:f1:a5:8f:53:30:b8:f4:de:8c:
                    b2:28:f7:8e:13:77:ef:f8:f1:f8:79:59:cf:3e:bd:
                    8d:93:0e:b7:19:81:a3:ee:ff:84:c0:8d:15:fe:69:
                    10:90:8a:6e:46:90:d7:3e:de:27:1a:45:a6:93:77:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:9E:98:3D:8E:4C:41:1D:27:FA:18:D6:6C:66:14:E9:34:E4:52
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520:990::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:20:d8:a1:be:2b:ad:48:b3:b0:1d:a6:da:6d:44:e4:8c:4a:
         41:10:aa:cb:d6:45:a8:1a:21:1a:bc:df:bb:cb:7a:54:06:2a:
         dd:33:44:0e:52:cd:d0:54:88:2d:c7:57:43:21:dc:40:ac:4b:
         e6:00:a9:1e:b2:aa:c4:30:18:19:9c:cb:29:4b:1a:de:9a:44:
         e7:69:68:ad:75:16:7e:c5:ca:d7:90:f1:35:c8:ff:58:db:8a:
         5a:0b:d1:2e:86:f9:d9:64:27:7e:ee:67:46:5d:17:07:d2:1d:
         15:6e:36:43:81:a4:6b:ca:0b:ec:9d:45:f8:71:6a:fb:3d:8a:
         a0:8b:7e:92:a0:df:5a:b7:e4:75:c7:7d:b4:c5:59:80:50:25:
         11:75:bc:3c:0d:b2:08:cd:08:54:46:bf:09:37:62:75:45:3e:
         45:21:21:e2:45:7c:b1:79:74:c5:66:bd:93:b3:e0:df:ce:b4:
         99:43:c7:86:8d:9c:1c:82:da:aa:b2:6e:f5:ba:36:11:be:26:
         72:ab:36:8f:61:ed:f2:06:1e:ed:ab:4a:f8:68:13:a5:8c:88:
         af:33:a5:67:b1:20:f4:cf:64:c5:a8:a8:0f:c6:89:31:2a:ab:
         67:7f:f0:70:64:67:67:64:05:93:e0:97:81:ea:ae:52:94:de:
         97:51:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org