Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/323830333a666161303a3a2f33322d3332203d3e20323636383833.roa
File:                     323830333a666161303a3a2f33322d3332203d3e20323636383833.roa (raw, json)
Hash identifier:          0UL4SsxhL0ji+BVtliFJyZlQwuNpoX7zi/k0XUyB3l0=
Subject key identifier:   A0:A4:9E:B6:1F:FD:B1:8B:46:95:73:12:03:9C:B2:BA:1E:71:2D:68
Certificate issuer:       /CN=6F91B3ED2EBE562AD6A8730A1E8BB06791437457
Certificate serial:       0C6FB2CAE665C0EDE45825596EC538173908F1A1
Authority key identifier: 6F:91:B3:ED:2E:BE:56:2A:D6:A8:73:0A:1E:8B:B0:67:91:43:74:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/323830333a666161303a3a2f33322d3332203d3e20323636383833.roa
Signing time:             Tue 05 Mar 2024 18:01:40 +0000
ROA not before:           Tue 05 Mar 2024 17:56:40 +0000
ROA not after:            Tue 04 Mar 2025 18:01:40 +0000
asID:                     266883
IP address blocks:        2803:faa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6f:b2:ca:e6:65:c0:ed:e4:58:25:59:6e:c5:38:17:39:08:f1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F91B3ED2EBE562AD6A8730A1E8BB06791437457
        Validity
            Not Before: Mar  5 17:56:40 2024 GMT
            Not After : Mar  4 18:01:40 2025 GMT
        Subject: CN=A0A49EB61FFDB18B46957312039CB2BA1E712D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:17:d9:c9:a3:f4:64:1a:1d:54:32:43:29:
                    fc:f9:3d:31:a7:2d:9a:05:ab:9b:ac:27:a9:10:2f:
                    71:f6:d0:59:df:82:e5:5b:d3:c9:2f:99:3d:c4:6c:
                    cb:f8:76:79:7f:01:ce:cf:bb:26:fc:81:99:99:09:
                    5f:a2:40:a8:31:19:61:3b:9b:95:b5:ee:9f:1b:c3:
                    d7:fd:ab:c9:ce:09:8a:41:a7:fe:e1:96:8c:13:fc:
                    98:81:8b:31:6a:79:05:ab:74:0e:ae:57:95:59:50:
                    52:b9:9e:52:87:82:56:83:68:56:31:67:67:f6:54:
                    88:0c:8f:4e:1d:f7:72:da:d3:a7:fc:02:01:fb:8a:
                    41:19:9e:a3:3c:14:6a:0b:0c:25:f2:c7:7e:9c:06:
                    ae:b3:fa:18:d4:1d:5b:14:b6:c6:73:15:5a:89:1f:
                    dd:53:4e:d4:f4:f9:98:f4:09:21:74:d8:86:3e:16:
                    69:02:94:aa:f4:b8:28:81:c5:0b:f0:89:c3:03:65:
                    fe:d8:30:43:f1:ed:f4:51:4f:bf:25:9f:f5:af:1c:
                    8d:3a:bb:c3:85:9e:d4:e2:fb:d1:14:e3:ac:94:70:
                    9f:c8:2e:7e:3f:ed:c2:ca:e3:e0:36:87:90:e0:af:
                    97:b8:7c:49:a5:e9:d9:c2:0e:f3:67:90:10:e1:27:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:9E:B6:1F:FD:B1:8B:46:95:73:12:03:9C:B2:BA:1E:71:2D:68
            X509v3 Authority Key Identifier:
                keyid:6F:91:B3:ED:2E:BE:56:2A:D6:A8:73:0A:1E:8B:B0:67:91:43:74:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F91B3ED2EBE562AD6A8730A1E8BB06791437457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48A2A81DD2C8248680370BE6741064445900AA414EEBEA2AF4E11750C1CF9160/0/323830333a666161303a3a2f33322d3332203d3e20323636383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:75:0f:ec:40:d5:f5:dd:0a:e7:5f:3e:3b:e9:d7:71:db:10:
         58:98:1a:d9:e1:18:db:74:f1:69:47:86:8b:1f:9d:61:02:ef:
         5b:b1:f9:04:d6:8c:af:ee:bd:2a:53:d5:f6:17:39:4a:78:b8:
         b6:27:2b:4f:0c:e0:6c:1e:31:cd:03:28:d5:6a:40:1a:92:ba:
         2a:50:38:0b:bf:89:af:6d:33:a3:45:2d:c6:a2:9f:97:58:4d:
         5d:4e:f3:e7:b9:58:fe:5b:3f:1d:4c:e5:aa:f3:5b:c5:47:75:
         6e:e6:1e:cb:b8:6d:43:cb:fe:20:44:88:44:c4:8b:11:30:02:
         8e:84:76:37:4c:98:85:40:a6:a5:2a:d0:76:26:30:14:51:51:
         03:35:20:d1:ef:30:52:bb:24:ce:f6:04:2b:3d:b2:84:e3:2e:
         8e:69:0b:de:7b:be:5c:df:fb:cc:a2:31:74:c5:ca:48:d3:b6:
         25:52:56:22:fd:75:5b:6a:cf:91:5d:9b:60:2a:82:0f:fc:1a:
         8e:88:ae:01:39:ee:09:d4:9f:97:c7:b5:4a:b9:04:c8:f2:b6:
         cf:44:15:d8:6d:e1:58:7a:1b:c2:ed:fd:fc:82:f5:67:25:20:
         87:69:77:87:f2:e3:4c:d8:d5:3e:e6:97:9a:76:65:db:a9:d8:
         c8:ed:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org