Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa
File:                     323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa (raw, json)
Hash identifier:          tVW76hW1CqaBGvVBjR4jGWXkAJSwGVwAtHa2K78SYKM=
Subject key identifier:   B0:79:B5:2B:E7:B2:48:7B:94:A8:9C:2C:C1:E3:8F:5F:C0:4B:5C:0D
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       431920C3B7F8151990A4BB4555614C78616FA516
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa
Signing time:             Tue 05 Mar 2024 17:54:50 +0000
ROA not before:           Tue 05 Mar 2024 17:49:50 +0000
ROA not after:            Tue 04 Mar 2025 17:54:50 +0000
asID:                     23246
IP address blocks:        2803:c310:fe00::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:19:20:c3:b7:f8:15:19:90:a4:bb:45:55:61:4c:78:61:6f:a5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Mar  5 17:49:50 2024 GMT
            Not After : Mar  4 17:54:50 2025 GMT
        Subject: CN=B079B52BE7B2487B94A89C2CC1E38F5FC04B5C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:74:43:e5:94:8a:e3:d8:a3:54:8b:26:18:8a:
                    3d:21:94:90:f8:c6:d5:00:af:70:89:af:c7:44:7b:
                    90:7d:03:9e:df:e9:54:4f:15:6b:27:72:00:90:c4:
                    9d:4d:e7:49:6e:24:7f:38:43:3e:2b:c1:48:19:de:
                    72:5e:62:ff:97:14:44:6d:2e:9b:22:27:70:6c:79:
                    21:1e:ca:28:a8:fd:a5:a7:b8:10:8f:cc:46:d9:39:
                    21:91:39:2e:67:c7:59:bf:2e:f6:16:31:b9:03:18:
                    6b:1c:eb:26:bb:2c:ed:9e:60:51:09:85:f8:6f:9a:
                    dd:17:d0:68:e4:bf:d2:5b:11:04:a1:06:88:50:0e:
                    f3:28:ef:64:59:5b:06:bd:fc:0e:be:59:be:b8:68:
                    34:1c:0c:0b:eb:cc:cb:89:0a:50:c3:df:d4:c5:ea:
                    64:54:70:0a:27:a2:b7:b5:1d:f0:22:09:fd:c9:c4:
                    41:78:48:ee:a4:a9:66:61:95:e7:5a:9b:4d:94:10:
                    2e:aa:a6:a5:b4:de:cc:9c:67:e9:ea:c2:e8:17:54:
                    5f:d9:69:2a:3c:96:f4:33:37:89:96:5e:de:d8:aa:
                    69:86:19:9c:e9:8f:02:31:7e:26:be:ad:d5:10:0e:
                    55:c8:9b:2e:2e:f5:50:9f:bd:9a:d7:ed:08:3f:6e:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:B5:2B:E7:B2:48:7B:94:A8:9C:2C:C1:E3:8F:5F:C0:4B:5C:0D
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a666530303a3a2f33392d3438203d3e203233323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:46:78:b9:3e:dd:19:5b:f4:e7:8f:b6:9f:33:ab:ad:84:
         d3:1e:82:b3:f3:24:0f:66:03:24:98:ab:67:71:27:57:5d:79:
         4e:a1:78:60:95:eb:5c:88:65:ec:99:1c:01:1a:74:54:4e:0a:
         28:8c:a8:90:18:21:ba:66:53:48:c0:3c:14:84:3c:6f:62:f0:
         70:30:1f:fa:93:4d:c8:61:b9:bd:71:e5:1e:72:03:3d:f6:3f:
         09:62:9a:f3:2a:87:9f:ea:84:07:10:c9:ae:4a:a2:d1:42:0e:
         bb:5f:6c:16:89:25:b6:75:82:3c:7a:19:2d:9f:45:67:11:42:
         0c:4c:a2:e8:15:a8:fd:e1:c2:1e:53:c1:34:93:09:a2:78:51:
         4f:89:92:3d:70:09:44:50:f7:91:66:15:f4:79:d9:9d:33:3b:
         1a:48:7d:78:d6:10:cc:b8:43:17:a3:84:7c:e6:71:6d:e7:b9:
         bf:7f:9a:93:b3:6e:8f:81:c1:3b:09:cc:8d:c1:5e:35:74:30:
         75:e6:9b:93:8d:e9:22:3c:76:bf:a4:c9:84:0a:d7:66:5d:11:
         c1:40:b6:85:1a:1b:19:1e:0b:ce:6e:d2:b6:2d:87:6f:2d:16:
         5a:31:e4:e2:9e:d7:e9:d8:5d:b0:55:7d:71:02:6c:0b:8b:f1:
         87:f3:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:17 2024 by rpki-client on console-ams.rpki-client.org