Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3530303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3530303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          5F1rEq9dE+4Pw0O+E+IUvLjxJUEHEZAv7T6XndrcjI4=
Subject key identifier:   6E:B2:BF:B3:A4:38:E4:96:C9:7A:80:C9:E5:57:37:0C:4A:83:1D:B2
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       4986FFAD1EDF1ADF4BEE34AD0C45A5A7AED76ABE
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3530303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:21 +0000
ROA not before:           Tue 05 Mar 2024 17:57:21 +0000
ROA not after:            Tue 04 Mar 2025 18:02:21 +0000
asID:                     266894
IP address blocks:        2803:56a0:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:ff:ad:1e:df:1a:df:4b:ee:34:ad:0c:45:a5:a7:ae:d7:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:21 2024 GMT
            Not After : Mar  4 18:02:21 2025 GMT
        Subject: CN=6EB2BFB3A438E496C97A80C9E557370C4A831DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:9a:87:69:83:65:1e:7e:73:e2:bf:33:8a:
                    fe:7d:f1:50:6f:22:ff:04:2d:68:d8:1e:1e:61:76:
                    5e:aa:dc:3a:a3:cb:d4:90:0b:5e:d7:2d:67:29:85:
                    4c:33:e6:af:76:dc:9e:27:8e:a7:13:56:ce:bd:c6:
                    b8:8a:8d:f7:ae:80:57:3c:1d:3c:79:2f:94:06:ab:
                    9f:8e:ac:ad:96:7b:29:2a:2d:c7:5f:38:35:46:b4:
                    53:fd:06:e3:45:79:68:91:90:b5:68:93:98:fe:5f:
                    4e:ec:bb:9e:21:f3:ff:a4:64:a2:fc:d1:fc:0c:ec:
                    fd:45:2f:c3:ec:d3:79:b4:6a:a5:07:9d:71:89:54:
                    63:12:35:ac:81:f5:61:ba:c6:80:4d:69:50:49:29:
                    4e:37:60:1a:b8:af:63:46:8b:ef:50:7b:14:49:44:
                    38:17:d8:90:ac:01:25:b8:7f:a8:e7:54:fb:59:bb:
                    6d:74:e4:fc:0f:2f:c3:ff:58:62:a6:22:ff:f6:f8:
                    98:45:1a:57:70:28:bc:e1:d1:d6:b7:0b:ff:1a:50:
                    18:96:c4:82:2f:1a:f4:08:ca:24:91:99:0f:02:fc:
                    1f:13:f8:4a:d3:2c:5c:34:78:19:04:eb:17:70:8e:
                    29:2e:1d:5b:a2:1e:0d:ed:a7:a8:d2:f0:f5:65:c8:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:BF:B3:A4:38:E4:96:C9:7A:80:C9:E5:57:37:0C:4A:83:1D:B2
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3530303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:ed:97:03:dc:9f:2c:fe:34:b5:12:75:00:29:68:a6:97:
         8b:4e:65:c8:6e:61:d8:28:d6:92:39:b0:b6:23:fd:2a:c8:4b:
         8d:31:69:56:24:06:fe:3b:a2:44:45:e0:f3:0f:36:a2:59:6d:
         e8:1a:a1:47:b2:a3:0c:6a:6c:05:7b:d7:c2:59:d7:50:7d:5a:
         a8:47:82:9d:59:b8:f9:dc:ee:dc:f3:5d:ac:26:11:7e:6b:1a:
         38:4e:24:b9:88:f3:7b:53:e6:a8:7f:5b:99:ca:93:7f:e7:ea:
         94:a8:65:98:db:67:8f:54:7f:38:d2:8c:60:0f:ff:03:8a:ef:
         99:d9:35:23:3b:0e:5f:c6:10:89:e5:dc:94:a7:fe:d2:c1:f3:
         65:7e:5d:a4:fa:a8:11:8e:71:7a:9c:26:ec:60:e4:42:0d:bc:
         f2:04:08:31:16:3c:40:e1:72:03:d9:45:43:ca:09:54:a9:b0:
         1a:f2:93:a6:14:9b:09:6a:09:47:3d:21:87:fd:07:08:a7:53:
         4e:73:49:0d:32:3f:ad:04:5e:1a:dd:43:f1:a3:88:90:dc:ae:
         e6:5f:15:c6:2a:00:21:35:be:4b:0a:e8:de:77:c7:49:e2:d1:
         92:f9:cf:44:52:66:dc:33:53:13:c5:92:e7:42:2d:da:b3:a3:
         06:99:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org