Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/323830333a373434303a3a2f33322d3438203d3e20323633373836.roa
File:                     323830333a373434303a3a2f33322d3438203d3e20323633373836.roa (raw, json)
Hash identifier:          3aBnGtd1apY3Jipg1PKCPcxsKZgZOhVHNNmUgAaR9Bc=
Subject key identifier:   7F:BC:5F:39:33:80:AC:E5:54:1E:26:95:8E:F7:EE:83:57:C3:D7:DC
Certificate issuer:       /CN=6D1C715A5E9078E9C0184B064F0D488E81755860
Certificate serial:       326F93B1CF94AB2B6CE369891EB8FA98BA9FEE19
Authority key identifier: 6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/323830333a373434303a3a2f33322d3438203d3e20323633373836.roa
Signing time:             Tue 05 Mar 2024 17:40:49 +0000
ROA not before:           Tue 05 Mar 2024 17:35:49 +0000
ROA not after:            Tue 04 Mar 2025 17:40:49 +0000
asID:                     263786
IP address blocks:        2803:7440::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6f:93:b1:cf:94:ab:2b:6c:e3:69:89:1e:b8:fa:98:ba:9f:ee:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1C715A5E9078E9C0184B064F0D488E81755860
        Validity
            Not Before: Mar  5 17:35:49 2024 GMT
            Not After : Mar  4 17:40:49 2025 GMT
        Subject: CN=7FBC5F393380ACE5541E26958EF7EE8357C3D7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:92:92:04:57:9d:1c:51:8c:af:04:7d:fa:
                    aa:69:89:e3:9e:79:ef:62:eb:0f:59:e7:bf:63:ef:
                    f9:d1:aa:03:d8:df:48:85:e7:14:4e:b9:db:e8:7e:
                    c8:61:1c:08:08:b5:35:2b:2e:11:9f:4f:fa:23:48:
                    2d:05:12:ea:71:73:b9:e1:33:0b:b3:23:bf:e9:da:
                    6c:e0:74:e2:b5:47:a2:64:87:53:35:0c:fb:40:ff:
                    fd:3b:70:71:b0:bd:a8:99:76:33:d9:c0:7f:24:b9:
                    f7:23:10:20:c3:0a:ad:25:1e:d6:a0:d3:db:d6:a7:
                    6e:06:c9:30:b7:a8:dc:7a:f7:e7:3b:97:12:89:bd:
                    1b:65:a6:c3:ad:54:ad:3e:f5:56:5c:83:0f:4e:89:
                    2d:c4:96:7e:cf:af:1c:cf:fd:ae:2b:1f:16:d7:ed:
                    c2:b0:63:48:07:30:f1:42:e1:73:ff:6d:c7:3d:3d:
                    fe:db:1b:bc:1e:6d:90:0f:19:a8:b8:68:f2:48:58:
                    eb:14:c3:7b:b7:90:45:d9:ac:2a:ce:7c:48:51:e8:
                    aa:1f:ae:73:df:34:97:09:55:53:f6:09:c6:1d:96:
                    68:4f:40:42:cc:25:d9:c1:36:fd:55:44:52:69:a8:
                    67:67:b0:bd:0b:11:48:9b:c3:d7:9a:16:8e:24:46:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:5F:39:33:80:AC:E5:54:1E:26:95:8E:F7:EE:83:57:C3:D7:DC
            X509v3 Authority Key Identifier:
                keyid:6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/323830333a373434303a3a2f33322d3438203d3e20323633373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7440::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:69:d7:a7:05:93:0a:ae:83:50:95:2b:92:64:0b:8d:60:
         3d:77:32:e2:0f:f6:cd:d6:2a:16:7d:bb:f3:51:28:a5:bc:b9:
         66:e4:0c:a0:52:fb:4f:70:84:95:03:c2:78:51:c7:aa:f7:5f:
         28:87:4e:66:ab:09:2f:c8:f6:da:af:b0:20:07:d0:31:9a:ff:
         0e:ea:13:de:30:61:7a:1f:eb:b5:31:cf:7e:4d:24:da:2c:b2:
         06:b7:2a:d7:e6:e7:9c:e9:b0:f1:19:29:a6:e1:78:34:ac:e1:
         36:66:72:bb:4b:0f:ed:7f:53:7e:af:e2:c1:a4:bd:e2:02:15:
         1e:f5:ee:da:3c:bf:bb:24:26:1c:14:29:72:33:46:79:a5:fb:
         89:3e:4c:18:ef:21:71:47:82:1c:1d:9e:9f:99:b5:1a:06:59:
         ea:ae:2d:55:4d:d1:a7:77:c0:4c:60:4a:f1:4f:f4:bd:b0:bf:
         f2:dd:42:ad:f8:18:32:b0:15:b4:3c:b4:a0:c8:21:fa:e9:a1:
         c8:04:e6:34:2a:dc:c8:e1:d6:45:f0:d3:28:91:f3:81:92:f1:
         fc:46:f9:63:31:ce:a7:12:39:11:29:ee:98:a2:4f:be:b5:26:
         77:cf:98:03:1d:08:03:58:b1:90:87:95:08:8b:18:cc:f2:45:
         7c:e1:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org