Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa
File:                     323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa (raw, json)
Hash identifier:          ABb7gzI7c62v0gIkcfyvpOklH+OPwcrnz185PB+sjHI=
Subject key identifier:   8B:E9:FE:04:18:2B:1E:74:E4:B8:12:2B:C5:09:CB:BA:0D:1B:7F:A4
Certificate issuer:       /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial:       019C129C272913ECED7F637E3C1372B8AA1644F0
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa
Signing time:             Tue 05 Mar 2024 17:51:08 +0000
ROA not before:           Tue 05 Mar 2024 17:46:08 +0000
ROA not after:            Tue 04 Mar 2025 17:51:08 +0000
asID:                     271992
IP address blocks:        2803:9110:2000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:12:9c:27:29:13:ec:ed:7f:63:7e:3c:13:72:b8:aa:16:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
        Validity
            Not Before: Mar  5 17:46:08 2024 GMT
            Not After : Mar  4 17:51:08 2025 GMT
        Subject: CN=8BE9FE04182B1E74E4B8122BC509CBBA0D1B7FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:3d:5b:b4:76:c9:0a:48:5c:b1:f0:be:93:
                    4d:42:f0:aa:0b:7b:f2:d8:cb:0b:01:a3:70:fb:cc:
                    22:5d:b5:a4:48:a3:46:a8:0b:27:8e:06:be:68:bb:
                    fb:00:8d:19:20:e6:08:a3:88:34:a2:81:b8:c1:bd:
                    3f:92:2f:da:e9:4c:33:40:3d:3e:a8:88:d9:58:2a:
                    09:a4:c8:b4:22:52:7c:d5:5f:ec:7f:3a:cb:a5:5d:
                    a3:91:47:e6:b6:f7:14:ab:f8:50:30:9b:59:fd:10:
                    00:83:a4:95:0e:7d:eb:e8:1f:c2:48:69:3d:4d:ac:
                    88:52:70:38:62:ba:8a:35:db:e3:ec:51:04:94:1b:
                    ec:4f:da:b7:90:82:71:38:04:49:ba:04:21:1b:7a:
                    99:ad:c2:07:36:df:19:4f:d3:d1:1c:97:c6:43:06:
                    42:75:4e:14:1f:c9:ca:f3:8c:d6:6c:f6:3b:d1:17:
                    f1:ba:71:3e:38:8d:9b:b8:af:b4:b6:09:c1:26:4b:
                    5b:a5:09:0e:00:c9:19:f4:50:be:a6:7b:3a:b7:60:
                    60:ca:a3:8b:be:d2:0e:86:f0:5b:8b:a7:ae:a6:72:
                    00:fc:0b:de:1f:d5:9f:11:4e:3e:da:4c:db:df:02:
                    41:db:75:3f:6c:9f:4f:7a:e6:df:36:2c:dc:56:5d:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E9:FE:04:18:2B:1E:74:E4:B8:12:2B:C5:09:CB:BA:0D:1B:7F:A4
            X509v3 Authority Key Identifier:
                keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:20:6a:59:44:24:da:a2:0c:fb:49:69:cd:f5:88:c6:74:
         41:4c:7a:5d:69:56:e3:5f:11:15:03:34:17:87:29:31:5d:c7:
         3e:d4:1b:9f:35:5c:36:ab:6e:95:e4:ad:22:d4:14:54:18:69:
         81:6b:37:e5:77:fd:77:1b:ff:98:f5:a1:6e:b3:43:a9:f9:aa:
         5e:e6:33:ae:58:ca:d6:45:81:cd:61:8e:fd:a5:b3:a5:8c:47:
         68:e0:90:10:64:6d:ac:cb:c4:2a:32:6a:88:0a:e4:1f:ac:45:
         59:24:d4:38:fb:4d:1e:ba:6b:18:46:44:96:0d:04:dd:2e:b9:
         34:b4:fe:ac:83:29:80:e7:56:f5:42:b6:c9:28:17:a2:82:60:
         98:1a:0c:01:77:60:cf:6f:38:2b:bc:09:e1:3d:33:81:0a:33:
         6a:d3:0d:8e:db:4b:51:9b:98:6c:e4:eb:27:cf:26:7f:2c:e6:
         b0:86:05:ea:b2:60:d7:e8:ad:a6:d4:f1:23:d8:72:46:e2:ff:
         18:54:2d:b0:09:14:71:cf:ac:34:98:17:42:88:27:11:5e:63:
         f4:06:f3:74:7c:81:32:25:f4:49:87:0a:41:c6:2a:ce:62:a3:
         84:2a:0d:1b:3a:25:3b:92:c7:4b:cb:ea:f4:48:06:3d:0e:6f:
         07:9c:f3:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 19:11:29 2024 by rpki-client on console-fra.rpki-client.org