Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/323830333a646565303a3a2f33322d3332203d3e20323639393931.roa
File:                     323830333a646565303a3a2f33322d3332203d3e20323639393931.roa (raw, json)
Hash identifier:          WtwCP8XCYot+QGpNII0a5fjsa8Da/4uwdkXbC1Aog14=
Subject key identifier:   66:16:E6:79:ED:08:7F:67:91:96:40:5C:62:D7:4C:F7:AE:12:28:5A
Certificate issuer:       /CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
Certificate serial:       2408A87646C35A9B09BB4D59B253E00210CD51A2
Authority key identifier: 9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/323830333a646565303a3a2f33322d3332203d3e20323639393931.roa
Signing time:             Tue 05 Mar 2024 17:47:49 +0000
ROA not before:           Tue 05 Mar 2024 17:42:49 +0000
ROA not after:            Tue 04 Mar 2025 17:47:49 +0000
asID:                     269991
IP address blocks:        2803:dee0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 16:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:08:a8:76:46:c3:5a:9b:09:bb:4d:59:b2:53:e0:02:10:cd:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
        Validity
            Not Before: Mar  5 17:42:49 2024 GMT
            Not After : Mar  4 17:47:49 2025 GMT
        Subject: CN=6616E679ED087F679196405C62D74CF7AE12285A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:d7:ff:7b:da:47:97:53:a3:01:ba:d7:77:
                    fe:29:d0:cb:34:8a:8a:1c:82:00:30:b7:c8:69:3c:
                    cf:db:8c:d3:53:43:69:ca:83:cc:cf:c6:e5:a2:c7:
                    99:be:11:58:73:dc:a5:e1:7a:66:3b:6d:88:97:31:
                    1d:66:fd:ec:62:7d:b9:93:83:73:be:0b:35:83:98:
                    db:46:83:e1:93:b1:7a:bc:16:21:9c:bc:60:09:1a:
                    84:f9:5f:92:79:c9:eb:d7:eb:eb:8b:d1:c7:f0:04:
                    96:ac:cf:be:2d:e7:6b:15:6b:28:2e:9e:8d:9b:31:
                    4d:dd:3f:d3:5a:04:e0:51:a9:4e:7e:6a:c0:a6:63:
                    0d:9a:c2:69:93:30:c5:b7:c9:ea:8f:18:ab:66:46:
                    a9:1f:e3:f3:ed:76:fe:7e:07:d2:cc:03:2e:58:6e:
                    60:27:de:e3:69:c0:73:f8:38:29:23:09:40:cc:fd:
                    3e:c2:50:07:ba:2d:f6:5c:6a:21:c0:68:87:0f:f1:
                    12:78:2b:2e:4a:95:f1:ad:7b:40:94:3a:b9:db:2d:
                    4b:20:f0:56:31:9c:f6:27:45:e4:20:d4:45:2c:63:
                    7c:f5:a7:26:55:08:ed:54:9d:52:71:e5:6d:8d:e4:
                    c2:f9:45:42:b0:09:75:09:19:ba:11:87:38:1a:78:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:E6:79:ED:08:7F:67:91:96:40:5C:62:D7:4C:F7:AE:12:28:5A
            X509v3 Authority Key Identifier:
                keyid:9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/323830333a646565303a3a2f33322d3332203d3e20323639393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:38:a6:4b:06:b2:eb:bf:0b:d0:f1:34:10:71:ee:9c:f6:b4:
         29:5b:e5:aa:e3:18:59:fd:9f:06:d6:2f:8d:31:b1:5f:f3:25:
         8f:21:54:b0:11:1a:84:de:63:8e:10:93:db:8e:a7:62:61:49:
         6c:79:fd:51:68:a2:14:dd:ea:66:6f:93:62:05:8b:c4:fd:fd:
         1b:03:17:f6:67:c1:f5:fc:10:6d:ca:49:40:fa:d8:55:f1:6c:
         eb:16:36:50:b5:c2:ba:03:ed:db:94:e5:a3:53:03:b8:c2:de:
         4d:e3:75:e6:2e:08:5a:9f:91:70:f7:6f:f0:5d:75:3a:ec:5a:
         68:b3:92:6f:cd:77:c7:1e:e4:72:b8:e8:b9:a7:97:bb:29:d5:
         13:24:8c:ed:53:2f:9b:ce:8d:b8:38:34:1c:e5:88:76:b4:ca:
         e4:9f:3d:a9:b7:0f:32:c5:29:f4:40:6d:dc:cb:3d:d7:f2:5c:
         bd:5a:f0:4e:7f:97:91:aa:f3:f3:1f:93:57:c1:0b:b1:7c:1d:
         e5:c2:a9:6e:3d:6a:a1:bc:42:d2:1a:22:ab:7f:aa:40:03:e1:
         f2:15:fa:91:51:ee:89:17:6f:3d:ef:22:70:38:8d:1f:2b:ce:
         7a:89:c8:c1:5f:84:66:0a:e1:4d:a4:26:c1:cd:bf:a4:aa:8a:
         74:b1:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:24:11 2024 by rpki-client on console-ams.rpki-client.org