Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          JGoXRz0tyDZ0W+y1tc67D0HWjnENyXOGRORiZWdpqDw=
Subject key identifier:   4F:AB:43:DE:4F:12:E0:A7:5C:14:3F:17:47:D1:0E:40:27:54:FE:DC
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       6489E6AB6734C013CCDA3D9472CE31964E1A65B8
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 06 Sep 2024 22:55:02 +0000
ROA not before:           Fri 06 Sep 2024 22:50:02 +0000
ROA not after:            Fri 05 Sep 2025 22:55:02 +0000
asID:                     267787
IP address blocks:        2803:4fa0:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:89:e6:ab:67:34:c0:13:cc:da:3d:94:72:ce:31:96:4e:1a:65:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Sep  6 22:50:02 2024 GMT
            Not After : Sep  5 22:55:02 2025 GMT
        Subject: CN=4FAB43DE4F12E0A75C143F1747D10E402754FEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:68:6e:1d:43:66:ec:50:a6:75:5e:96:26:
                    9e:17:33:9a:37:3d:67:26:a7:36:d4:a7:99:9b:bc:
                    da:c6:de:bc:2c:9c:12:66:9a:d1:e2:57:84:d2:bd:
                    2a:f6:33:91:98:06:56:31:2a:e1:fa:d6:59:23:44:
                    42:14:29:3c:64:8e:7f:36:dd:97:75:e7:d3:3d:c3:
                    bc:b7:79:6a:e3:b2:f6:88:6e:22:e6:26:b1:94:96:
                    9a:c5:09:b0:0f:d5:7b:5d:5d:32:b8:41:d1:c7:8b:
                    de:c9:b3:00:08:98:ef:2c:05:57:c3:b6:e8:ee:e9:
                    24:5e:0f:f9:c7:cd:1b:42:50:1e:9a:d5:f4:e1:6b:
                    9e:bd:bc:dc:0f:84:13:04:b9:7a:b0:75:c1:45:79:
                    31:fe:0e:c9:6c:c0:26:48:04:9e:31:c7:41:8b:37:
                    07:91:c2:54:cd:f3:a5:d6:f4:42:94:53:a8:8c:6b:
                    69:fc:94:7f:75:ed:c6:7b:eb:d0:4c:a1:99:30:ca:
                    16:42:22:8f:48:03:7e:b1:03:31:4e:aa:29:72:7f:
                    a4:3a:35:fa:ee:87:3a:7d:e3:33:94:ed:c7:66:47:
                    24:05:02:56:3e:5f:9c:59:c2:5c:62:9a:6b:50:f6:
                    72:a7:c4:a1:26:a0:07:67:62:18:10:6a:d3:ba:c1:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:43:DE:4F:12:E0:A7:5C:14:3F:17:47:D1:0E:40:27:54:FE:DC
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a363a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:4a:b5:0e:0e:41:52:0f:82:cd:8f:01:d3:07:74:e2:88:
         5a:2c:b8:2b:7f:3c:ec:74:18:b8:a4:5c:bd:de:fe:b4:4c:ef:
         4f:39:3f:e9:ca:e2:b3:7d:a4:f4:6d:e6:82:a5:89:f2:09:da:
         a4:61:c4:9d:19:8d:ec:83:89:17:7a:20:5e:6e:f5:a3:36:0a:
         10:ac:a1:d0:f3:41:fd:82:9e:99:c3:b8:2f:c3:d0:41:0a:c1:
         d9:42:c5:c1:da:d2:0f:0d:71:c1:c6:52:ef:5f:e0:c1:3a:f7:
         29:a9:be:1a:bf:9f:d0:91:20:68:0e:03:f9:24:9a:e3:3a:a4:
         49:8e:d1:1f:df:c2:c1:37:44:b2:0f:23:8d:01:a1:c3:e3:7a:
         d0:b2:f1:40:d8:d3:dc:83:5f:34:07:b6:59:9a:3c:61:6b:09:
         96:02:a7:57:7c:2c:e7:c8:b1:d8:57:eb:bf:1f:ff:84:79:16:
         fe:b7:d9:5d:d7:c0:00:c0:c2:31:b7:c8:48:a8:62:93:70:20:
         23:f6:2a:7c:1f:c3:eb:96:f2:f3:13:6e:c9:3f:59:e1:13:46:
         4e:15:e4:75:0e:58:f6:f7:73:db:b8:ae:f8:19:df:99:40:5a:
         90:2d:9b:ce:4e:73:0b:22:7d:36:5b:3b:18:fb:1e:6a:db:ef:
         f2:a6:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:08:42 2024 by rpki-client on console-fra.rpki-client.org