Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa
File:                     323830333a643635303a3a2f33322d3332203d3e20323733323037.roa (raw, json)
Hash identifier:          rgJHNKzK4jIdGm64Lvv9MWFo3wDRPPkZEGhr1IOsl5w=
Subject key identifier:   46:2E:3C:2A:67:03:98:66:1E:7D:CC:82:25:10:75:EB:72:BD:83:58
Certificate issuer:       /CN=6702CFD6C64C6F0FBB5330412BAF62BD85FAE668
Certificate serial:       18C567835705FAB08909D8883F21281F46AF5687
Authority key identifier: 67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa
Signing time:             Fri 02 Aug 2024 00:15:00 +0000
ROA not before:           Fri 02 Aug 2024 00:10:00 +0000
ROA not after:            Fri 01 Aug 2025 00:15:00 +0000
asID:                     273207
IP address blocks:        2803:d650::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:67:83:57:05:fa:b0:89:09:d8:88:3f:21:28:1f:46:af:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6702CFD6C64C6F0FBB5330412BAF62BD85FAE668
        Validity
            Not Before: Aug  2 00:10:00 2024 GMT
            Not After : Aug  1 00:15:00 2025 GMT
        Subject: CN=462E3C2A670398661E7DCC82251075EB72BD8358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0c:d5:7d:82:ab:e7:ba:79:14:f2:2c:17:6f:
                    9d:32:ab:6f:eb:68:9a:29:1b:a6:04:76:ce:9b:26:
                    92:b7:9b:32:87:7f:67:2f:f6:13:3b:85:8f:9f:85:
                    56:79:94:d5:92:51:16:88:f4:09:ad:43:ae:a1:84:
                    c2:5f:bc:d1:e7:ff:b8:5f:d6:70:67:f3:47:2e:20:
                    92:b5:6c:3b:4b:9f:37:e4:20:b0:dd:90:04:b3:13:
                    32:55:4c:e4:7d:f7:16:06:62:41:4e:e4:ac:aa:3f:
                    9d:06:19:34:ce:3d:45:59:05:67:14:53:85:72:51:
                    c7:da:21:58:fe:91:6f:8f:94:3e:ff:f3:01:05:8a:
                    24:e2:da:65:3b:53:6e:93:11:01:c1:39:f4:1c:c5:
                    5e:a6:61:95:d1:9d:d4:8c:4d:c5:6b:95:6b:90:27:
                    2e:ff:87:5d:43:af:eb:0d:ca:e1:21:8d:c6:74:81:
                    db:e1:10:95:05:dc:d5:5c:89:03:34:af:58:f6:e7:
                    c1:02:13:68:bc:50:7e:64:ac:06:11:4d:86:ba:69:
                    2e:34:6c:81:27:cc:4b:ec:f9:c3:c1:05:13:21:a5:
                    12:4f:99:a9:19:72:68:e9:44:f1:af:8c:62:c5:2d:
                    80:e4:66:dc:0d:16:1a:ca:16:00:f4:b9:d3:a5:8a:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:3C:2A:67:03:98:66:1E:7D:CC:82:25:10:75:EB:72:BD:83:58
            X509v3 Authority Key Identifier:
                keyid:67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3332203d3e20323733323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d650::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:32:6a:70:c7:fd:70:97:34:8b:44:c5:cc:0f:2d:f3:c3:
         b4:cc:b5:8b:7f:8f:f8:03:2d:95:9b:94:b8:7f:c8:d1:16:16:
         13:6b:59:25:a6:2a:e7:42:6a:ac:cb:8f:8b:28:d7:6f:4b:33:
         ad:be:a9:11:6b:79:e8:b0:98:4d:01:21:33:3e:75:13:20:6a:
         44:22:be:4e:a1:7c:f0:b8:a1:01:b7:bd:c0:68:12:a2:12:0c:
         e1:66:7e:ea:7f:24:d3:fc:52:3c:fa:c5:1b:4b:f2:9a:a9:c2:
         ff:3b:12:47:99:7b:b0:7d:66:f4:6e:e2:38:bc:c6:80:f4:f8:
         4f:68:02:60:e8:36:5f:47:39:23:7f:13:f3:b7:80:1a:22:1c:
         23:80:34:66:41:20:25:56:b8:92:e2:3c:3d:9c:e6:19:d6:a6:
         da:52:68:d2:1d:53:4c:22:c7:48:de:6b:70:f3:e7:ad:d8:6a:
         79:2d:1c:83:c8:2e:e4:72:9e:ed:0c:9a:1b:24:c4:cb:59:f3:
         bd:54:e4:f0:17:fc:e8:e4:c6:f1:c4:6a:08:13:d4:3e:a7:90:
         77:6e:6f:ab:01:95:ff:d3:ad:f5:e2:3e:07:f8:a2:26:47:d2:
         51:32:29:99:2c:8c:73:69:7b:b1:44:62:86:8f:ce:09:12:5d:
         ca:27:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:21 2024 by rpki-client on console-fra.rpki-client.org