Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031303a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031303a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          v2E4Lo0PVD0xZUhv72QK4jIcXTwVIzzdJtzZG2TNfMk=
Subject key identifier:   3C:24:09:01:61:D3:44:B2:A7:39:D1:05:73:47:84:52:92:7D:30:67
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       013C1525710876E2DA5AE2786FABD592D75B3ED4
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031303a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Mon 27 May 2024 20:50:00 +0000
ROA not before:           Mon 27 May 2024 20:45:00 +0000
ROA not after:            Mon 26 May 2025 20:50:00 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3c:15:25:71:08:76:e2:da:5a:e2:78:6f:ab:d5:92:d7:5b:3e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 27 20:45:00 2024 GMT
            Not After : May 26 20:50:00 2025 GMT
        Subject: CN=3C24090161D344B2A739D10573478452927D3067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:4c:d4:fc:91:fb:22:77:5b:3a:aa:ba:e4:
                    1b:75:51:d1:14:2f:1f:29:b9:2f:a8:36:0e:33:44:
                    b2:e9:3c:9e:ec:4e:91:35:77:57:71:b8:39:dc:a4:
                    01:22:3d:c1:a0:af:78:41:eb:9d:9f:5a:5f:16:1a:
                    52:32:87:62:8c:1e:91:da:f1:59:3a:4f:35:d5:8a:
                    7f:fd:52:b4:69:ee:56:30:30:fa:be:9f:a0:43:aa:
                    ea:de:2e:c4:a4:17:65:81:2b:1f:5f:1f:10:b7:83:
                    7c:7e:5c:c8:14:87:22:e1:e7:63:fd:9b:8a:94:5e:
                    2d:2f:83:2e:b3:0a:c6:63:b2:fa:0a:93:dc:66:17:
                    7a:14:ea:81:c7:b7:24:c4:9a:21:90:3a:2e:cb:19:
                    a3:85:6e:8b:ad:b9:1d:64:fc:63:a4:6b:7f:ac:cb:
                    dd:7e:97:a9:d3:d9:50:af:f6:91:c1:52:67:7a:84:
                    49:53:84:5c:11:e9:e1:11:15:44:74:dc:c2:d2:41:
                    0a:42:99:bd:1b:c7:fb:f6:f8:a3:8f:d6:75:38:59:
                    ea:3f:30:00:c3:c6:12:da:90:40:d7:0e:71:ec:59:
                    b8:a1:9e:95:47:18:f8:e8:b1:aa:8a:52:f9:2c:1c:
                    e0:28:6b:c1:21:6e:ca:e1:7b:aa:77:3c:ed:da:0d:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:09:01:61:D3:44:B2:A7:39:D1:05:73:47:84:52:92:7D:30:67
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031303a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:93:1e:9e:24:0b:07:ae:3d:9a:4d:56:57:de:69:e7:a1:f6:
         16:c8:04:7b:89:72:29:9e:19:75:bd:c5:45:7e:0f:f7:88:52:
         e2:72:e7:e1:49:33:b7:ef:af:b0:6a:a8:aa:0d:8f:48:23:44:
         7e:65:59:d3:96:ae:fb:5b:b0:ba:73:44:48:93:c4:c6:d3:fd:
         19:87:e2:32:84:63:25:bc:43:e0:c7:18:c5:70:c6:a0:e6:b3:
         d2:43:cc:9b:de:34:e5:d9:d1:9a:97:f2:b2:02:d1:12:dc:9b:
         4d:27:55:10:58:76:b8:78:6f:2b:3e:41:4f:74:64:06:14:98:
         ca:26:1e:b0:6c:cc:75:03:eb:7f:c5:e3:a4:4c:76:a0:93:c1:
         37:4e:6e:de:eb:c0:b2:03:82:1d:c3:04:31:b6:83:9a:2a:12:
         14:82:b1:c9:fe:27:1f:fd:29:fa:23:62:b3:8d:e6:0f:b4:74:
         e3:9d:5e:d9:32:01:36:d2:09:48:f5:3c:9f:92:0a:89:68:b4:
         4f:c4:d0:38:9d:e6:50:55:f4:5e:2f:83:b0:91:3b:e1:58:18:
         c2:2f:91:f3:6a:9f:e7:8e:75:2f:fb:04:22:98:6e:ce:03:9e:
         c4:50:76:3b:b6:aa:dd:6e:47:a8:3b:ff:7b:a9:f6:04:b6:fe:
         f0:38:2f:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org