Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a34303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a34303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          qc0Td4Vu3b6ic7pVgWXDTGDYyI6thdrVcacBjT9s7lw=
Subject key identifier:   7B:76:A1:20:AF:CC:F5:51:3B:B4:8D:C7:05:7E:1C:63:0D:60:22:00
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       10F02EC7F2B0E0A050B7F259537D32294529A486
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a34303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Thu 19 Sep 2024 12:15:00 +0000
ROA not before:           Thu 19 Sep 2024 12:10:00 +0000
ROA not after:            Thu 18 Sep 2025 12:15:00 +0000
asID:                     267919
IP address blocks:        2803:ee60:40::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Nov 2024 16:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f0:2e:c7:f2:b0:e0:a0:50:b7:f2:59:53:7d:32:29:45:29:a4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Sep 19 12:10:00 2024 GMT
            Not After : Sep 18 12:15:00 2025 GMT
        Subject: CN=7B76A120AFCCF5513BB48DC7057E1C630D602200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:54:03:02:f3:52:63:b8:cb:6f:a6:f8:4d:
                    62:a6:10:f0:94:8e:50:c1:16:29:a2:62:83:20:17:
                    bb:e7:fd:87:a2:0c:b0:ba:f4:6f:9d:be:8f:65:4a:
                    60:ac:ad:8f:56:7a:38:eb:f3:6b:79:7f:1e:88:08:
                    20:b6:bb:fb:1f:67:13:a3:1a:4f:ca:b6:90:34:ed:
                    f5:17:41:2e:db:15:3a:97:7f:c4:28:4c:ca:3a:96:
                    d5:48:a9:06:25:a6:28:f8:66:20:7d:ce:53:35:11:
                    dc:1c:af:b4:f2:05:dc:a6:60:ef:95:5b:d1:00:c3:
                    44:26:3c:f5:7a:61:8e:38:e0:7a:af:1d:ae:33:0e:
                    69:81:fb:e7:dd:b2:69:a6:9f:db:cf:76:f1:53:81:
                    05:08:dc:40:03:dc:b4:76:21:6f:cb:b2:00:a6:49:
                    89:03:98:c1:08:98:2c:c1:24:15:36:65:c8:97:7c:
                    9e:9c:0a:4a:df:78:b4:67:00:bb:96:5f:ca:9e:37:
                    be:77:a3:06:b5:cd:3a:49:59:48:21:c1:20:fa:56:
                    14:ed:89:00:48:c6:b1:d2:84:7b:47:a9:63:39:4d:
                    14:f3:a5:44:4c:95:71:fd:45:09:21:c0:8c:fe:5d:
                    23:1f:18:11:a7:20:6f:37:d2:23:76:bf:b2:4b:09:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:76:A1:20:AF:CC:F5:51:3B:B4:8D:C7:05:7E:1C:63:0D:60:22:00
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a34303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:30:5c:c8:78:bd:86:29:72:cc:b4:2b:63:65:dd:26:cd:d8:
         d7:8a:4a:cd:ed:f7:2c:a4:a0:3b:ba:cc:f9:77:0c:e4:0a:53:
         22:ed:6b:6c:ac:f1:b7:9a:32:a5:94:e3:6e:40:32:f7:5c:55:
         91:8b:af:89:86:d5:6a:d4:89:dc:39:17:33:b4:cd:99:91:78:
         df:b8:63:27:ce:ca:57:3a:d9:cc:71:e4:9d:a0:ae:c1:ef:eb:
         83:32:52:fa:d1:69:02:72:5e:d1:92:ce:d5:5c:21:9c:92:25:
         e9:0f:08:e3:b8:66:30:0e:78:2f:fa:1b:05:3d:5e:37:53:cf:
         b5:3c:50:ed:65:b6:6b:fd:db:ec:5c:c2:ea:b3:13:3d:2c:ed:
         4c:66:1c:24:0a:e6:20:89:a2:27:40:ce:3b:ee:21:99:5f:0e:
         6c:18:45:49:94:ff:bd:3c:99:13:cd:18:d2:91:2e:4f:98:87:
         9d:7b:7d:2b:15:dc:6b:81:2c:78:7f:ef:18:5b:d0:37:c2:5d:
         10:51:5e:5a:12:ea:b3:6f:fe:76:3b:e2:3c:89:c8:4b:c1:f7:
         e1:0f:76:db:63:db:ff:8e:99:cc:a2:fb:50:a3:e1:0b:9d:9d:
         0d:29:6e:12:cf:50:af:f5:86:2d:ed:83:c7:35:c4:56:95:93:
         17:24:a7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 23:38:38 2024 by rpki-client on console-ams.rpki-client.org