Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          wFICvoYBW0fbpm0iLpgWM0sNOMrirqXzeq6aPtVKvI0=
Subject key identifier:   1D:02:50:EE:2C:AA:39:94:89:B8:EF:C7:1A:84:C0:83:7C:E9:57:04
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       3D75357DB6266FFF8EDB22522478CDDCB4F6CA3C
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Tue 05 Mar 2024 18:04:28 +0000
ROA not before:           Tue 05 Mar 2024 17:59:28 +0000
ROA not after:            Tue 04 Mar 2025 18:04:28 +0000
asID:                     267919
IP address blocks:        2803:ee60:c0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:75:35:7d:b6:26:6f:ff:8e:db:22:52:24:78:cd:dc:b4:f6:ca:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Mar  5 17:59:28 2024 GMT
            Not After : Mar  4 18:04:28 2025 GMT
        Subject: CN=1D0250EE2CAA399489B8EFC71A84C0837CE95704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:9d:eb:c8:a8:8b:9a:b9:04:7b:76:7d:46:
                    27:40:09:75:b2:41:14:2f:cb:f8:01:d3:77:fb:2f:
                    0c:17:b9:23:5c:7e:f1:62:b3:cf:1a:b6:39:07:6e:
                    89:ba:89:3e:7e:52:da:21:d4:3f:f2:22:b6:d9:88:
                    f9:40:22:2f:e0:ec:81:5f:38:7d:66:31:07:84:3c:
                    52:a0:e8:73:d5:6e:3b:60:4e:6a:1b:7c:a0:eb:a1:
                    c8:a5:4a:69:56:3d:91:63:01:36:55:87:bf:da:70:
                    55:8a:4e:28:0b:68:fe:9b:a4:54:d1:6a:e2:98:41:
                    93:92:8c:b2:76:5b:f4:04:b2:ff:fb:25:6f:1a:cf:
                    30:25:1d:fc:21:dc:c5:8d:6e:c4:8f:13:0b:1f:af:
                    0e:d8:4c:ef:0b:86:00:51:c2:d4:c1:3b:35:ad:84:
                    f0:7d:3b:95:fb:34:64:00:23:09:d4:7a:19:97:18:
                    b1:d1:1b:9f:57:62:df:27:14:ac:a9:cd:6f:aa:1b:
                    1b:fa:73:ba:65:60:de:9b:a8:b8:73:76:e9:31:86:
                    3f:9a:28:14:02:e7:b0:94:d6:f8:c5:20:d5:1c:91:
                    3e:b8:e4:87:c8:72:d5:33:82:a8:ac:3e:8c:7e:d3:
                    6c:1e:b5:29:48:92:81:f3:d2:cd:d7:9c:5a:19:cd:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:50:EE:2C:AA:39:94:89:B8:EF:C7:1A:84:C0:83:7C:E9:57:04
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:87:25:f2:4c:da:4d:89:89:3a:91:5f:a1:23:b2:01:90:
         78:d6:a7:1b:fc:f0:6a:97:be:e4:18:8c:8a:31:81:89:30:84:
         5d:54:41:2d:18:34:9f:b5:7f:1f:d8:fd:60:6a:2a:17:67:1a:
         a6:20:dc:31:6d:1c:e4:a5:f8:26:fa:06:70:b3:e3:2d:cd:49:
         ad:6a:2c:f9:e2:b5:ee:85:5c:98:34:a5:7f:84:21:06:c5:38:
         ae:29:eb:14:ea:28:d2:df:21:c6:a3:d9:08:c1:63:1b:e6:12:
         2b:dd:3f:af:c2:1e:ca:21:55:af:c2:12:25:2e:75:6f:b5:41:
         4c:c0:ff:8c:13:55:26:6a:78:a1:1e:b5:68:cb:87:d1:f0:c2:
         46:ec:39:cd:dd:61:d7:b1:4c:6e:9a:26:eb:c7:d0:1c:24:77:
         f6:cc:fe:81:f7:09:dd:a7:3c:ea:76:a6:62:92:49:37:18:ae:
         01:80:ef:58:73:1c:a6:07:a8:70:54:79:c7:d7:8e:ab:b1:89:
         f0:28:6c:ad:99:9c:d8:c5:57:99:96:70:11:ad:d5:6b:b5:e5:
         be:14:fe:b7:f1:01:79:dd:22:2b:0d:33:02:2b:76:c1:ff:bd:
         60:88:cc:35:2c:41:63:d5:fe:d9:bb:fe:56:6a:39:7f:88:e6:
         87:a1:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org